Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File:                     5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier:          hni2Cm2g9GK0ERAMYErZtnjbEBX0gKcp88H7M+a7hes=
Subject key identifier:   5E:CF:11:AC:70:5E:17:FF:5F:A5:4D:0A:5E:80:33:3F:01:20:C3:96
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer:       /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial:       018F3A0AB0D6F7773D3AFB102620067AC315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 16:02:10 +0000
Manifest this update:     Thu 02 May 2024 16:02:10 +0000
Manifest next update:     Fri 03 May 2024 16:02:10 +0000
Files and hashes:         1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: yPs1J8AoxfBOvd+vfMSs1XECJhjw6GHb1flIFRf2h8A=)
                          2: U60Ot9PxU91b0DmIISsq3doTc7w.roa (hash: qURFYYo4tmHnK6fhZXZjIV/ZMVcSVNZZT+LrCMYiNV8=)
                          3: YTFIYMwfHXsketkgljChZuWxQ40.roa (hash: 68E5c///2wHT9v7RspnljA8qZRizKMQb4+YkarAYJxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:b0:d6:f7:77:3d:3a:fb:10:26:20:06:7a:c3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
        Validity
            Not Before: May  2 16:02:10 2024 GMT
            Not After : May  3 16:02:10 2024 GMT
        Subject: CN=5ecf11ac705e17ff5fa54d0a5e80333f0120c396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:0a:04:0e:1b:ec:af:15:9e:4f:70:ad:02:
                    ff:73:fe:6d:20:5d:a7:ec:5a:3a:22:33:a5:2f:30:
                    dd:21:9d:f4:af:ac:08:32:10:3e:e9:35:3e:a5:fe:
                    1c:6d:c7:e5:2c:f2:dd:ac:b3:45:50:73:7c:c6:a8:
                    7d:32:af:f4:c7:b3:c6:9a:33:df:e2:1b:5e:3d:55:
                    e1:33:fc:39:77:32:17:e3:86:9a:68:db:21:12:14:
                    81:ff:b5:e8:d1:ba:1d:b1:36:14:d8:5c:49:03:23:
                    2b:bd:ae:65:82:a7:fc:4e:15:97:6b:a3:f1:b6:70:
                    d7:cd:8b:4b:88:12:30:8c:f0:fc:81:bc:63:f0:19:
                    4e:05:e6:ad:b8:85:3e:3e:92:30:60:f4:96:90:17:
                    36:ed:46:8f:0b:a5:f0:e8:45:3d:22:78:8b:e3:77:
                    dc:37:31:12:9c:d1:ef:24:c8:11:3f:8d:ca:2f:5d:
                    c1:05:ab:ed:56:64:47:90:fa:98:ff:1a:a3:e5:1d:
                    77:f5:c9:97:4d:fd:c5:44:e4:83:45:1d:8a:d3:2e:
                    0e:e1:57:c0:6a:93:d5:95:6d:63:f6:e6:4d:21:54:
                    ac:2f:fe:62:05:03:68:0a:ce:44:dd:23:13:43:c9:
                    19:7a:7d:3a:db:92:a8:70:b2:c5:85:fb:78:0f:b7:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:11:AC:70:5E:17:FF:5F:A5:4D:0A:5E:80:33:3F:01:20:C3:96
            X509v3 Authority Key Identifier:
                keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:fd:6e:07:48:26:a2:cb:4c:3b:0b:1f:bf:79:75:dc:1b:
         16:96:e2:39:35:98:97:89:b1:f8:1a:ee:f8:fa:48:f8:a6:d0:
         9e:55:65:95:b9:ec:26:b4:e2:53:e0:10:c5:2a:e9:1d:56:f1:
         e2:1c:f0:bb:50:1b:c2:b1:68:66:4e:97:91:23:49:40:22:b3:
         2d:be:c8:7e:cd:bf:58:0c:f4:10:df:d5:df:8a:99:fb:26:88:
         07:b7:13:08:70:b2:8f:f4:ed:5b:48:65:ba:e3:10:d7:ce:b0:
         35:99:cd:c5:96:aa:de:72:9c:b1:0d:21:0f:a7:1c:32:41:cb:
         17:6e:5d:cd:fa:0b:c4:43:41:e4:a9:53:6b:64:c3:0f:d6:1c:
         91:95:27:95:4e:c6:53:8c:0f:51:50:e8:2b:ec:38:7a:b7:59:
         6d:f8:ec:1d:9b:cb:f6:bb:29:98:f7:d6:7f:f3:bf:d1:41:7e:
         d5:6c:0e:f2:3d:64:b9:3e:52:5b:a6:ba:45:7c:36:20:84:01:
         84:65:e0:43:7e:07:f6:80:25:25:5b:b6:f9:b2:b5:c8:02:aa:
         29:cc:d8:9e:1b:f3:6b:8c:ae:a8:99:2a:0b:cf:78:9f:5b:54:
         6d:04:86:ea:fc:ec:b0:99:c2:31:04:b1:3d:ba:81:23:52:c1:
         b1:33:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:08:37 2024 by rpki-client on console-fra.rpki-client.org