Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File:                     AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier:          +jI17+CGksR7BwUMH4ls+zjv3c54ZeeFTlbhE++wjPQ=
Subject key identifier:   E7:2E:52:63:FC:B1:07:72:7F:99:3C:0D:65:88:2D:52:0B:8A:8E:C4
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer:       /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial:       018F43B370B1F0120EE96944645429C68AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number:          07F5
Signing time:             Sat 04 May 2024 13:03:04 +0000
Manifest this update:     Sat 04 May 2024 13:03:04 +0000
Manifest next update:     Sun 05 May 2024 13:03:04 +0000
Files and hashes:         1: 79dsb6m8lxQGeN98A2c22wDk_1U.roa (hash: 2vSUhV1XKfWdLmwKr9kntoa1QPOvp8rjMtJgsJj6Lv4=)
                          2: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: Je4PLtEupP2vVt6BQKYc08Em0ZwWQ7UqyBOJRpmCzgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:70:b1:f0:12:0e:e9:69:44:64:54:29:c6:8a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
        Validity
            Not Before: May  4 13:03:04 2024 GMT
            Not After : May  5 13:03:04 2024 GMT
        Subject: CN=e72e5263fcb107727f993c0d65882d520b8a8ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:62:ae:45:47:ff:ce:09:d1:ae:cb:9d:f6:
                    8e:1e:87:fe:60:b4:d5:ce:e5:79:be:76:e4:31:ed:
                    15:56:88:7b:18:7b:7a:48:ba:70:18:be:77:fa:78:
                    63:a4:35:0b:38:dc:f1:98:72:39:77:7a:2c:a1:0f:
                    75:17:58:d1:9f:c9:40:ba:df:38:29:41:b4:63:ca:
                    f9:fb:22:6d:15:68:b8:e6:c5:79:7d:ce:e6:f9:33:
                    89:8b:93:22:83:d5:9c:5f:13:3d:04:b4:d5:ba:43:
                    cc:9a:8c:6b:0d:6a:78:fa:f0:dc:18:23:df:46:be:
                    2e:94:5f:0b:15:47:a9:ed:31:de:d0:3b:82:1e:ae:
                    ad:f5:d0:11:1f:8b:62:21:10:81:0b:3a:58:c5:75:
                    a0:18:38:f9:80:7e:66:fa:6e:d8:b7:c3:03:ea:6f:
                    d4:b6:9e:3a:ae:42:6b:ee:69:2a:c5:9f:ea:aa:5f:
                    db:11:d7:77:3b:7a:bd:d5:3d:9d:3d:c7:0e:d1:45:
                    d5:80:72:36:4d:3f:06:5b:44:e9:83:05:67:ed:ea:
                    64:d1:5b:67:ba:a3:0f:ca:00:7c:f9:3a:f3:27:d4:
                    f3:ae:a4:05:84:cb:7c:17:81:80:0e:b0:c8:7d:1d:
                    4c:25:33:b3:17:29:30:fe:47:86:49:27:4a:ed:5f:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2E:52:63:FC:B1:07:72:7F:99:3C:0D:65:88:2D:52:0B:8A:8E:C4
            X509v3 Authority Key Identifier:
                keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:0c:f4:2e:ce:cf:55:b1:22:bb:a9:4d:c4:6f:57:a0:36:
         3e:f7:fa:45:e1:ba:1a:99:ab:6d:99:6b:8f:dc:fb:86:23:cb:
         35:2e:57:eb:f4:9b:be:1a:37:2d:4e:9a:ff:6d:96:43:f7:e3:
         d0:b4:29:bd:58:8e:fb:18:ca:e7:fd:7e:6d:7d:57:fa:2b:f0:
         77:79:1d:5f:a1:84:66:27:18:a6:7c:8d:f4:6c:b5:56:15:10:
         1e:3d:46:3a:ba:d6:e3:b2:68:48:d5:e7:2e:bb:dd:31:63:6b:
         4f:06:f5:5c:59:0f:f1:e2:41:3b:39:3e:3e:94:da:35:d6:95:
         d8:fe:0a:2a:44:fd:a0:76:cb:d7:13:17:2c:56:0a:5f:2a:39:
         ef:ba:f0:a1:61:6f:9c:e8:f8:bf:0e:6e:93:81:98:c2:ed:89:
         eb:81:71:a2:5a:4b:da:42:42:23:e3:b6:4c:d6:27:c5:8f:27:
         43:17:fb:5d:dc:6e:95:00:ac:db:33:e4:43:aa:e4:89:90:a3:
         be:fc:93:36:78:73:60:8a:6d:d6:48:8e:ec:31:63:2b:26:ca:
         c4:75:8b:f4:79:ab:4e:b0:c5:5b:46:63:49:05:2f:7a:4e:e4:
         d1:4f:a9:45:f5:d4:5e:75:01:51:36:b4:9c:fa:ad:ef:38:4d:
         a3:6e:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:16:55 2024 by rpki-client on console-ams.rpki-client.org