Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File:                     hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier:          IRWb6WVGMR0hUXLTkICtT7BUPe3FAPBb5O901BWQK14=
Subject key identifier:   3F:98:9F:F7:23:87:A7:F1:6D:06:85:26:8B:DD:E3:A6:43:AB:06:B1
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer:       /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial:       018F938353B65D3B88B17A011D9B59DDD686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number:          0496
Signing time:             Mon 20 May 2024 01:00:08 +0000
Manifest this update:     Mon 20 May 2024 01:00:08 +0000
Manifest next update:     Tue 21 May 2024 01:00:08 +0000
Files and hashes:         1: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: gyYELdSGwPjioy9yldeWnOk+TKqqqG7QqgJ2YYnjwKo=)
                          2: osYAsnBJMHDx9mgNvPd41-8AUiw.roa (hash: MwIxQ5hAF643EkfnNbOen3a4mF1U6rwMbymKhdaIOak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:83:53:b6:5d:3b:88:b1:7a:01:1d:9b:59:dd:d6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
        Validity
            Not Before: May 20 01:00:08 2024 GMT
            Not After : May 21 01:00:08 2024 GMT
        Subject: CN=3f989ff72387a7f16d0685268bdde3a643ab06b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f4:f0:84:d8:3b:8e:49:65:27:2c:75:5a:15:
                    b9:60:e5:a3:73:75:55:a1:5e:0a:db:a6:e1:0a:61:
                    3a:42:f4:7e:6f:aa:84:5a:48:3a:72:d4:26:01:63:
                    55:64:6d:53:ee:9d:22:f0:b2:58:95:6f:81:91:21:
                    4d:e8:9b:4e:e0:8b:60:e8:f5:fc:dc:cc:3a:83:89:
                    47:04:ce:c0:df:fa:e6:b4:3a:94:5b:94:31:d5:df:
                    18:bd:54:53:c1:d4:24:2c:47:82:c1:fc:7a:f2:3c:
                    16:b6:75:56:72:39:ec:ba:21:2d:6e:0d:a2:02:81:
                    13:95:79:91:e2:89:5d:db:56:69:09:94:79:1d:03:
                    5d:62:42:99:09:89:ff:af:b6:53:56:0d:3c:8a:76:
                    4a:9a:ab:a2:a7:a6:3c:72:d0:8b:74:1c:0e:86:b7:
                    6e:7d:a3:60:21:b8:ae:45:f0:14:1b:db:6a:e0:62:
                    fe:99:22:91:86:cf:4b:ca:a9:3c:34:31:7b:1c:e6:
                    09:3d:21:23:1e:52:c4:f2:99:41:c4:ad:8f:5e:8a:
                    b0:7f:03:d7:2b:66:d4:ac:0a:e1:7c:04:45:f3:56:
                    1c:c4:ca:ec:d8:1d:39:7e:29:01:3a:54:0d:0c:40:
                    52:56:d9:a7:f6:b7:bd:40:92:d2:f3:89:43:d7:31:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:98:9F:F7:23:87:A7:F1:6D:06:85:26:8B:DD:E3:A6:43:AB:06:B1
            X509v3 Authority Key Identifier:
                keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:62:f6:8a:c0:1f:ae:2c:ef:f4:9a:ae:ce:d7:64:b2:92:
         76:02:07:85:81:13:99:0b:1e:17:ca:2d:a4:93:d2:7d:ed:f6:
         62:0d:a2:6c:dc:fe:f0:5d:8a:24:74:c5:f7:be:4b:64:b2:da:
         31:54:2a:ac:f2:80:85:db:e8:ba:47:f8:42:38:9c:b2:48:9f:
         04:7f:3e:9f:01:fb:1b:e3:48:2d:49:68:56:d1:ce:8d:24:2e:
         d7:17:ee:c0:ba:24:ed:85:8c:30:d7:45:0f:26:c1:2d:c5:06:
         48:ba:b1:c1:95:8f:54:f3:80:97:2c:ec:ce:02:b2:c8:07:49:
         cb:43:85:bb:5c:1b:69:90:29:9b:1c:50:92:e3:3c:1d:8d:cb:
         68:60:1d:c2:52:92:3b:cf:b1:41:0c:31:7d:76:8e:97:cb:07:
         cd:93:0f:fe:3b:2f:9b:59:67:c0:10:86:fb:1a:24:74:29:d1:
         50:e2:a3:f5:d6:1a:e3:69:92:d7:3e:1c:03:f6:7b:a5:2b:63:
         35:00:e4:16:9a:cf:15:65:e7:e8:ca:ad:50:0a:37:d2:a2:97:
         2d:61:6a:63:07:d7:ac:a5:e4:61:77:6d:a9:60:dc:dc:29:6d:
         66:cd:80:26:07:86:5e:33:e3:20:ab:d5:76:75:e7:e6:e4:f3:
         3e:47:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:47:59 2024 by rpki-client on console-fra.rpki-client.org