Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
File:                     5ecAZeAJ3tlYVugKBTsuntzv-4w.mft (raw, json)
Hash identifier:          UcnaVEQVjCmKCa7FBntXsT4sh9MxDV5GjIiQoPg738s=
Subject key identifier:   90:3E:2A:EF:72:13:DB:DF:C1:2A:51:38:4B:65:6E:C9:F0:9F:FC:04
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Certificate issuer:       /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial:       018EF6725DF663F3931225DEB5D5427A7ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
Manifest number:          08BC
Signing time:             Fri 19 Apr 2024 13:01:14 +0000
Manifest this update:     Fri 19 Apr 2024 13:01:14 +0000
Manifest next update:     Sat 20 Apr 2024 13:01:14 +0000
Files and hashes:         1: 5ecAZeAJ3tlYVugKBTsuntzv-4w.crl (hash: YesXSSKx4Ny6XqwE0aBf+FfidlulfDiRp6pKFG1BGO0=)
                          2: Lx_4XFDsplQfOXQQGVipgwTfSms.roa (hash: OD9c/vjTLTeMTjWpAoQEiZoFFds5ic3aO4dEsnWENEA=)
                          3: i93dNDTZUmndF-WrTwIxtqLHx3Y.roa (hash: yCUwHnvF0Emqy9YYjXnuZJx5Irogsp7OFUEG8TMqtYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f6:72:5d:f6:63:f3:93:12:25:de:b5:d5:42:7a:7a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
        Validity
            Not Before: Apr 19 13:01:14 2024 GMT
            Not After : Apr 20 13:01:14 2024 GMT
        Subject: CN=903e2aef7213dbdfc12a51384b656ec9f09ffc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:f5:f0:04:70:1a:fb:da:9f:7c:86:ab:e0:
                    23:dc:86:e4:ad:32:2f:e7:f3:cd:85:0c:96:d9:6e:
                    54:35:fc:7d:22:7b:41:54:23:b1:ce:17:f1:a6:bc:
                    97:81:1f:6c:40:06:3a:ae:96:55:19:0c:08:fe:b2:
                    f2:97:94:7d:a6:ed:43:24:a1:89:77:d9:d6:19:68:
                    96:e7:06:bc:c3:30:b9:98:aa:fe:fc:38:ad:f2:48:
                    f8:46:f2:99:3a:18:42:f6:85:32:e1:5e:8c:27:79:
                    9b:16:81:f4:08:9b:49:d0:95:b3:d7:13:0d:16:1b:
                    3c:72:96:e6:11:1d:e1:27:ce:9c:e8:38:fc:56:67:
                    34:5b:aa:4e:89:0a:b6:24:4b:8f:a3:1b:92:0d:fe:
                    56:3a:c7:15:d6:f1:1b:e0:54:3a:84:57:b9:8a:2f:
                    b0:26:8f:ed:35:aa:3d:ef:2a:8c:bb:76:88:7d:0d:
                    4b:9f:ee:bc:35:fd:55:96:cc:4a:cc:27:a4:e1:d1:
                    4f:67:ea:87:b1:80:78:8b:41:9c:0b:d3:34:ab:f7:
                    05:9c:b2:aa:bf:28:cd:5e:61:cd:ff:58:df:2c:a9:
                    17:9f:92:b5:a3:c1:f8:fb:2e:b1:0e:f8:07:7c:b8:
                    ad:a5:85:7b:94:c7:b9:4d:63:b9:26:74:90:a1:38:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:2A:EF:72:13:DB:DF:C1:2A:51:38:4B:65:6E:C9:F0:9F:FC:04
            X509v3 Authority Key Identifier:
                keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:46:02:f3:97:47:74:bd:09:64:b9:5a:db:0a:86:c2:ce:a7:
         63:35:29:74:7a:5b:15:51:a5:c7:63:7a:81:7d:d9:63:22:70:
         86:13:98:48:49:2d:b2:ad:c7:08:e0:03:d3:82:ee:53:af:ac:
         45:8c:3b:6c:07:ee:cb:4d:a1:82:7a:16:1b:63:e5:d7:5a:bd:
         33:46:f7:48:4a:ce:12:2c:ec:a9:e6:44:f0:cd:e7:94:b5:21:
         15:18:46:87:47:b4:29:d6:ff:f5:51:15:3b:bf:31:54:d9:e0:
         fb:80:42:5e:7b:03:77:4f:ab:d9:22:6c:10:93:7f:16:c4:ff:
         4a:1f:8b:ed:83:72:fa:65:03:7d:45:eb:1f:75:e1:d5:4f:5b:
         2f:07:a6:5c:b3:c4:d9:16:b7:1a:ca:b8:da:e1:18:5b:98:f9:
         01:04:4e:d5:6f:0f:68:6f:25:93:d7:b0:a1:83:e7:bc:d9:fb:
         d3:d9:c5:90:a0:15:61:89:f0:6a:1b:5f:ac:3a:34:69:1c:37:
         1c:89:04:c0:bb:46:46:99:7f:27:fb:d9:17:19:97:57:6c:3d:
         8c:d6:98:a0:7d:83:a5:3f:27:d4:c0:06:ed:3a:93:ed:70:c3:
         d9:47:40:9c:b2:d0:cf:23:86:f8:68:c8:19:73:64:4e:71:61:
         5d:53:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:38:51 2024 by rpki-client on console-fra.rpki-client.org