Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File:                     49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier:          LJz4vUHtU4bSfAOipFk5qI4gEtdTvMOpXOJtUnLi8Tc=
Subject key identifier:   2D:F3:BA:48:05:1A:DA:2E:08:48:05:88:E4:20:59:12:5D:33:4A:D3
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer:       /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial:       018F576F4CAFC9C7ACC8E96C4015D8490B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number:          05E5
Signing time:             Wed 08 May 2024 09:01:02 +0000
Manifest this update:     Wed 08 May 2024 09:01:02 +0000
Manifest next update:     Thu 09 May 2024 09:01:02 +0000
Files and hashes:         1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: 0kEnH/kKNI9Xy72oB5+Wrx4nwlrd5TxHulv/7Nv9bas=)
                          2: kiUjqOQQw0-Gzaxe83XGYR53hZQ.roa (hash: Bh1BypJYLiE4CP7XNuvryqkP7TZqPNle0TuPHT4PS3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:6f:4c:af:c9:c7:ac:c8:e9:6c:40:15:d8:49:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
        Validity
            Not Before: May  8 09:01:02 2024 GMT
            Not After : May  9 09:01:02 2024 GMT
        Subject: CN=2df3ba48051ada2e08480588e42059125d334ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:e9:2a:be:a4:74:6c:7c:55:a8:37:54:6e:
                    fa:56:e3:34:eb:6d:4c:0e:e2:9f:e0:9f:92:f8:72:
                    28:0f:5e:86:5a:0f:76:ee:93:14:a3:4a:91:62:98:
                    93:56:0e:bf:a2:20:1a:00:91:ec:b8:67:d2:d6:7d:
                    62:7c:68:02:ef:b5:62:6e:ca:39:18:ef:73:0b:57:
                    6a:69:c5:4e:a2:b0:42:d0:44:00:68:d4:80:58:ac:
                    d7:68:d8:54:13:5b:b5:81:92:82:e6:e2:07:2e:99:
                    63:3f:26:f3:40:66:5c:e9:8e:08:a9:74:22:b8:e1:
                    86:f8:6e:59:17:02:00:2a:07:f9:ed:66:f5:47:b0:
                    17:c8:3a:42:ce:7c:a7:71:d7:0b:34:08:d4:67:f0:
                    7d:1f:28:eb:37:ce:25:b6:12:88:65:b4:20:78:c9:
                    31:d6:68:48:3d:64:62:f2:7f:10:f1:0a:ba:6b:c6:
                    e0:2e:71:87:d6:d8:98:5e:fc:df:7d:de:b2:86:f6:
                    a1:48:89:33:3e:f9:6d:65:36:a9:e8:e1:89:0c:81:
                    3b:d1:69:a7:36:5b:1d:e0:20:b2:35:03:96:93:fc:
                    66:2a:29:2f:e4:59:3f:e8:20:0f:9a:e0:80:3b:9f:
                    e8:99:cf:fb:4f:12:aa:c7:16:ec:8d:ba:26:be:de:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:BA:48:05:1A:DA:2E:08:48:05:88:E4:20:59:12:5D:33:4A:D3
            X509v3 Authority Key Identifier:
                keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:cc:d9:98:cf:2a:5d:82:69:ae:09:e9:34:e3:fd:ec:9e:
         04:1e:1a:7f:12:2a:df:be:98:5d:b8:0d:ff:68:e7:21:b7:bd:
         b5:14:38:8c:02:4a:3c:f1:ab:00:1f:cd:78:65:1d:d1:27:06:
         a6:33:8b:05:07:2b:c2:b3:66:86:0c:4f:91:71:b9:55:31:b8:
         f4:d3:6d:7c:ff:58:12:ca:2a:e9:45:06:eb:83:01:7d:6b:70:
         ee:25:69:51:2c:b4:1f:94:6c:87:56:4b:21:26:92:6c:75:d3:
         af:bb:bf:57:be:5e:ca:e0:d0:a7:94:26:c5:2f:1a:01:7a:15:
         0d:b9:12:0e:94:41:35:51:b9:09:1d:cb:fa:30:45:0b:a1:9e:
         91:6b:a1:51:18:21:6c:ab:08:b3:39:1c:57:93:ac:08:37:82:
         ea:41:80:78:b0:d1:c2:74:d6:cf:0a:8a:c3:7e:f1:fe:5b:cd:
         68:33:8e:aa:dc:75:8f:f9:e5:9b:e8:f0:ca:21:19:7b:58:ba:
         af:89:ab:14:da:d5:a0:cd:a0:a4:db:3c:ec:06:7b:d7:41:c7:
         d2:02:c8:20:ec:84:2c:3d:7e:ce:b8:3d:e4:1f:50:61:8f:49:
         ff:2e:c7:3f:87:b8:d6:e5:39:cb:2d:52:7f:42:f6:66:69:12:
         e3:14:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:09:39 2024 by rpki-client on console-fra.rpki-client.org