Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File:                     5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier:          RySwbFsWmfkG+1k4qO8vI9MwPGy873x/Rvcu+O7TPC4=
Subject key identifier:   14:55:17:47:28:4E:C8:6B:6E:4B:01:54:3B:16:EA:1B:36:F5:FC:C5
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer:       /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial:       01935878262FFEAC65426243453EC03FB3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number:          06A3
Signing time:             Sat 23 Nov 2024 10:01:29 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:29 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:29 +0000
Files and hashes:         1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: OJR0lPf3nayl77R4KtC8mU7ppb1fHuiqJAeix5gc3fE=)
                          2: 71x15irDbi-GCIJt2MQjGdy4wss.roa (hash: 9TcBa+jo1B/j4bv7lsz2bzAaRfC/etnehsuTXmxaCIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:26:2f:fe:ac:65:42:62:43:45:3e:c0:3f:b3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
        Validity
            Not Before: Nov 23 10:01:29 2024 GMT
            Not After : Nov 24 10:01:29 2024 GMT
        Subject: CN=14551747284ec86b6e4b01543b16ea1b36f5fcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:c3:8b:e0:7f:92:ae:d0:84:d6:74:9c:2f:
                    d4:8e:30:6a:26:55:11:d0:d2:06:38:7f:15:fd:f9:
                    f4:c4:7d:e9:bc:fd:88:09:b3:ef:89:d6:fb:b3:54:
                    cb:b3:10:0c:f4:94:8b:6e:97:fd:93:64:98:69:62:
                    20:80:6f:60:91:9b:eb:6b:bf:43:b0:e9:0e:4d:93:
                    d7:c1:78:09:15:7f:a4:ab:0e:3d:1e:28:06:77:82:
                    68:16:fb:2b:52:4b:5d:c0:50:38:5a:48:71:21:7e:
                    de:3f:4d:d4:f3:14:25:ab:10:10:bc:49:91:40:1e:
                    a1:6f:ed:cd:c6:fb:57:2a:98:05:38:a4:42:4d:11:
                    82:89:b4:1f:69:9d:7d:5b:6b:f6:9b:7d:44:da:41:
                    b8:ac:1a:d4:64:a4:25:4b:16:bb:c0:c9:fb:b4:2e:
                    da:b9:3f:73:05:5b:38:81:7e:3d:a1:64:f3:88:f2:
                    00:31:0c:97:ae:70:8e:e1:37:a9:52:8d:55:cd:02:
                    f0:44:c0:91:43:c5:23:4d:5f:37:8c:3a:31:4f:0c:
                    0f:c2:03:b8:63:f4:0b:e4:d2:5a:a2:13:c6:25:db:
                    f2:88:0b:b0:98:b9:08:1f:6b:e1:79:52:1d:ad:82:
                    fd:bc:dd:1e:df:df:35:04:78:ef:f1:f0:ea:7a:bd:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:55:17:47:28:4E:C8:6B:6E:4B:01:54:3B:16:EA:1B:36:F5:FC:C5
            X509v3 Authority Key Identifier:
                keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:b9:08:d8:ac:2f:87:3d:66:19:86:85:2c:c4:8e:16:32:
         89:57:23:18:56:6a:41:fb:34:d1:dd:ab:f6:ca:48:29:b7:48:
         0d:16:66:01:c1:58:82:0c:4f:c7:1b:d6:9d:25:85:e6:d5:43:
         84:86:63:ac:48:c4:cd:fc:01:5f:78:f2:1a:f7:c8:92:8d:5a:
         f9:e6:f2:5e:7d:f2:23:bb:4e:b4:d0:d2:18:6f:48:72:b7:fb:
         16:5f:4c:30:82:6e:51:07:7d:48:c7:ab:1d:2e:bc:bd:57:0a:
         4d:a6:59:10:b0:1b:cf:ee:bc:81:74:c1:5d:e1:a4:a1:9b:e1:
         98:be:66:48:5f:fa:64:ed:f1:5f:a5:ba:7b:01:2e:32:5a:e3:
         51:04:19:fb:7b:f6:00:9d:81:c3:2e:1c:12:3f:74:0d:39:32:
         98:03:3a:5d:ab:70:52:ef:3b:c3:1b:83:93:fc:39:a6:fd:25:
         9b:6c:b9:d5:9d:2f:35:7a:91:b7:97:8a:39:20:0e:3f:84:e5:
         60:64:98:85:7f:ea:c4:ad:7d:fa:ca:98:d8:c0:ab:79:50:44:
         0a:65:12:75:0a:16:0f:85:82:17:87:2e:54:7b:bc:e0:0d:21:
         32:46:80:9b:f3:e4:27:0b:fa:0d:9d:f0:04:13:b2:17:54:eb:
         f2:92:72:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeCYv/qxlQmJDRT7AP7OvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjI2MTM0ODMwZWUyMGRjMjI5ODZkYzhhNzM2NmQwOTcy
YjI5MzAwHhcNMjQxMTIzMTAwMTI5WhcNMjQxMTI0MTAwMTI5WjAzMTEwLwYDVQQD
EygxNDU1MTc0NzI4NGVjODZiNmU0YjAxNTQzYjE2ZWExYjM2ZjVmY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaTDi+B/kq7QhNZ0nC/UjjBqJlUR
0NIGOH8V/fn0xH3pvP2ICbPvidb7s1TLsxAM9JSLbpf9k2SYaWIggG9gkZvra79D
sOkOTZPXwXgJFX+kqw49HigGd4JoFvsrUktdwFA4WkhxIX7eP03U8xQlqxAQvEmR
QB6hb+3NxvtXKpgFOKRCTRGCibQfaZ19W2v2m31E2kG4rBrUZKQlSxa7wMn7tC7a
uT9zBVs4gX49oWTziPIAMQyXrnCO4TepUo1VzQLwRMCRQ8UjTV83jDoxTwwPwgO4
Y/QL5NJaohPGJdvyiAuwmLkIH2vheVIdrYL9vN0e3981BHjv8fDqer33HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRVF0coTshrbksBVDsW6hs29fzFMB8GA1UdIwQY
MBaAFOfyYTSDDuINwimG3IpzZtCXKykwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAt
YTc2MjkyZTIwNDU4LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAtYTc2MjkyZTIwNDU4
LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSq5CNis
L4c9ZhmGhSzEjhYyiVcjGFZqQfs00d2r9spIKbdIDRZmAcFYggxPxxvWnSWF5tVD
hIZjrEjEzfwBX3jyGvfIko1a+ebyXn3yI7tOtNDSGG9Icrf7Fl9MMIJuUQd9SMer
HS68vVcKTaZZELAbz+68gXTBXeGkoZvhmL5mSF/6ZO3xX6W6ewEuMlrjUQQZ+3v2
AJ2Bwy4cEj90DTkymAM6XatwUu87wxuDk/w5pv0lm2y51Z0vNXqRt5eKOSAOP4Tl
YGSYhX/qxK19+sqY2MCreVBECmUSdQoWD4WCF4cuVHu84A0hMkaAm/PkJwv6DZ3w
BBOyF1Tr8pJyng==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:05:38 2024 by rpki-client on console-fra.rpki-client.org