Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File:                     X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier:          YEEaeUMKJqdye32H9SZYnCuBOy2epd3rv5Kn7Jx9qXA=
Subject key identifier:   BB:30:B5:E2:54:73:58:79:B5:D6:FA:C2:A5:29:8E:C1:51:0B:62:AD
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer:       /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial:       018F8749446E83FE2E2C0C4CC37CC753AAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number:          05CA
Signing time:             Fri 17 May 2024 16:01:16 +0000
Manifest this update:     Fri 17 May 2024 16:01:16 +0000
Manifest next update:     Sat 18 May 2024 16:01:16 +0000
Files and hashes:         1: 6hYPps6upqMPpPY_AH4fU_sBm3k.roa (hash: pJA3P1u1VlDV9gsetR13VzEZGMmKrFfnLljenpuQDEA=)
                          2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: G3vBP2wvhRKYLsQWf2kO0+pAshAt/qZL1LV5tVu+JqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:44:6e:83:fe:2e:2c:0c:4c:c3:7c:c7:53:aa:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
        Validity
            Not Before: May 17 16:01:16 2024 GMT
            Not After : May 18 16:01:16 2024 GMT
        Subject: CN=bb30b5e254735879b5d6fac2a5298ec1510b62ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:53:7e:86:de:d7:bc:99:1e:81:07:d3:43:
                    df:69:25:59:04:40:0a:f0:e3:40:4a:39:ab:a2:e6:
                    73:96:13:fd:0f:d9:c7:f8:59:1c:72:01:65:93:0f:
                    e3:b8:ef:b0:09:05:d5:7d:1f:f5:77:9b:a1:f8:1e:
                    5d:b5:3d:f9:02:1d:b3:ba:4f:9a:13:d0:14:56:bd:
                    82:ea:2f:8a:33:c4:b9:b6:cb:ac:ff:97:04:be:41:
                    f2:40:4b:5f:32:fb:64:9e:0c:f2:63:3c:02:dd:72:
                    a4:4d:68:b8:f8:f9:c5:dd:85:ee:18:66:7a:1c:22:
                    6a:9f:90:fd:74:c6:ab:9c:cf:07:9e:23:34:95:80:
                    95:6a:ca:55:61:8d:9e:d6:cd:1d:88:5f:f1:8e:20:
                    35:ef:db:eb:fe:f2:b1:74:5f:16:04:ac:07:04:c7:
                    db:ec:35:08:9e:15:d2:b1:b5:5e:cb:41:f4:ca:0a:
                    2d:31:a1:89:98:fe:d3:cf:59:44:fe:b7:07:c5:ba:
                    6e:ab:2d:ef:1e:99:95:c3:5d:8f:91:94:7b:3a:82:
                    28:97:fd:24:d8:7a:fd:68:4a:52:45:fe:a8:97:88:
                    44:b2:0a:e6:52:b6:96:a3:9c:6a:ae:14:c9:64:6e:
                    f3:f8:5f:8d:dc:60:6c:ea:2b:3b:ee:4b:2d:67:f1:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:B5:E2:54:73:58:79:B5:D6:FA:C2:A5:29:8E:C1:51:0B:62:AD
            X509v3 Authority Key Identifier:
                keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:6e:ef:12:15:9b:a0:d2:a4:1e:e7:c0:6c:57:76:e2:0a:
         c7:f5:38:e3:6a:78:6b:d5:f3:26:28:dc:4b:37:be:2a:e3:ff:
         7a:fe:a4:0d:2e:81:b2:02:fc:35:52:11:f1:8e:51:24:e1:c3:
         ff:5d:0e:71:32:fb:26:af:50:de:62:a4:cb:72:06:c5:6c:86:
         db:59:4e:df:db:ba:c5:be:2a:99:bc:e0:b5:98:20:40:01:c8:
         0b:9c:fa:c3:81:bd:21:1e:83:92:e7:1e:b6:b9:c3:e5:2f:aa:
         c7:c6:f4:39:89:0b:75:61:08:cd:88:f5:f7:5d:6f:99:1f:12:
         e1:05:6b:c0:10:76:e6:8a:a2:23:20:36:b4:68:67:b1:be:66:
         1c:3a:16:c1:dd:cb:0f:c4:c7:ae:61:e1:88:59:0e:af:cd:94:
         36:5f:42:0b:4b:a2:3e:8a:77:4b:54:23:d7:3b:a6:38:73:c2:
         67:4a:94:37:6c:fa:b4:13:3c:1c:1f:05:de:c4:3a:51:6f:68:
         d1:fc:63:54:ec:7a:6d:2a:08:26:48:af:d8:85:7c:77:d6:64:
         f9:f5:26:f5:98:7f:59:bf:90:81:c3:2f:1c:32:56:a0:cb:72:
         e0:59:51:55:23:73:e8:a9:23:d3:d7:c3:4c:18:43:aa:b9:32:
         53:8a:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:53:29 2024 by rpki-client on console-fra.rpki-client.org