Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File:                     2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier:          esN6wI6XjsCgTY56LbJcGjK+nJ3j7AgN3hUdUWULc5Q=
Subject key identifier:   79:14:E6:96:72:79:25:5A:25:33:53:DD:89:35:8B:0F:95:AA:BD:53
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer:       /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial:       018F4C477AF37A19E75F6833BA3EB0A47C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number:          0E5C
Signing time:             Mon 06 May 2024 05:01:43 +0000
Manifest this update:     Mon 06 May 2024 05:01:43 +0000
Manifest next update:     Tue 07 May 2024 05:01:43 +0000
Files and hashes:         1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: Xa5NTD0yXmNSfHelLh60LZqmM9KgbsNlAk6GZly33HE=)
                          2: GBVdK9K3Xt7C_LG7I-eJrp0nWsI.roa (hash: CoDPeIzSSUYXZAjpCPdVmmzdPg1ACQgh6KsuccunGkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:47:7a:f3:7a:19:e7:5f:68:33:ba:3e:b0:a4:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
        Validity
            Not Before: May  6 05:01:43 2024 GMT
            Not After : May  7 05:01:43 2024 GMT
        Subject: CN=7914e6967279255a253353dd89358b0f95aabd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:de:22:fa:7b:ec:5a:23:32:86:02:c1:49:
                    a1:01:2c:92:ec:cd:ce:ec:1f:ba:22:5e:e8:77:f6:
                    25:7f:30:97:c9:7e:6b:5d:b2:15:14:96:10:fd:d4:
                    44:c0:37:10:e6:51:24:b7:13:88:09:5b:cf:a6:77:
                    3d:07:be:1e:e2:06:0b:03:95:61:a0:94:e0:62:19:
                    ad:3a:76:dd:3b:15:dc:61:5f:40:43:77:a2:5a:27:
                    f4:49:3a:82:17:76:24:76:9d:c0:0a:d0:02:f7:52:
                    f6:5d:49:54:0d:61:a1:d6:4c:34:cc:e7:d0:87:35:
                    c5:c1:d7:5c:34:1d:31:56:97:71:0f:66:e5:63:54:
                    54:aa:45:c4:0d:33:a9:ad:b1:aa:e7:f6:75:16:15:
                    92:eb:67:15:e0:6f:a2:8d:45:8c:4f:7b:69:68:da:
                    61:ae:a0:56:0e:a4:8c:43:9b:db:ab:ae:de:20:e8:
                    d2:fc:c0:20:c8:83:f2:e5:59:d6:b4:8b:eb:76:cc:
                    bc:af:df:db:2c:4b:da:9c:f3:e1:07:07:5c:57:ee:
                    bd:ad:72:13:34:0f:c5:f3:51:f3:3f:ec:75:0d:59:
                    2e:ad:39:b8:2b:99:1b:d7:80:64:d0:dc:c4:f5:93:
                    49:22:79:1b:3a:20:05:db:39:6c:23:cb:c9:96:ef:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:14:E6:96:72:79:25:5A:25:33:53:DD:89:35:8B:0F:95:AA:BD:53
            X509v3 Authority Key Identifier:
                keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:de:15:fa:33:5c:c4:6d:77:3b:fe:da:dd:c6:aa:43:15:
         75:ce:bd:06:fb:35:92:ef:14:d9:58:ab:53:fa:36:5a:3e:3f:
         28:9d:89:fc:17:00:30:18:42:98:9a:42:a6:3b:36:fb:d0:e3:
         73:5f:87:26:22:79:c0:50:c0:c0:96:13:d4:bb:0e:73:97:f8:
         89:48:62:79:d6:06:5c:e0:a1:18:e7:c5:6a:03:f4:37:84:90:
         8c:25:81:ae:e3:22:a7:2a:4d:12:0b:8c:bf:c7:b5:0a:69:11:
         d6:b7:c4:ec:ed:eb:38:c8:a8:ce:99:2b:a6:a1:1e:c7:ce:06:
         9e:90:10:8e:23:2d:a7:d1:38:2b:1c:39:c8:16:93:f1:60:93:
         19:39:18:85:9c:1d:c5:ca:d2:3c:57:f3:aa:0e:f7:e5:94:07:
         f2:8c:c9:53:1f:f2:79:f0:f3:88:df:e5:15:7f:00:0c:ef:4c:
         48:b9:2a:f4:22:82:a3:25:e9:d0:f1:11:1d:83:f6:49:c1:61:
         89:a5:58:a3:85:c7:f5:ae:62:31:fc:a1:02:e0:54:21:52:68:
         69:b9:eb:fc:74:0c:38:26:10:f1:16:8b:4a:79:56:da:c2:46:
         7e:f4:e4:f6:45:f3:07:07:e2:62:d0:33:18:8d:0e:e6:c0:8b:
         11:ef:e2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:35:53 2024 by rpki-client on console-fra.rpki-client.org