Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          ivBa4p+SPuYFiLHisascNUGX5rRh9Fo/ohDMacUsCe4=
Subject key identifier:   2D:02:38:F7:F3:68:57:55:71:58:11:8A:AC:A6:5B:0A:8C:84:7E:3D
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       018F3B53B69422EB5382B1697B2E3216A68E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 22:01:32 +0000
Manifest this update:     Thu 02 May 2024 22:01:32 +0000
Manifest next update:     Fri 03 May 2024 22:01:32 +0000
Files and hashes:         1: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: 8gr0DutS53123cORrDeQ+flyBhmPgfsukcy56bcKMTM=)
                          2: TaleU1iKC6o8F0pMl4mP1INV_Dk.roa (hash: Vw4zCitEzPFpjmHNKSvq6yisCwoT2ZpIYFkaPnxlGeA=)
                          3: kBbN5NdEl7t0u6zJOkhUaCB_Z2U.roa (hash: WNjJ3yFrMbjJ4X157iStbwQLPiHreZJBx8CM1U3ANfA=)
                          4: s2BrBpPJF038uugDHJxPJHxipb4.roa (hash: C/RPtmZ7cnAsm0G7cYWzChHF8vAD0R6gXrBBmyKF80c=)
                          5: us_YEYNVrzQaivNprR6B6znFSg4.roa (hash: cZYbzkGSSxkVMR7sQizgxL0GT28JkKskZu6UREgJxT4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:b6:94:22:eb:53:82:b1:69:7b:2e:32:16:a6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: May  2 22:01:32 2024 GMT
            Not After : May  3 22:01:32 2024 GMT
        Subject: CN=2d0238f7f36857557158118aaca65b0a8c847e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:d0:30:63:9e:8f:68:38:71:2f:13:22:c5:
                    d3:e4:02:57:28:4e:a1:61:1c:a3:2f:7a:4f:66:93:
                    35:68:a9:c1:89:a2:8d:37:8f:2d:0d:c1:1b:4d:07:
                    c8:e6:ea:6b:db:2b:c2:fe:2d:00:5b:92:0e:23:71:
                    45:09:b1:d5:0f:b6:da:e1:38:a3:22:f4:1b:00:62:
                    75:06:46:46:85:49:e4:65:50:4d:85:04:e7:ad:90:
                    b7:22:29:d1:7a:a9:3e:fb:fb:3f:dd:ee:f5:c1:cb:
                    70:5f:31:a0:23:76:23:24:f8:9c:6c:f0:1f:7b:6a:
                    25:14:63:45:ac:ea:cc:8c:9c:3e:26:4c:71:3a:2c:
                    4a:c9:25:03:6d:ab:f2:c7:37:7b:dc:67:6d:e5:7e:
                    0b:ef:40:ce:14:fd:5a:a2:af:de:32:80:e8:5d:ce:
                    2b:0d:32:69:ce:d4:d6:ae:de:6e:5d:5d:ee:29:4e:
                    4e:e9:92:ee:fd:3b:9d:52:49:b3:eb:c4:58:96:61:
                    61:1f:33:42:bc:3a:13:c5:83:0d:66:2f:29:62:65:
                    0e:dc:99:2d:53:8e:0c:08:08:e3:54:66:bd:d8:c3:
                    fb:7a:b9:8c:59:95:08:f1:00:a9:4b:9f:e3:d4:50:
                    a3:5a:dc:41:23:88:5d:d9:30:2c:5e:25:59:0b:ae:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:02:38:F7:F3:68:57:55:71:58:11:8A:AC:A6:5B:0A:8C:84:7E:3D
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9b:be:00:53:94:a5:c1:0c:23:84:f3:3a:8c:62:14:31:e6:
         86:d8:78:df:01:fc:12:2d:bb:92:57:ba:04:e8:eb:79:79:21:
         4f:23:eb:d8:ff:18:99:60:b1:ee:b0:57:c9:b5:07:22:f5:71:
         0b:81:d6:69:a9:a4:6a:f7:e8:69:6d:97:ee:12:87:ef:29:ed:
         3c:1e:1f:f5:02:34:aa:85:80:bf:85:8c:ff:1f:b9:4d:77:24:
         81:75:ce:b1:aa:12:a4:58:74:26:3f:1b:e0:45:04:4e:74:fd:
         b4:17:9a:2a:68:8b:e3:ba:fe:37:56:bb:0d:f4:ad:fb:9d:d3:
         62:e1:75:8b:4f:39:8f:cb:22:e9:93:2d:cb:ea:10:0c:48:42:
         4a:3f:da:97:bb:b7:b9:ad:56:cf:9f:64:90:97:06:fc:71:77:
         9e:9c:8c:df:04:07:a6:ce:08:d5:cd:e4:0c:85:ad:ac:0f:72:
         de:47:09:1d:77:b9:b9:d8:c2:ba:0a:88:43:4d:94:46:27:6e:
         ef:c3:b3:39:e7:d5:46:15:5d:76:6b:b2:9d:77:71:ca:63:a1:
         ff:84:57:0f:ee:f6:cd:3f:17:52:42:bd:b8:86:0d:f8:75:b1:
         b0:9a:30:ce:b7:a9:16:84:d3:d4:84:2e:aa:23:91:f6:81:20:
         58:8e:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:20:38 2024 by rpki-client on console-ams.rpki-client.org