Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
File:                     5FudrqoDQlXqMxFPWLiMHD48fK8.mft (raw, json)
Hash identifier:          QmkVHF8N8PVVpguh4KEFq+7ouniT8pJ11KsYrMQ6jfw=
Subject key identifier:   3B:24:25:03:C3:DC:07:64:77:90:ED:72:8A:52:FA:9F:70:1C:D0:5E
Authority key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Certificate issuer:       /CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Certificate serial:       018F41C3CF172BE11F8587BFF6FE40D9DFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
Manifest number:          089E
Signing time:             Sat 04 May 2024 04:01:42 +0000
Manifest this update:     Sat 04 May 2024 04:01:42 +0000
Manifest next update:     Sun 05 May 2024 04:01:42 +0000
Files and hashes:         1: 5FudrqoDQlXqMxFPWLiMHD48fK8.crl (hash: j2haFlH3XC+ebLrr9iwHOwW4dmKnCZvSDvJiD1myuig=)
                          2: jdR3XAe03YrfNCLEGzgN8Ph3YX4.roa (hash: zPn9My7kljcm4wOZvIBW1hCUzbFiqqgnzEi7EcmUEXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:cf:17:2b:e1:1f:85:87:bf:f6:fe:40:d9:df:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
        Validity
            Not Before: May  4 04:01:42 2024 GMT
            Not After : May  5 04:01:42 2024 GMT
        Subject: CN=3b242503c3dc07647790ed728a52fa9f701cd05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:0f:51:dd:55:05:e6:d5:6e:66:00:68:58:
                    e1:d2:8c:8d:47:09:78:36:39:d8:35:ac:81:ed:a0:
                    b0:ee:f3:59:31:82:9f:82:90:3c:30:b6:98:b9:1c:
                    5f:09:ec:59:de:18:a6:61:eb:65:53:4b:f1:32:0b:
                    0c:54:fd:95:d2:7a:4e:b7:1d:e3:20:84:a5:07:f5:
                    9f:e8:64:c5:92:a5:a0:42:52:3f:4f:a7:d2:b6:6b:
                    13:8c:84:35:da:91:9b:aa:3c:0f:42:e4:84:3e:c5:
                    43:db:c4:d2:34:f9:34:30:d7:76:1c:2f:1f:0f:b3:
                    ec:16:21:32:69:63:3d:b0:ca:3f:e9:6a:63:4f:c6:
                    88:1e:8a:0d:88:e7:90:0e:7b:a9:d1:ce:73:9c:34:
                    6f:eb:02:3e:37:f9:9f:2f:0b:7d:f4:9f:86:6d:11:
                    52:f1:e2:88:b9:20:50:b4:d1:6a:1a:18:a6:11:38:
                    65:29:7a:16:e9:77:13:d8:af:c1:36:57:91:c6:68:
                    bd:ce:2e:6f:1b:75:05:85:39:ce:bb:74:f7:75:fe:
                    47:9f:16:e8:ca:78:91:64:d2:8f:6d:23:66:93:cc:
                    c2:8f:5a:c4:6b:18:77:4e:50:72:ee:a8:a1:c5:3f:
                    32:82:bb:ce:23:4d:63:17:92:5e:1b:26:60:bc:bc:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:24:25:03:C3:DC:07:64:77:90:ED:72:8A:52:FA:9F:70:1C:D0:5E
            X509v3 Authority Key Identifier:
                keyid:E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:67:fc:24:3e:45:15:29:dc:fa:66:ae:66:5c:f2:fa:29:9d:
         4f:8a:0a:28:0e:3d:5d:f2:57:f3:55:5d:3a:31:6c:3d:66:3d:
         bf:bc:7f:a9:2d:69:54:e1:bf:b7:aa:75:60:fb:c6:dd:7b:7d:
         8a:63:63:83:cb:05:06:44:ff:ca:74:05:d6:09:b3:0f:49:84:
         1f:21:ff:a1:49:fd:18:a7:23:87:9e:60:75:21:7b:af:17:a6:
         d6:b0:0b:06:6a:46:02:16:a2:0c:d3:1c:2f:fd:5f:d1:53:42:
         30:bd:51:5f:d1:82:1b:cf:34:f0:88:63:e4:ae:4a:3f:6c:c0:
         4d:0b:74:34:b2:45:e1:e2:bc:84:5e:e1:a6:f4:e3:d0:8c:16:
         a5:20:16:3f:5a:5a:97:37:72:da:31:9c:64:8f:e1:5d:10:99:
         97:84:b2:9f:c5:ce:24:b9:6f:f5:72:04:a9:16:4f:a1:b6:24:
         58:ad:9e:0e:93:74:7f:de:d9:d3:88:e0:93:1b:a3:a3:02:87:
         6f:b9:91:06:d7:fc:a1:6d:37:a6:4b:5d:d1:cf:45:35:a0:f0:
         9d:41:71:a7:e5:a2:21:c3:2a:24:a6:37:cf:0a:0e:82:5b:2e:
         39:fc:31:e9:ec:75:72:ec:dc:db:9c:4c:fe:0b:73:9c:cd:14:
         25:6a:39:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:20:05 2024 by rpki-client on console-ams.rpki-client.org