Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File:                     5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier:          bqJUh2/1ZBU64S512+qHIzQQ/XMLWcbJ9aHSyAbz83A=
Subject key identifier:   6E:24:F3:B4:51:4E:D9:B9:FB:07:F8:09:03:5B:EA:FE:C7:52:AA:71
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer:       /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial:       018F38C00DD50E2F5E55657A26B0C530FEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number:          0901
Signing time:             Thu 02 May 2024 10:01:01 +0000
Manifest this update:     Thu 02 May 2024 10:01:01 +0000
Manifest next update:     Fri 03 May 2024 10:01:01 +0000
Files and hashes:         1: 3Y2eSPGmV3nU_WH49YZuXTi-1VU.roa (hash: eFuGtFGhwCy4ROyBhjwb+6SY5H5sxfCKnOTm8jjxYIs=)
                          2: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: NhLDt19ry5CrZ/FJNQ8qZokZwPtnzL8A8s7U6acW9b8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:c0:0d:d5:0e:2f:5e:55:65:7a:26:b0:c5:30:fe:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
        Validity
            Not Before: May  2 10:01:01 2024 GMT
            Not After : May  3 10:01:01 2024 GMT
        Subject: CN=6e24f3b4514ed9b9fb07f809035beafec752aa71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:3e:e9:c4:b5:92:18:00:6b:cd:27:95:76:
                    1c:53:cd:96:3f:2c:82:05:ee:7a:ab:e7:96:72:21:
                    da:34:07:09:b1:c4:9f:8d:c6:a6:b2:1c:7b:d5:f4:
                    dd:d6:f2:8b:4e:00:26:44:75:41:ce:f0:68:2b:d3:
                    17:8a:84:8f:7d:4c:3a:15:b5:73:71:c9:d1:fc:04:
                    33:eb:52:24:01:35:c9:9b:dd:2f:24:dd:b6:c9:e5:
                    ca:36:4e:76:ee:6b:0a:14:b6:0e:2c:92:31:70:03:
                    95:2c:ca:74:14:7c:3a:cb:df:34:62:4b:f9:44:fc:
                    35:1f:5f:3c:63:fe:bf:49:72:7a:12:13:a6:b3:c5:
                    b6:22:c9:02:5d:0f:04:4f:c3:7e:8d:39:9d:b9:a3:
                    de:21:c9:63:71:ce:7c:35:cc:c2:a0:6f:c4:a8:b4:
                    99:f8:d9:be:00:96:1b:62:43:6e:da:5d:7c:07:ac:
                    f9:75:2c:00:65:69:35:ed:4d:50:0f:76:ab:15:66:
                    a9:5d:24:9b:a6:80:dc:99:80:5a:41:b3:0f:ea:43:
                    b0:75:73:2c:97:2b:ae:bd:55:26:fc:0f:ba:eb:22:
                    ba:c3:b8:fb:a1:71:0e:48:29:71:98:8f:08:e6:99:
                    ce:84:0d:bf:1c:54:74:41:ae:73:c5:78:01:33:b2:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:F3:B4:51:4E:D9:B9:FB:07:F8:09:03:5B:EA:FE:C7:52:AA:71
            X509v3 Authority Key Identifier:
                keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:52:f4:02:98:ce:8a:d7:c9:10:b0:da:2e:3d:9a:d4:f7:28:
         18:a7:81:14:e6:3d:71:b5:2a:37:25:31:c2:9a:cc:2a:c3:3e:
         d7:a1:7b:e3:52:fd:d5:de:ee:33:45:79:a7:93:3d:b0:13:c1:
         03:26:c7:aa:4b:d8:63:9a:b2:ae:cd:be:38:7e:87:fa:5e:00:
         da:03:e2:db:3b:00:ac:fa:dd:59:6d:65:2c:7f:e7:70:c2:26:
         26:9d:3e:54:14:6b:d2:a5:63:6d:dc:03:b5:27:01:01:9b:29:
         54:98:61:94:37:74:dc:f1:df:2f:77:df:aa:0f:f7:f1:2f:bf:
         52:20:1e:fd:ca:38:43:b5:80:28:5e:ef:49:98:e0:12:d0:7b:
         b3:c7:d8:ed:dd:96:16:39:d7:cb:3a:ad:87:55:eb:1b:a2:d5:
         e4:6f:60:16:5e:01:5c:7d:34:16:5e:0d:11:19:72:07:e6:88:
         5b:11:5a:48:bc:e6:d9:5d:12:00:6c:8b:1f:c3:ab:80:27:85:
         b9:11:e3:07:fa:07:f9:27:10:bd:b3:9a:a4:8d:df:1d:c7:ab:
         c7:0a:a9:56:c3:e0:57:dd:c5:cd:a7:f7:c1:68:4a:8f:dc:2b:
         e1:6b:77:ea:7a:7c:bb:7d:9d:d6:d9:9c:d4:19:97:63:e5:7a:
         02:44:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:16:34 2024 by rpki-client on console-ams.rpki-client.org