Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File:                     aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier:          FVPrZ2wdA0EUJ6GP9CfIqNNbNfwiUK2KoLQNtdr/YDE=
Subject key identifier:   47:20:5E:07:78:13:4E:63:34:61:F7:D0:9B:CE:83:F0:24:B5:3F:CB
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer:       /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial:       018F87ED6EB1DADB6FC086430B84185C9F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number:          05E4
Signing time:             Fri 17 May 2024 19:00:35 +0000
Manifest this update:     Fri 17 May 2024 19:00:35 +0000
Manifest next update:     Sat 18 May 2024 19:00:35 +0000
Files and hashes:         1: 5z0Mdc3N7HpRWB726LUfwP0jNfs.roa (hash: Zf80PG4i3EFE4I8tKUoVZ+4U1vW1n5RSbvefWWni2ag=)
                          2: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: asJpk2HyUT8TUTYDCHHFwen/k/rJja3NXid4VgqBrpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6e:b1:da:db:6f:c0:86:43:0b:84:18:5c:9f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
        Validity
            Not Before: May 17 19:00:35 2024 GMT
            Not After : May 18 19:00:35 2024 GMT
        Subject: CN=47205e0778134e633461f7d09bce83f024b53fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:78:df:0f:36:bb:ab:74:9b:98:d0:73:a5:
                    00:e1:82:74:95:5a:70:62:fb:77:da:c3:dc:fc:a8:
                    5e:ea:35:28:02:e2:44:a1:36:a9:2c:d9:75:37:19:
                    a2:b5:ac:c2:2d:f0:b1:a4:ad:94:b7:8e:5d:23:f2:
                    59:e6:9d:b0:3d:4b:c2:26:60:67:48:2f:d8:75:d6:
                    d4:64:3d:c2:0a:6d:76:38:e4:99:45:51:bd:e7:7e:
                    9a:14:fb:6b:85:73:56:f5:d3:d4:02:23:5b:0d:4e:
                    ab:31:6d:fb:e8:73:8b:3c:3f:8a:bd:e1:e4:d9:0d:
                    33:95:2d:14:1d:4e:a8:df:5d:3a:21:4c:27:33:71:
                    a1:8a:3e:ad:80:56:15:9e:54:4f:cc:16:b1:45:12:
                    63:3f:db:46:ff:a8:19:9f:1e:45:4e:b9:ad:86:97:
                    ca:ec:7e:28:82:e2:bc:34:b7:2b:81:b8:81:0c:a4:
                    2e:e8:11:48:83:c6:91:b7:ae:fa:42:16:90:60:c4:
                    05:62:a4:7b:ad:12:bd:51:dc:b8:05:23:cc:a5:bb:
                    2c:a1:4d:b6:3f:c9:22:fa:d3:58:92:1f:44:d7:30:
                    a6:a0:26:99:ac:44:4a:25:14:7e:cf:ad:49:c2:51:
                    1b:33:dd:71:a4:56:db:11:7a:3b:3f:7b:3f:36:33:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:20:5E:07:78:13:4E:63:34:61:F7:D0:9B:CE:83:F0:24:B5:3F:CB
            X509v3 Authority Key Identifier:
                keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:58:78:95:cb:2e:0f:bb:f9:a2:b2:87:2c:09:d5:bf:dc:6b:
         45:e1:b0:a1:8d:5e:29:4c:2a:da:51:bd:88:ce:56:ab:07:36:
         14:e3:19:ec:ca:e9:f2:fb:8d:8f:84:40:bd:d6:09:9c:9c:d6:
         ec:ca:68:79:88:51:8f:85:79:f1:c0:0a:07:66:7e:5a:51:b4:
         d4:30:db:27:68:7f:07:d1:63:67:35:0f:23:d9:96:b3:2e:c3:
         4d:8e:24:12:61:70:e6:eb:5e:40:0b:66:32:d2:96:c1:5f:00:
         9d:af:eb:7b:49:84:ee:94:45:5d:50:ab:71:ef:a1:f3:b8:1c:
         8a:29:18:d6:9a:c7:d4:80:4f:16:9c:c1:31:68:ce:9c:54:df:
         27:9d:6a:64:32:8f:6b:da:a2:05:80:6c:b7:86:a9:1d:12:23:
         2f:14:26:07:b0:ea:ae:a4:cc:4a:bc:7a:28:6a:87:a8:04:ef:
         34:5b:ee:bb:fc:f2:e4:a5:be:0d:c1:4a:66:ec:95:a7:f3:a3:
         87:b6:ed:23:c1:4b:cd:85:a3:6f:ac:31:01:3c:4c:af:35:02:
         b3:1b:50:13:7f:e7:3a:ce:03:56:a5:e7:ab:75:72:6c:3e:37:
         cb:ee:6b:6f:a3:28:69:27:c3:43:4e:11:35:54:96:83:2c:75:
         d0:ed:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:21:20 2024 by rpki-client on console-ams.rpki-client.org