Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          47+DWgMOB3TNH20uyqgQDCv+/Naw3BfBs2En2US63To=
Subject key identifier:   2E:09:A0:0E:C3:1F:76:E0:B7:AC:CB:13:B1:A6:B9:7E:68:09:F8:B4
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       018F41C447220C9B0D2DD5E49F31470B5665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0971
Signing time:             Sat 04 May 2024 04:02:13 +0000
Manifest this update:     Sat 04 May 2024 04:02:13 +0000
Manifest next update:     Sun 05 May 2024 04:02:13 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: IN6BtD3tnPSrujoU9/hzqSpCD6PidqqiSPR0rrw9v28=)
                          2: F8M_agMr3GGnvM2bxpdc1OrXn8g.roa (hash: vWa8IO+BdTTMmfkUw+GRfzbark1ksrqVZW9eBkPD1nY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:47:22:0c:9b:0d:2d:d5:e4:9f:31:47:0b:56:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: May  4 04:02:13 2024 GMT
            Not After : May  5 04:02:13 2024 GMT
        Subject: CN=2e09a00ec31f76e0b7accb13b1a6b97e6809f8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:f3:71:b3:33:b9:6b:86:fa:40:29:16:c3:
                    c7:96:4b:a0:e3:2f:67:7c:1e:b0:2d:a3:9e:ed:3b:
                    50:26:f6:61:18:8b:3d:2a:c9:69:ae:bc:e6:13:92:
                    b7:54:7a:af:70:54:d1:3e:e9:74:6a:72:4f:e3:2e:
                    26:09:ea:f0:b9:1c:52:34:48:85:23:10:0e:f5:d3:
                    a9:48:62:7e:b7:b4:33:db:c0:d6:25:90:df:39:87:
                    84:2b:ba:f5:0d:47:43:b0:05:bf:77:2d:8e:2d:f7:
                    a4:8e:1a:35:11:bb:e9:3f:3a:83:5e:27:2b:e3:ab:
                    34:e2:85:b4:4a:e7:07:2a:14:f7:b7:74:84:31:4e:
                    4c:54:4c:48:65:81:f1:96:bc:4d:8e:0d:85:01:32:
                    87:98:72:f4:18:2e:05:6c:3d:1a:b9:26:31:e2:2c:
                    08:2b:99:85:00:6e:7d:78:66:4f:0a:4b:f5:34:24:
                    08:f9:05:b3:a1:2c:1e:ef:19:0b:c5:59:f0:06:76:
                    d8:15:40:cd:f4:c9:c2:00:23:39:35:dc:11:c0:49:
                    44:51:5f:6e:ab:6c:16:7f:c6:5e:95:8f:bb:87:23:
                    36:ce:04:73:f1:99:51:41:95:78:d8:7e:e6:d6:0f:
                    10:88:1c:3f:5f:29:09:64:c7:24:30:ab:96:1f:3a:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:A0:0E:C3:1F:76:E0:B7:AC:CB:13:B1:A6:B9:7E:68:09:F8:B4
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fb:49:53:b8:8b:a9:a5:03:fe:20:c7:ef:84:ae:a1:1a:e6:
         d4:ea:f4:dc:46:e6:91:0c:fa:14:4b:99:ed:00:63:35:27:3b:
         05:be:01:89:e4:f5:62:cf:a1:74:d0:67:96:a8:a3:00:05:bf:
         3f:a0:d2:a9:71:c0:33:49:18:00:2b:e9:0c:42:54:97:5c:67:
         31:45:13:ae:9d:fd:75:01:c7:1c:01:fd:93:3d:68:d6:03:f0:
         4b:c1:fa:2c:9a:3b:c2:ad:94:0e:89:ff:52:40:bd:24:ec:bc:
         e8:58:63:4f:6e:77:4f:96:6e:3d:4d:a9:ac:88:34:58:a2:be:
         fa:ef:ac:a8:ba:6b:cb:77:79:ca:ee:ce:27:21:cf:c7:d4:2f:
         e6:27:5e:ae:96:98:b6:80:8e:cf:af:8a:dd:e4:d2:0c:a7:25:
         d3:27:31:08:e1:38:1c:5a:28:49:c2:ee:12:71:77:fb:d8:4e:
         03:d8:60:52:1d:f9:9f:04:33:d6:0a:5e:b3:6c:09:79:ac:15:
         c9:54:16:32:fb:87:7c:18:50:f7:8e:e8:89:59:29:48:b1:28:
         8c:25:9c:8c:13:b5:db:97:22:9f:2b:ab:06:3e:8b:ef:48:b6:
         ed:78:a0:d2:7f:f1:c5:5c:6d:0d:2c:c5:9a:10:e3:8d:c2:6a:
         72:92:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:07:47 2024 by rpki-client on console-fra.rpki-client.org