Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File:                     p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier:          6qYXBBPr/W4UOe9Au9vnai7MBj3iCbuaEvPeGFQ0WA0=
Subject key identifier:   2A:43:C9:65:B6:16:0F:D8:98:6D:57:32:B6:CA:AD:66:A6:C6:67:4D
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer:       /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial:       018F87B6589BDC4B02240456B116C5026230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number:          0E7B
Signing time:             Fri 17 May 2024 18:00:25 +0000
Manifest this update:     Fri 17 May 2024 18:00:25 +0000
Manifest next update:     Sat 18 May 2024 18:00:25 +0000
Files and hashes:         1: fugmZq2H-wukHSN6q8GQwR_6DtM.roa (hash: iLrDdWhXO76aVbwbcvCGr52+D/z2ZkfCSkdA3Q6tz48=)
                          2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: 4s59J3T1jmrZ5sk1fyQzZtCgU3pfm+pOVvrrK/dEtdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:58:9b:dc:4b:02:24:04:56:b1:16:c5:02:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
        Validity
            Not Before: May 17 18:00:25 2024 GMT
            Not After : May 18 18:00:25 2024 GMT
        Subject: CN=2a43c965b6160fd8986d5732b6caad66a6c6674d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:81:56:c1:0b:b6:d4:57:a4:a9:30:54:d3:
                    98:02:11:52:41:b5:1e:94:f7:80:35:2b:64:a5:1c:
                    f6:62:74:ab:aa:55:ec:5d:37:46:16:8b:59:65:a3:
                    5b:e0:d3:1d:2f:f4:53:d1:e4:5a:6b:a3:a0:f2:88:
                    22:ff:fc:bf:3d:58:23:37:ad:e8:be:7d:9a:53:21:
                    b8:67:91:99:4a:3d:12:bb:f4:77:0e:0d:9e:7e:e3:
                    01:24:55:89:ac:2c:1a:ca:ee:75:04:84:87:c4:7e:
                    62:84:2b:c5:b1:80:29:72:e0:66:15:33:f4:bb:a1:
                    83:07:ff:9e:b7:70:7f:a6:27:c1:f2:4f:57:ef:24:
                    04:73:20:89:36:4c:72:84:5a:f6:4d:4a:0a:32:c8:
                    3e:e4:7f:87:e4:52:7d:2a:15:49:d7:7f:7c:c9:62:
                    3a:08:db:78:30:a7:c4:dc:fc:3d:88:28:c2:53:0d:
                    c3:45:26:ee:89:0c:97:fd:22:3f:7a:60:75:2c:2c:
                    1b:a7:7f:f0:2f:0f:52:4a:da:11:b2:28:a6:3e:be:
                    03:01:0a:4c:9c:78:21:2f:77:9e:12:49:bf:4d:23:
                    8a:48:67:1a:b9:e8:2f:76:e1:0e:cb:70:d2:57:a1:
                    f3:27:3a:cb:c7:02:ab:f5:64:be:31:e3:fb:be:5e:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:C9:65:B6:16:0F:D8:98:6D:57:32:B6:CA:AD:66:A6:C6:67:4D
            X509v3 Authority Key Identifier:
                keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:38:65:d3:87:2c:9d:bb:94:b0:d4:45:16:0a:27:52:18:18:
         db:2c:19:67:fc:7d:a6:f3:45:e0:80:4a:75:54:e5:9e:ad:2b:
         1a:7f:a1:f7:e1:ca:f6:2c:dc:ab:9d:3b:b8:fe:a9:b8:2b:87:
         b7:cb:05:63:3c:90:10:4b:b2:6d:31:68:ce:7f:5f:c3:00:38:
         4e:ea:c6:0d:3f:f2:d7:0b:52:f6:ef:31:fb:34:0c:38:37:47:
         ee:e2:7d:df:dd:01:67:19:46:11:9e:05:58:05:f7:b6:ef:a8:
         64:0e:c2:06:e1:e6:45:c6:40:45:8c:54:57:e7:09:53:b4:45:
         8a:03:ea:8f:21:5c:5c:b4:ae:4c:77:81:83:89:1a:46:ee:8f:
         1e:5f:8b:87:cf:74:ba:3d:af:de:a3:6f:59:66:c1:8f:4a:c5:
         0b:68:d3:ec:12:f4:86:24:e0:b4:c6:73:09:65:88:9e:4e:40:
         94:0a:86:8f:2a:82:0b:66:69:4d:9e:c1:98:21:a1:1e:e9:45:
         9e:1d:96:8b:13:8f:fd:cb:e4:70:45:59:01:ff:81:35:3d:a5:
         23:7d:9f:9c:a3:c3:42:1d:76:07:a9:64:73:aa:9f:1b:a8:82:
         d3:b1:3b:f1:0a:e2:c3:fd:fc:6f:b6:6f:70:a0:be:da:ae:a8:
         8a:8b:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:37 2024 by rpki-client on console-fra.rpki-client.org