Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File:                     5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier:          /CkKN8nUMAB/bwIx3UU2Dhn9RXFcheb+O07JJf5qnoo=
Subject key identifier:   EE:1E:60:A0:DE:F9:AC:0F:99:23:E3:29:66:17:39:53:A7:6C:C4:D7
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer:       /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial:       018F3A0CD41A9CFAF07871DA877E8DA29B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number:          1152
Signing time:             Thu 02 May 2024 16:04:30 +0000
Manifest this update:     Thu 02 May 2024 16:04:30 +0000
Manifest next update:     Fri 03 May 2024 16:04:30 +0000
Files and hashes:         1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: TBEp/qCcXGuBhKx6eKhkSE5Sqn3lK17i0QFmCnc21o4=)
                          2: qAwuED-1VNPVMySVKSnG4_G6nJk.roa (hash: krbAmNL/6aSKicRchzWScMV4WZEf6dqMGaGCkJ80Myc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:d4:1a:9c:fa:f0:78:71:da:87:7e:8d:a2:9b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
        Validity
            Not Before: May  2 16:04:30 2024 GMT
            Not After : May  3 16:04:30 2024 GMT
        Subject: CN=ee1e60a0def9ac0f9923e32966173953a76cc4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:f3:5c:b5:8b:eb:d2:c2:93:18:7d:0a:b2:
                    da:45:33:cb:a7:47:e3:33:21:40:40:f2:7a:bf:6f:
                    4b:8d:22:20:7e:2a:70:a4:dd:fc:ad:07:d5:66:b6:
                    12:d4:37:23:28:29:41:a4:68:0a:d5:d4:45:70:e4:
                    6b:42:fd:e2:96:6f:a8:3c:1d:da:d2:70:01:7c:fd:
                    c0:d1:13:a0:31:ab:30:60:52:82:f8:32:27:a8:12:
                    59:b8:96:e9:85:03:a2:61:7b:37:27:40:20:a0:d8:
                    f0:3c:86:63:88:48:dc:61:70:4e:9a:b5:1e:5a:3d:
                    20:45:90:0a:31:a3:8d:a6:ca:6f:b1:df:0f:b6:85:
                    5c:50:c6:01:45:e7:2c:a2:fe:de:45:01:f4:7d:bb:
                    13:73:d6:55:f0:59:c8:7a:27:df:71:50:d0:85:b2:
                    d3:c5:f4:bd:e8:e5:41:76:53:07:24:35:52:4d:fd:
                    d2:d8:71:4b:ed:cb:4f:fa:57:4e:ed:31:e6:0f:81:
                    4a:73:a1:ca:ef:1b:83:bd:2f:7c:66:28:f8:62:3c:
                    7c:cd:93:10:d2:8e:1c:5b:37:1b:a3:7e:2f:c1:87:
                    fb:c4:b0:c7:15:c1:d8:a1:e1:fc:ba:a1:0d:b6:95:
                    6d:18:eb:60:dc:80:9e:d3:31:0a:9a:5d:1d:99:5e:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:60:A0:DE:F9:AC:0F:99:23:E3:29:66:17:39:53:A7:6C:C4:D7
            X509v3 Authority Key Identifier:
                keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d2:25:90:f4:f3:fc:cf:35:33:42:78:c5:74:47:b7:21:4f:
         b1:96:23:15:8c:f2:eb:dc:25:63:16:21:da:5b:ab:8b:6f:3c:
         6a:c6:61:76:84:07:05:05:70:89:3a:2a:39:18:1c:85:d3:49:
         f2:14:c4:3f:26:c0:9b:5e:70:7f:97:84:38:bf:b7:2f:42:25:
         3f:f5:6a:9c:d4:13:ef:db:1d:9a:3c:dc:27:bd:95:bd:1f:0e:
         81:c7:28:1f:20:ab:46:a8:46:96:f3:b8:44:fc:d4:82:c5:c5:
         92:ec:4b:aa:46:78:d2:0c:5f:b6:cd:3b:2f:39:c4:30:1d:52:
         95:66:66:f9:d8:09:be:da:d8:84:d7:f8:91:b4:df:0b:76:1e:
         7c:85:28:e6:0a:0a:67:3b:fb:69:0d:1d:fa:38:ef:23:29:69:
         0f:6a:15:ec:5b:b7:6d:fb:6b:de:38:e0:3f:72:a6:15:51:e6:
         67:e4:1f:5c:51:a8:c2:14:0d:66:c8:24:2e:d1:2d:d4:9b:af:
         35:96:db:f8:60:fd:b8:58:22:80:dc:ed:ab:29:8b:60:49:aa:
         fe:05:f8:c5:12:e6:94:2a:f0:6d:e0:e5:f4:a5:05:aa:f0:c9:
         4b:7f:e5:f6:9e:38:0c:68:6c:89:3d:dd:e2:bf:1b:31:17:16:
         02:48:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:51:30 2024 by rpki-client on console-ams.rpki-client.org