Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File:                     A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier:          OICkYaYbLLYrhAVStJ4T7PLpO1GsFvQrVj1sosy19jQ=
Subject key identifier:   5E:D3:94:00:F7:6A:F3:AB:F2:26:67:CD:43:23:79:F5:54:3E:61:F9
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer:       /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial:       018F4CB4E3ACF3806FD9819E1D0E95123EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number:          05A7
Signing time:             Mon 06 May 2024 07:01:13 +0000
Manifest this update:     Mon 06 May 2024 07:01:13 +0000
Manifest next update:     Tue 07 May 2024 07:01:13 +0000
Files and hashes:         1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: crsy9bKNy48MzRR9uFhHVT5Lh3NsQw6TjG+ewKpKBU0=)
                          2: el5_TcNDYyekUSA4jvU59D-Tu4w.roa (hash: SKH1YUKKq/HYCPz+MnKAjWjXOw4D5P7yFr8LIYWImEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b4:e3:ac:f3:80:6f:d9:81:9e:1d:0e:95:12:3e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
        Validity
            Not Before: May  6 07:01:13 2024 GMT
            Not After : May  7 07:01:13 2024 GMT
        Subject: CN=5ed39400f76af3abf22667cd432379f5543e61f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:10:eb:3b:21:2d:da:a3:18:fc:c1:d5:11:
                    13:3b:c5:c8:f1:ab:a6:f8:bc:a7:d8:b9:0e:0b:1a:
                    af:3f:d9:ad:b5:73:d3:94:5e:9b:58:30:f1:48:e8:
                    25:13:71:fb:50:28:8f:94:68:78:cf:16:1a:dc:01:
                    39:f7:63:1c:ff:ae:0b:5b:27:e7:b3:bd:21:d6:68:
                    56:cc:ee:4a:9b:29:23:24:9f:48:5b:83:00:7f:23:
                    9b:92:22:01:ae:3d:04:cf:2a:ab:f1:63:aa:f9:0c:
                    34:7c:52:4e:d9:c3:66:46:fe:13:68:d6:1e:64:f6:
                    d6:cd:ef:47:0d:7b:2d:07:57:41:d1:e9:90:6c:78:
                    eb:e4:8b:2b:e0:e4:53:69:0f:e8:f1:64:97:38:61:
                    fe:c1:f2:5f:7e:29:72:e8:e8:9f:13:c5:45:03:d7:
                    9c:6a:82:d4:4e:e3:ef:85:14:08:85:ae:72:20:a3:
                    31:82:aa:85:22:b0:08:2f:19:57:d0:fd:0d:fc:28:
                    c3:dd:93:39:f7:20:76:05:e9:0f:19:30:89:b1:81:
                    09:b1:3a:48:6a:9f:2a:c7:10:0c:c8:7d:19:3e:99:
                    8e:31:4f:e1:43:04:23:ed:d5:cb:5c:5e:62:92:7b:
                    00:d5:0e:df:96:ad:c9:e0:e8:a0:db:49:dc:58:12:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D3:94:00:F7:6A:F3:AB:F2:26:67:CD:43:23:79:F5:54:3E:61:F9
            X509v3 Authority Key Identifier:
                keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:7e:fa:0d:91:36:17:c2:99:d9:81:02:41:7a:46:03:a5:
         6e:26:5c:37:9d:d3:0a:b2:11:7f:8b:a9:e3:59:2c:87:55:a2:
         18:5e:e9:a3:3a:41:3b:b4:3e:61:e3:60:c7:36:a7:09:0a:0b:
         d2:7b:fd:db:4d:f0:20:5e:8b:35:fa:37:06:9f:cc:56:d9:7b:
         b2:88:2b:67:c3:07:ec:b0:57:61:a2:0a:60:3d:91:a8:c5:c8:
         f4:1c:f2:f2:1b:38:bd:f3:28:bc:75:de:43:ae:58:96:0c:34:
         97:01:bb:f1:32:6f:ae:7b:6b:90:82:44:4c:c8:29:66:ca:6b:
         e2:95:15:85:13:34:ef:7f:11:b9:3c:93:86:35:fc:9a:46:61:
         9d:fe:7a:df:c2:a9:e3:95:7e:74:64:83:97:8e:4f:5c:03:77:
         a1:36:60:7b:52:36:b2:52:b9:28:c5:bd:60:51:fc:01:41:f6:
         3c:1f:d0:03:fd:16:3e:64:2c:e7:ed:b2:f2:7b:06:f9:93:fe:
         e7:a1:bd:29:a4:d1:6d:2c:5c:9e:76:87:3b:e9:1f:cf:af:34:
         3a:03:98:b1:3c:14:a2:8b:f8:97:74:e8:45:db:8f:3e:96:82:
         9d:8a:28:fa:24:06:b7:be:12:d2:c6:3e:69:95:3d:82:7c:57:
         d9:e1:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:25:46 2024 by rpki-client on console-ams.rpki-client.org