Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft
File:                     _l1pjs9mrkbt4fyCML--IJbVJFs.mft (raw, json)
Hash identifier:          Lh/UNFutElVYTcwqaCyzXKuLbVK0vq3F5FoiSIeRBwE=
Subject key identifier:   43:D6:47:CD:5C:EC:DD:8A:AA:25:60:E5:57:7C:B7:22:B7:A1:27:7A
Authority key identifier: FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
Certificate issuer:       /CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Certificate serial:       018F5C2857A0D6ADF8684A2B0316D4DED78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft
Manifest number:          0E5F
Signing time:             Thu 09 May 2024 07:01:38 +0000
Manifest this update:     Thu 09 May 2024 07:01:38 +0000
Manifest next update:     Fri 10 May 2024 07:01:38 +0000
Files and hashes:         1: 3ilWmbj21Rn2Fe6QbTFedVruxao.roa (hash: Kh300XJFw4bBHnmjfmzYz8DLdXrJBrOIMUpO3CLF/ZY=)
                          2: _l1pjs9mrkbt4fyCML--IJbVJFs.crl (hash: YO9nzAjUrXUGUONEwIftdL9XFG152uwBRxlWIRNEM0s=)
                          3: citk1A7LPcg5sYuvxyt7jmmQj3c.roa (hash: GJQy2gMFB+NYjhirzQ9eTfon2BidsNTMtMbFHzUbgIY=)
                          4: vGrgBkxABXjSPZU_83SKP0hcRfo.roa (hash: YTGp3CF9GQ9WKugE3ouGM1u2nuidxM5FKOAfHhsldDg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5c:28:57:a0:d6:ad:f8:68:4a:2b:03:16:d4:de:d7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
        Validity
            Not Before: May  9 07:01:38 2024 GMT
            Not After : May 10 07:01:38 2024 GMT
        Subject: CN=43d647cd5cecdd8aaa2560e5577cb722b7a1277a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:36:1e:27:fa:c5:38:cf:07:63:0b:37:c4:
                    e3:d6:cf:a6:6e:22:db:70:f7:87:2a:92:9d:0f:7f:
                    51:87:49:94:6d:47:62:ae:65:36:0f:cf:69:3b:e7:
                    17:31:28:38:82:0c:ec:99:e2:48:63:d2:04:3c:b9:
                    68:cf:9d:4f:7a:ae:df:b4:ee:a4:06:bb:58:5f:b0:
                    98:5e:f6:39:2c:3d:0a:04:75:b1:d4:d9:9c:da:1e:
                    7a:83:86:ec:3c:3b:72:21:c5:26:bd:55:ab:cd:3a:
                    9d:4b:94:16:fe:53:70:a7:99:35:5e:99:22:c5:0f:
                    bd:20:1e:0d:fd:4e:60:06:0b:1b:f1:37:bb:f7:c9:
                    db:fb:5b:55:7f:0e:e7:67:6d:d7:fe:ba:a1:8d:81:
                    57:e6:a8:10:d4:d4:0a:82:0a:30:ec:bf:a3:66:85:
                    1b:87:ce:82:40:be:0e:87:2c:b4:b9:dd:45:78:aa:
                    79:d1:be:33:ea:20:83:cc:23:61:ce:21:61:e3:32:
                    b4:99:14:99:06:96:25:85:79:33:bc:28:21:1a:6b:
                    a8:b5:34:b0:1c:3f:b6:e8:a2:dd:28:ff:63:3b:5d:
                    ba:3b:5a:6f:27:ff:8e:be:06:57:8c:3b:3d:5c:df:
                    ca:e3:a7:97:c9:66:ba:80:7a:1a:62:6b:f5:c2:6d:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D6:47:CD:5C:EC:DD:8A:AA:25:60:E5:57:7C:B7:22:B7:A1:27:7A
            X509v3 Authority Key Identifier:
                keyid:FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:35:a6:ff:c5:4b:64:2c:78:bf:ce:2d:2d:19:e2:28:99:29:
         30:70:b5:ad:44:01:c7:8f:a0:e7:2a:36:72:09:63:f4:dc:f2:
         14:68:04:ee:9a:93:2b:8a:7f:30:36:03:51:18:62:3e:33:9a:
         31:bc:7e:23:59:67:d6:ef:b0:8e:19:d0:fe:79:f2:0d:5b:46:
         dc:41:6f:55:8e:d8:63:67:af:3d:b8:a7:1a:6b:a5:72:2b:a9:
         a2:0c:00:fa:69:72:1f:48:71:f6:ad:e5:08:f7:95:fa:dd:24:
         f7:91:eb:d4:36:6e:44:da:79:d6:48:ad:3b:5f:66:7e:bb:2b:
         e1:ae:4a:7f:79:d5:f9:cb:f7:1a:fd:32:14:45:90:82:0a:42:
         48:b7:f3:0d:0f:06:ce:6c:a8:fa:d4:07:b4:48:26:7b:d6:21:
         a3:82:8f:87:04:7a:2b:25:69:c3:73:bf:a4:cf:8d:b0:ff:d2:
         32:19:e9:36:12:43:13:3f:17:b5:a0:18:74:03:47:d6:4f:15:
         b6:77:ca:85:99:d0:c5:73:9c:94:0a:29:1c:2e:bc:ff:6a:ca:
         b4:cf:62:0b:30:8b:a5:e9:77:f3:34:1e:67:8a:30:28:fa:33:
         e5:ae:50:af:b0:4e:d8:b4:a4:68:b0:fe:e7:aa:66:46:fb:95:
         d5:bb:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:58:59 2024 by rpki-client on console-ams.rpki-client.org