Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File:                     5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier:          T2V4P70+LW7POKjqu6t+LZ1SwYdKf54AkkGxj3Oe5Kg=
Subject key identifier:   58:8D:17:F7:F2:1F:DF:47:CE:A2:67:FD:D9:12:26:75:FC:A5:38:80
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer:       /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial:       018F874A1D361ADED37921DE6C50C9BD77E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number:          020A
Signing time:             Fri 17 May 2024 16:02:12 +0000
Manifest this update:     Fri 17 May 2024 16:02:12 +0000
Manifest next update:     Sat 18 May 2024 16:02:12 +0000
Files and hashes:         1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: +mTOL/A5UgvDYiGf56tOqVGR28iFOVGQwdMT9eLfyGw=)
                          2: 6Al_kVf_l9Cs-6s4xQ5I9UaaZi4.roa (hash: EvkOvhe1iFwxHRZGBtj5Li6e1x2vOm/cS/sr0uE+Tcg=)
                          3: nB0iBqYfvmx35lQqWdPD-o6S2yY.roa (hash: syq6jubpksgiySEaUrD3G8DUUYR6uNCG0uV3raGwU/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1d:36:1a:de:d3:79:21:de:6c:50:c9:bd:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
        Validity
            Not Before: May 17 16:02:12 2024 GMT
            Not After : May 18 16:02:12 2024 GMT
        Subject: CN=588d17f7f21fdf47cea267fdd9122675fca53880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:78:cc:e2:0d:f2:fb:d7:62:11:78:57:dd:
                    64:66:b6:c2:b7:50:20:37:93:d8:b2:2e:c5:01:0c:
                    1c:66:0f:af:12:3b:cb:c9:d2:79:1e:cd:ae:ec:a5:
                    0f:86:e8:a9:4c:7e:90:b3:e6:03:52:7e:90:e6:f9:
                    dd:75:7a:27:90:62:2d:be:3f:05:c5:24:4f:b0:99:
                    5a:1e:b7:98:f3:f0:06:6b:94:ad:f2:2d:2b:0d:5e:
                    dc:e6:bf:ce:0d:da:d7:68:d8:be:13:b7:77:42:0e:
                    44:bf:4f:62:22:bf:e1:5b:c8:92:c5:a3:7b:96:8e:
                    1d:12:8d:71:74:4c:d5:4b:34:73:87:e3:58:cf:09:
                    60:82:fa:10:41:a9:73:b4:b3:cc:cf:76:09:58:71:
                    08:91:3b:25:40:2e:e5:4c:83:95:17:3d:b8:5d:09:
                    74:bf:57:71:f1:03:f3:1f:79:a9:a3:04:b5:b0:5e:
                    d6:ae:ca:34:df:e8:74:e8:0d:6f:6b:5f:96:9a:a1:
                    00:ad:f0:43:92:1b:1d:58:49:84:fb:e7:01:cb:ee:
                    3c:cd:ce:82:b3:28:1b:f2:01:42:fe:ae:1e:e9:4a:
                    cd:e1:40:8f:56:91:a8:4d:ba:27:63:57:1c:ab:ee:
                    f7:5b:36:e7:5d:fa:7e:ff:13:8b:2b:3f:0e:d3:b0:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8D:17:F7:F2:1F:DF:47:CE:A2:67:FD:D9:12:26:75:FC:A5:38:80
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:40:6e:38:33:e7:4f:d2:bf:db:7e:d7:92:e8:e5:d1:f5:
         fd:9f:9d:b6:4a:11:2b:8f:61:cc:2d:02:9f:10:2e:4f:ab:13:
         6d:d0:3b:4a:a6:e1:84:70:6b:ab:45:37:1b:80:53:7c:8d:c7:
         08:77:b3:db:02:08:b2:1b:45:e1:89:49:d8:8b:24:04:a7:eb:
         88:2b:2c:90:47:a6:a8:1a:e9:67:91:8a:8b:d6:bf:31:78:d4:
         3e:69:88:77:7a:2c:96:23:24:db:bf:3b:6f:17:35:bc:f6:5f:
         42:53:1d:1b:a0:d6:d2:fb:fb:a2:be:ff:41:cb:33:2a:fb:54:
         f2:2d:e0:71:7c:87:50:88:3d:8c:e8:7c:a6:73:8a:0f:a1:4b:
         b0:20:73:ef:0f:05:84:a6:07:fd:85:6f:36:8f:f5:cc:68:e0:
         70:4d:23:9c:73:21:ba:9d:36:8a:ea:d2:1c:76:db:94:aa:f6:
         a3:de:c1:c1:af:c4:70:57:bd:1d:40:61:23:13:f7:bc:dc:0f:
         9e:b8:4b:81:1a:79:ff:62:3e:e7:28:c9:d0:ab:0f:2f:41:b4:
         67:4c:67:83:1f:df:49:9a:ab:b9:2b:c2:d1:6d:87:f0:c1:d9:
         79:75:6e:b0:de:f3:5c:8f:58:84:6f:84:3f:14:c1:40:08:b5:
         e8:63:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:58 2024 by rpki-client on console-fra.rpki-client.org