Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File:                     05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier:          Y/WOzKF44ahPlyZ/ZezEzHoRGrmQ0WjCdEFg9Q3E3Mg=
Subject key identifier:   7D:21:5D:B3:75:13:F0:58:2E:90:84:AE:6E:84:22:F0:45:69:BA:67
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer:       /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial:       018F40E7A1134CC57120D84AE327D98555F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number:          0C44
Signing time:             Sat 04 May 2024 00:01:12 +0000
Manifest this update:     Sat 04 May 2024 00:01:12 +0000
Manifest next update:     Sun 05 May 2024 00:01:12 +0000
Files and hashes:         1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: 1oJsQWl6sbVlwdGiF2yxtPg22rxOz22r/Lx21r92hEI=)
                          2: 5s_MKBT6kcR7SZU1R-3uvTc_uis.roa (hash: zSWBNYLNZucctZn7QH/7oQ/09cTVHdqD8p+gc1757e4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:e7:a1:13:4c:c5:71:20:d8:4a:e3:27:d9:85:55:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
        Validity
            Not Before: May  4 00:01:12 2024 GMT
            Not After : May  5 00:01:12 2024 GMT
        Subject: CN=7d215db37513f0582e9084ae6e8422f04569ba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:cd:89:80:5d:a1:c1:17:ec:04:46:64:5e:
                    f6:bb:48:44:3c:e1:50:0e:e5:a2:ba:63:c2:ca:3f:
                    cb:4d:23:9d:4c:84:33:2b:35:6b:9d:44:eb:11:56:
                    32:74:2d:ed:bf:06:b4:ff:61:a6:71:29:87:99:90:
                    a6:51:fb:11:5d:a2:b3:de:36:16:ad:1d:33:71:9d:
                    3f:02:30:cc:16:30:1b:76:aa:84:4c:80:8c:9e:42:
                    c2:6a:33:8b:e5:ae:77:78:78:91:c7:ea:02:7f:8c:
                    4d:63:e2:c7:55:2e:3c:a0:f7:a1:2b:d6:81:6a:39:
                    6a:60:11:33:12:7b:71:60:3a:40:a4:2c:37:03:de:
                    95:ca:a6:05:cf:58:80:ba:05:9c:8b:b2:0c:32:bd:
                    71:a2:08:51:8e:04:a1:70:83:65:49:bd:de:78:14:
                    f9:bd:c3:e5:37:84:94:b0:34:69:ca:1b:e7:a1:b8:
                    f4:b3:d6:23:2e:60:6a:a8:87:27:aa:b2:d2:e9:a3:
                    5b:58:74:54:8a:ff:66:21:0d:e9:d4:ce:b0:99:d2:
                    c6:61:74:0a:50:16:8c:4a:03:93:81:fa:92:ff:f0:
                    74:73:74:a0:42:91:e7:05:48:dd:45:79:98:88:82:
                    33:96:12:3e:52:4a:6a:21:a5:87:d3:96:11:87:2f:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:21:5D:B3:75:13:F0:58:2E:90:84:AE:6E:84:22:F0:45:69:BA:67
            X509v3 Authority Key Identifier:
                keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:08:f1:3d:9b:00:43:46:39:0c:22:9d:ea:cc:a9:ed:49:
         1f:26:c3:22:39:8e:d8:b9:67:9f:de:1c:0d:2e:1f:03:fe:64:
         b3:cf:a7:bc:84:d1:de:60:5e:a1:85:f3:19:d1:81:01:7d:b6:
         55:98:8b:c1:ae:75:b7:d8:a4:65:77:94:b3:4b:de:93:7d:de:
         33:a4:76:9c:67:56:90:3a:1c:e0:85:fc:0f:f2:c5:a1:18:33:
         c8:97:0d:56:f7:b2:d7:b5:d3:12:7f:60:bb:26:95:78:f7:76:
         b1:2f:26:fa:d8:2b:2f:98:e3:11:a5:5d:8c:20:90:50:d9:b7:
         ad:4e:4f:a1:18:03:f9:ea:a3:6e:43:58:60:74:98:5b:26:ea:
         67:8c:04:7e:d1:76:8f:25:3f:58:fe:f7:cf:34:08:82:7f:dd:
         fa:35:73:72:b3:b1:02:60:2f:51:bd:ae:c2:ae:47:39:7d:bf:
         b7:95:ba:f2:16:94:56:fd:74:32:3c:81:5e:ce:93:3b:1b:a2:
         e5:d7:8e:da:c9:ef:85:9d:0c:c8:b8:95:da:50:89:20:f2:6c:
         29:a9:40:d2:6f:6f:32:b9:8d:d8:f6:f7:bf:e0:8e:c6:f2:7e:
         23:50:bf:10:f3:fe:88:ab:76:6d:97:8c:c9:44:5c:96:b7:c6:
         49:03:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:14:21 2024 by rpki-client on console-ams.rpki-client.org