Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier:          NFKcCf8MZx0SNuXnvTq6kkh2unwKDg4HHSZN/d781iY=
Subject key identifier:   53:16:5D:0E:54:A0:E7:84:4D:E8:D2:DE:F2:94:D0:88:96:5A:0F:79
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       018F3CD43BBCDD1E0542171083721079749E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number:          0AFA
Signing time:             Fri 03 May 2024 05:01:32 +0000
Manifest this update:     Fri 03 May 2024 05:01:32 +0000
Manifest next update:     Sat 04 May 2024 05:01:32 +0000
Files and hashes:         1: 2b3iYQDjI5EehVrJd9r2dERywtE.roa (hash: Wnr8X/6dlGKOI+FFeAEDmGMuGT4ZTugtyipne42Q08U=)
                          2: 5vnUrz2qBBJhvCj14bDHP9RmEig.roa (hash: /pGb/F/eRxwZGMVOuw2gPgL5Sm9MXBAT1VvWzzhtVu4=)
                          3: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: FNfIn0lvBVvIb1B6CUVzAAHKQPl6hf38RpfdIPdYFrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:3b:bc:dd:1e:05:42:17:10:83:72:10:79:74:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: May  3 05:01:32 2024 GMT
            Not After : May  4 05:01:32 2024 GMT
        Subject: CN=53165d0e54a0e7844de8d2def294d088965a0f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:bb:19:aa:c9:91:8e:34:b0:2c:f0:39:5d:
                    d6:df:6d:19:34:6d:66:98:e9:35:7f:eb:ab:63:50:
                    91:e8:4a:75:91:b9:74:42:2c:9f:e8:c8:a2:08:08:
                    f2:7b:44:dd:77:53:19:85:e7:24:3b:8b:3b:2a:db:
                    d9:80:f5:55:30:c5:0b:c3:0c:0b:6c:6b:4e:cb:84:
                    eb:e8:ab:53:5a:9b:cf:42:d9:5b:b5:dd:dd:8c:d2:
                    f4:d6:36:8e:5c:36:e3:4c:32:0a:b2:a6:e9:20:c7:
                    ab:6c:cf:26:28:07:51:b7:ac:e5:de:0a:ed:7c:1a:
                    ec:e2:b6:f6:63:91:3a:00:e4:98:a1:1b:17:f0:38:
                    f8:25:3c:a0:df:15:4a:45:69:5f:23:5d:2d:f0:cf:
                    82:67:aa:d5:84:93:8a:29:42:6e:27:82:23:aa:9c:
                    26:c9:4e:97:60:3b:83:0b:f0:19:d9:88:ba:a6:f3:
                    e4:e0:92:ee:90:ac:2e:34:06:08:0d:27:59:5e:43:
                    6a:52:d6:e3:2b:6c:f4:f5:e8:c8:19:72:dd:7f:f7:
                    c6:d7:72:b3:c6:8a:4f:f2:93:25:23:89:b1:0f:19:
                    04:ba:28:0b:b3:f0:e5:76:c3:66:1e:69:43:f5:71:
                    13:02:89:8a:e0:89:06:8c:09:5f:b1:04:57:39:f0:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:16:5D:0E:54:A0:E7:84:4D:E8:D2:DE:F2:94:D0:88:96:5A:0F:79
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:07:9e:9f:09:55:83:69:99:d0:0d:08:a0:d8:39:c3:14:
         80:4d:50:9d:30:d9:d8:d6:60:8f:c6:ce:b2:f4:a6:66:5a:bf:
         42:cb:cd:07:d7:ed:cc:17:b5:3f:5f:8d:18:5c:cb:9a:88:b3:
         73:b7:b1:62:91:0d:15:31:85:04:68:1f:88:28:19:0e:76:71:
         ee:38:54:1f:3d:3d:1a:92:e5:22:0c:c1:1a:6f:d9:84:02:0b:
         e0:f2:ba:ad:6e:61:70:56:90:b6:85:3b:d3:4f:0b:fc:bc:59:
         a4:56:96:de:ed:8f:36:3e:92:5b:e6:36:00:9a:6f:79:64:9d:
         18:ff:39:ab:33:7f:02:c2:15:bc:dc:f0:12:0f:71:6a:69:42:
         e0:38:11:71:49:26:62:9f:e1:03:78:cb:02:40:f9:5e:9f:de:
         d1:a1:a9:7b:a0:57:d5:06:a0:fd:73:4d:2d:a9:bf:25:39:b3:
         de:08:bd:86:8c:61:8c:72:df:d3:fe:72:48:78:a9:01:4c:3b:
         f0:a0:15:c0:29:29:90:5f:16:b8:46:db:69:08:b5:6d:39:37:
         cf:f6:8d:b7:68:fd:2f:c1:ce:fa:7d:33:5e:ef:d7:89:a5:30:
         3b:8e:6f:75:35:61:11:03:1e:cf:ac:59:06:65:e7:46:71:b9:
         89:18:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:43:08 2024 by rpki-client on console-fra.rpki-client.org