Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File:                     5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier:          rSfp0+BaLiM6adYJuUmCpf//k8metqE9FDWDISh0hyw=
Subject key identifier:   68:AC:7E:03:67:2F:AE:70:93:FD:42:40:3D:81:5E:37:B3:6D:CA:1A
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer:       /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial:       018F43B1D4A94AB5F09DEF88642CDC27CE59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number:          0486
Signing time:             Sat 04 May 2024 13:01:18 +0000
Manifest this update:     Sat 04 May 2024 13:01:18 +0000
Manifest next update:     Sun 05 May 2024 13:01:18 +0000
Files and hashes:         1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: mFjZuHlvjG2HlxTmcNCS3CYzRayl9VDKdkbnBvhAhyQ=)
                          2: 71x15irDbi-GCIJt2MQjGdy4wss.roa (hash: 9TcBa+jo1B/j4bv7lsz2bzAaRfC/etnehsuTXmxaCIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:d4:a9:4a:b5:f0:9d:ef:88:64:2c:dc:27:ce:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
        Validity
            Not Before: May  4 13:01:18 2024 GMT
            Not After : May  5 13:01:18 2024 GMT
        Subject: CN=68ac7e03672fae7093fd42403d815e37b36dca1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:98:d4:f6:c3:33:7a:1f:6c:67:47:f0:0c:
                    74:c1:db:c5:90:1f:45:94:7c:d1:24:e9:7d:81:ce:
                    86:d7:eb:c3:9f:24:55:6f:a2:7e:d7:e2:92:20:f2:
                    5b:c0:1d:44:4e:ee:db:f4:de:4c:34:8b:5e:90:e7:
                    c0:3d:12:4c:46:b9:2b:be:1f:f4:c3:f7:d2:1b:12:
                    a0:66:31:84:7c:a6:4a:f1:a9:4f:e7:0d:0e:37:b9:
                    74:43:4a:74:61:a9:5c:9f:0b:5f:da:c2:94:35:85:
                    d2:19:87:5f:94:7c:0f:d1:5c:66:24:fb:19:5a:73:
                    48:17:bf:f5:a4:62:72:59:ec:b6:57:c6:6e:b0:c2:
                    35:32:25:1a:fc:7c:8c:f4:ac:95:29:0f:74:db:8b:
                    a0:2c:ad:85:91:e7:a1:98:b0:86:bc:96:78:06:ef:
                    53:45:86:49:9d:31:ea:13:83:ac:b9:56:c5:fb:73:
                    7c:71:85:20:01:05:c5:68:10:b9:10:c3:83:ff:91:
                    d2:9e:7e:b7:e4:3b:c0:4e:9b:6d:28:40:fc:db:73:
                    59:7c:11:4c:f4:71:5d:89:db:ee:c8:37:fe:7a:ef:
                    d0:25:da:21:59:5f:59:63:47:9a:7e:43:b3:94:2c:
                    a9:8d:39:c1:87:22:62:d2:04:7e:3e:22:04:1a:9f:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:7E:03:67:2F:AE:70:93:FD:42:40:3D:81:5E:37:B3:6D:CA:1A
            X509v3 Authority Key Identifier:
                keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:8f:a1:69:44:33:22:f9:25:58:4b:fc:e1:b3:3a:e7:39:
         36:b7:b3:2d:9e:cc:0b:cb:95:96:5c:f2:e9:6f:79:6e:73:3d:
         bf:90:13:21:60:62:79:b2:71:7d:60:1d:65:03:62:54:16:6c:
         6d:34:d0:98:83:bf:eb:05:1d:aa:be:f6:ab:0e:9c:00:b4:73:
         90:4a:7a:d8:a9:f0:1a:52:55:e6:83:2d:d4:df:30:50:64:d1:
         12:15:b1:1c:fe:df:6b:41:ba:ec:69:c3:62:20:84:c9:d9:41:
         98:00:07:d7:7e:e1:a0:03:6a:ea:06:f4:f7:e2:14:29:56:2d:
         2c:4d:5a:69:22:18:cd:dd:6f:04:b5:ea:43:cd:fe:ff:62:f2:
         cc:e9:21:53:fc:05:3e:47:ab:d0:c8:78:81:a2:bf:24:c7:c1:
         80:c1:3e:09:e0:53:0c:97:30:62:0e:7f:90:2a:74:ad:be:ae:
         20:08:b8:69:73:68:51:6e:13:9b:e6:6b:61:48:8e:8f:82:4e:
         91:9f:56:8f:92:d3:00:5e:08:b9:d1:e5:a4:19:36:39:8d:97:
         dc:d4:45:57:71:c6:57:9b:99:9e:59:bd:4e:2b:41:86:66:97:
         c3:d0:79:db:85:eb:a9:e2:75:27:bc:28:9d:0b:7c:37:3f:be:
         ba:6f:75:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DsdSpSrXwne+IZCzcJ85ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjI2MTM0ODMwZWUyMGRjMjI5ODZkYzhhNzM2NmQwOTcy
YjI5MzAwHhcNMjQwNTA0MTMwMTE4WhcNMjQwNTA1MTMwMTE4WjAzMTEwLwYDVQQD
Eyg2OGFjN2UwMzY3MmZhZTcwOTNmZDQyNDAzZDgxNWUzN2IzNmRjYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQCY1PbDM3ofbGdH8Ax0wdvFkB9F
lHzRJOl9gc6G1+vDnyRVb6J+1+KSIPJbwB1ETu7b9N5MNItekOfAPRJMRrkrvh/0
w/fSGxKgZjGEfKZK8alP5w0ON7l0Q0p0Yalcnwtf2sKUNYXSGYdflHwP0VxmJPsZ
WnNIF7/1pGJyWey2V8ZusMI1MiUa/HyM9KyVKQ9024ugLK2FkeehmLCGvJZ4Bu9T
RYZJnTHqE4OsuVbF+3N8cYUgAQXFaBC5EMOD/5HSnn635DvATpttKED823NZfBFM
9HFdidvuyDf+eu/QJdohWV9ZY0eafkOzlCypjTnBhyJi0gR+PiIEGp/UWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGisfgNnL65wk/1CQD2BXjezbcoaMB8GA1UdIwQY
MBaAFOfyYTSDDuINwimG3IpzZtCXKykwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAt
YTc2MjkyZTIwNDU4LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAtYTc2MjkyZTIwNDU4
LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfGPoWlE
MyL5JVhL/OGzOuc5NrezLZ7MC8uVllzy6W95bnM9v5ATIWBiebJxfWAdZQNiVBZs
bTTQmIO/6wUdqr72qw6cALRzkEp62KnwGlJV5oMt1N8wUGTREhWxHP7fa0G67GnD
YiCEydlBmAAH137hoANq6gb09+IUKVYtLE1aaSIYzd1vBLXqQ83+/2LyzOkhU/wF
Pker0Mh4gaK/JMfBgME+CeBTDJcwYg5/kCp0rb6uIAi4aXNoUW4Tm+ZrYUiOj4JO
kZ9Wj5LTAF4IudHlpBk2OY2X3NRFV3HGV5uZnlm9TitBhmaXw9B524XrqeJ1J7wo
nQt8Nz++um91gA==
-----END CERTIFICATE-----
Generated at Sat May 4 13:52:46 2024 by rpki-client on console-ams.rpki-client.org