Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          K5j1pEiOZ47/uToQ8CLV7H0/iV10U/uD1Ux0t0HIPSQ=
Subject key identifier:   50:4C:11:DD:4B:0B:3B:39:A7:B0:D6:6C:85:E6:60:2A:A8:A1:1F:55
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       018F3BFA191169BA0C39B5EFA0D0CA2A7DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 01:03:17 +0000
Manifest this update:     Fri 03 May 2024 01:03:17 +0000
Manifest next update:     Sat 04 May 2024 01:03:17 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: OdVKR2t1hCHw2RM3IDXyxEKvqIX+XHGi+dclGWiXdL8=)
                          2: ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa (hash: c+2Wvq5riJ3uEcgaHTzuOHvG49EHdwspAWlOwKBAotE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:19:11:69:ba:0c:39:b5:ef:a0:d0:ca:2a:7d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: May  3 01:03:17 2024 GMT
            Not After : May  4 01:03:17 2024 GMT
        Subject: CN=504c11dd4b0b3b39a7b0d66c85e6602aa8a11f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:82:1b:32:e6:1e:30:79:c7:6c:70:10:00:32:
                    0b:1b:7b:35:6f:ae:08:04:d6:0f:3d:28:fb:85:b3:
                    a6:91:14:2d:2d:95:a5:4b:db:72:86:2d:08:16:b3:
                    31:c7:d9:57:28:35:2a:b0:a2:57:e7:14:bd:f9:35:
                    d9:a9:c4:00:02:98:ee:72:27:4b:b3:f5:c2:7d:92:
                    b4:72:44:18:e8:b7:65:12:19:2d:b8:36:97:59:aa:
                    70:b8:da:33:c4:1d:37:97:25:e8:0c:d7:52:dc:7a:
                    6b:80:d3:ae:20:e4:18:d6:b6:01:cf:47:4f:a1:4e:
                    b7:09:a5:60:1f:41:a3:02:68:13:3f:d8:e9:35:34:
                    78:7a:7b:a2:2c:9c:7c:b2:c4:4f:fc:6d:77:77:82:
                    c7:75:78:75:b0:c6:db:5d:7f:b6:ea:9d:95:24:f4:
                    41:9e:1e:7f:0e:26:2c:da:c3:70:18:77:76:e9:c8:
                    0b:6e:47:bd:49:f0:6e:d7:f0:45:cb:86:43:a0:35:
                    ce:10:63:53:6f:e4:16:36:e0:ec:d0:13:b2:60:88:
                    5e:3b:1d:fc:f7:c5:3b:ea:d4:e0:57:18:85:89:8d:
                    df:70:87:53:72:00:ab:3e:d6:de:45:1d:4d:d0:01:
                    ee:2a:26:70:dc:24:45:b6:c4:2a:53:f2:d6:4e:59:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4C:11:DD:4B:0B:3B:39:A7:B0:D6:6C:85:E6:60:2A:A8:A1:1F:55
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:de:a3:22:8e:ff:d7:f8:5e:a6:44:63:6d:c9:da:b9:2f:8c:
         aa:5c:6d:9e:e3:22:cf:f1:2b:39:f5:e2:af:34:6d:3b:da:c5:
         57:bb:65:ec:72:1a:e5:f0:5d:06:44:27:80:a2:fe:a3:b7:c2:
         2c:48:23:5f:f8:3d:68:27:15:41:c5:f3:be:7a:bb:ec:a8:c6:
         f8:94:e3:8c:96:62:86:d2:e4:16:89:7f:46:70:d5:d7:87:18:
         67:0f:88:8c:c3:9c:1c:f7:e1:b2:05:90:9e:e1:b9:20:7b:03:
         e3:c9:3b:3e:6e:12:fa:ba:a9:c9:3b:79:ea:f3:04:83:c1:6f:
         b8:8b:4f:f1:4a:22:32:8b:64:ca:53:ff:7e:99:b5:37:31:34:
         43:62:91:79:5f:94:1e:5c:7a:44:ee:25:00:e7:38:87:a4:9a:
         d9:65:2d:2a:8b:05:60:ee:2c:23:11:84:ff:0f:6f:31:78:70:
         73:40:2f:b2:ed:b7:3d:1b:1c:72:f0:f7:e7:e8:25:d6:5d:e5:
         83:65:58:4a:e9:e3:dd:e3:98:29:07:98:03:54:bf:65:5c:13:
         05:0e:a3:23:ab:14:ef:23:a1:d1:ae:89:fa:9d:09:e2:5d:e7:
         45:5f:e7:f8:ec:10:43:a0:2f:c4:bb:d0:95:aa:78:41:0c:3f:
         55:50:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:43:25 2024 by rpki-client on console-fra.rpki-client.org