Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File:                     5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier:          13iTRYnSjYMmMpO6Uo/xIoyLOkPqIKkFS/iI0rkFuyQ=
Subject key identifier:   A4:66:BC:AC:4A:4B:FB:B8:5C:7E:04:F5:EA:72:C9:49:33:35:69:BD
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer:       /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial:       018F38894BEF1A69ECF861452099C95E8CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number:          0825
Signing time:             Thu 02 May 2024 09:01:12 +0000
Manifest this update:     Thu 02 May 2024 09:01:12 +0000
Manifest next update:     Fri 03 May 2024 09:01:12 +0000
Files and hashes:         1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: fkiqmYcYAZsTBS4k0+19Z3Dy7vcfapc9f+b19qDT0Ww=)
                          2: xx6zdHmCWeArgbu-DFGxeqYkQTY.roa (hash: 8l4MeFXqUNDfbdCTOMMF6sMTwBLen8ztMQELeHKInTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:4b:ef:1a:69:ec:f8:61:45:20:99:c9:5e:8c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
        Validity
            Not Before: May  2 09:01:12 2024 GMT
            Not After : May  3 09:01:12 2024 GMT
        Subject: CN=a466bcac4a4bfbb85c7e04f5ea72c949333569bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:a8:4e:48:aa:fc:03:c8:96:0e:22:1b:9b:
                    e5:60:6c:88:ce:b7:0c:03:f3:b7:9b:1b:ba:6e:cd:
                    d4:73:e6:12:d5:b4:9d:43:32:6e:60:d4:29:40:11:
                    2f:7c:3f:9b:41:cc:9f:d6:01:ef:51:66:20:61:0c:
                    10:f6:cc:80:5c:c2:66:4d:8b:24:ae:f0:eb:07:96:
                    91:ff:2c:45:19:c3:0e:95:24:fe:1d:e0:b8:a5:c8:
                    36:e3:a6:a7:f5:74:38:91:bf:fb:d1:7f:9b:5f:1d:
                    1f:12:a0:0d:46:4b:df:67:a3:3d:c3:75:e4:99:38:
                    89:65:d3:bd:14:d5:c1:06:34:78:07:7b:36:bb:8b:
                    20:b7:8f:02:08:ef:c6:a2:84:69:17:e7:1e:c2:93:
                    c9:e1:86:0d:54:b6:33:f5:74:3f:36:48:d3:af:5c:
                    49:36:d0:29:de:6c:73:5f:82:43:d1:aa:02:38:c3:
                    56:ef:79:fc:5b:13:b3:c4:7a:a2:3e:5b:4b:5a:6f:
                    3a:73:e0:58:87:bf:d5:e2:e1:36:74:2f:32:a3:e2:
                    90:b8:29:c1:9e:43:63:8a:1c:09:5f:2a:dc:1d:fb:
                    60:e9:b5:c4:02:93:9a:93:89:83:10:9d:62:e5:82:
                    d1:df:84:16:6d:82:71:ef:cd:72:c6:cb:bd:35:40:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:66:BC:AC:4A:4B:FB:B8:5C:7E:04:F5:EA:72:C9:49:33:35:69:BD
            X509v3 Authority Key Identifier:
                keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:2a:be:4a:8e:91:dd:39:b4:b5:4f:9f:bc:e7:d1:d2:97:
         48:7d:af:27:e1:62:82:b2:1d:1b:e7:bc:9e:49:e0:d2:f1:8d:
         0c:b3:34:e9:00:d2:d3:36:9e:58:da:c4:60:91:14:d9:a2:5b:
         1d:98:b9:59:3f:4f:fb:93:a7:bf:d0:6a:06:1a:20:ec:2a:a0:
         af:c7:38:41:b5:0a:70:30:ba:0f:90:01:5c:50:42:fc:ba:f0:
         b6:2f:85:14:77:41:bf:6e:8f:21:b6:17:81:96:ce:e2:12:8a:
         c2:30:50:a0:aa:48:37:b9:9f:2a:2b:2c:ca:fe:99:f6:20:20:
         06:34:86:88:7a:90:1c:6b:54:d9:a8:76:8a:d5:2e:f2:3f:ed:
         20:b7:62:10:7d:01:9f:78:c7:4f:6d:d3:1e:de:26:c1:d7:8c:
         c7:20:b7:94:d8:a2:53:29:5a:54:68:ab:9b:a5:35:93:e0:98:
         3e:f0:af:77:25:64:b3:bb:be:69:62:24:ba:16:cc:97:f9:0c:
         07:a6:96:2c:6f:ac:62:fa:f1:09:c2:20:5c:99:35:cd:f8:01:
         cb:b7:75:94:55:83:ef:cc:7a:0b:11:36:9d:33:7b:c3:21:85:
         28:f2:d1:72:6e:4d:40:5a:ae:7e:18:8a:44:c7:30:1c:07:98:
         21:83:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:21:36 2024 by rpki-client on console-fra.rpki-client.org