Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File:                     5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier:          DA3+mcaR7xbGGDrUQgi8dgpIia4wPioZOPfTe8/aZ7w=
Subject key identifier:   A8:04:97:6B:AA:62:F8:07:49:40:74:E8:40:32:4D:12:17:F6:D1:5B
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer:       /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial:       018F1EFFCB108D33B867DC330EE4F02DA56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number:          1144
Signing time:             Sat 27 Apr 2024 10:00:30 +0000
Manifest this update:     Sat 27 Apr 2024 10:00:30 +0000
Manifest next update:     Sun 28 Apr 2024 10:00:30 +0000
Files and hashes:         1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: gFhC1Mwlduu606So2u/2c8B1Sm0sygBm6yhr6Nph6W8=)
                          2: sughfFlqcCV0eYYRqzKFUZEjzmY.roa (hash: Qn/+FBt1PL+wiYWDPKcpXnP/UI5K3coCedtdzZovE/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:ff:cb:10:8d:33:b8:67:dc:33:0e:e4:f0:2d:a5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
        Validity
            Not Before: Apr 27 10:00:30 2024 GMT
            Not After : Apr 28 10:00:30 2024 GMT
        Subject: CN=a804976baa62f807494074e840324d1217f6d15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:58:ea:7d:44:48:06:77:6e:c1:ef:ff:b1:
                    ac:32:38:4f:63:a3:a5:0d:f3:31:d1:ba:09:19:01:
                    79:08:86:80:8c:83:ec:65:e8:f0:7c:80:71:76:b9:
                    b9:96:88:d1:42:a2:37:ff:f2:fa:03:08:33:d7:d1:
                    96:48:5c:3f:92:44:f7:95:d3:3b:0f:a9:31:a0:6d:
                    55:15:2f:f7:1a:22:8d:36:cf:96:78:0b:95:52:ae:
                    73:12:2d:c4:fc:96:38:74:98:a7:ef:99:96:7f:27:
                    3a:fd:7b:f0:d4:03:6c:61:72:1e:37:b9:63:5e:c6:
                    fa:97:6c:23:8c:00:16:6e:de:4c:9f:d6:83:37:f8:
                    3f:27:2e:4c:08:13:ea:6d:bc:57:17:9f:9a:15:e9:
                    31:b3:cd:1d:64:6a:a2:bf:d8:ac:6d:9a:5d:11:00:
                    4e:a1:36:1a:d1:14:7e:eb:9e:c4:be:21:af:72:98:
                    42:1e:01:66:77:53:18:96:c8:63:ea:76:04:a2:47:
                    40:b3:19:ac:8b:9e:ba:60:87:78:13:b3:64:5f:5b:
                    27:e8:2c:2f:e7:09:5c:2d:2a:31:62:45:33:13:c7:
                    98:29:30:c5:00:1f:f2:49:eb:15:3b:a4:e4:48:aa:
                    eb:71:bf:ac:e8:64:94:16:e1:b9:52:03:0b:28:83:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:04:97:6B:AA:62:F8:07:49:40:74:E8:40:32:4D:12:17:F6:D1:5B
            X509v3 Authority Key Identifier:
                keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:ea:77:56:bd:25:11:4d:48:d8:6b:ec:a4:fa:c9:f9:2c:
         74:78:8b:a5:40:bf:05:82:f4:e7:bd:b3:5f:80:20:74:c2:5d:
         54:01:d9:d2:e4:c3:09:58:3b:8e:c3:8c:58:63:58:e3:cf:49:
         16:2e:1f:bf:26:02:0d:47:a8:f6:57:ec:10:ca:8f:ed:1d:ba:
         25:eb:31:eb:78:f8:93:d8:eb:68:6e:1d:18:94:c8:d9:6b:ca:
         67:d1:af:6b:fc:9a:2e:a1:50:06:f8:b3:70:64:1b:18:ba:0f:
         2e:7b:66:bc:3b:72:82:01:b4:86:aa:e8:30:27:88:1a:27:a7:
         90:57:ab:24:7f:bc:9d:6b:26:8f:3c:70:82:37:7b:89:f2:ec:
         6b:96:65:a5:21:c0:ae:20:89:29:8f:7a:ad:b9:89:88:76:bd:
         39:49:0d:7b:d6:25:b2:1d:d7:69:f8:7b:95:bc:ad:16:56:ae:
         1e:c0:47:73:b3:c2:5d:03:67:ed:1b:ff:57:76:a2:fd:5e:f3:
         e8:8a:32:6d:f3:e0:03:bb:32:2d:11:65:45:c4:28:e9:d7:a8:
         39:e3:21:1f:ce:67:ce:c7:f6:1b:28:98:e6:db:c2:dc:fd:91:
         7b:c4:b6:69:b0:97:06:28:fc:14:39:58:37:1a:01:bc:c7:3b:
         20:46:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:01:16 2024 by rpki-client on console-ams.rpki-client.org