Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File:                     5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier:          iiO8sWhuzdMnHqbJaSHC2iajSLx65Q+ezFYn52faXG4=
Subject key identifier:   95:B2:96:BC:F9:57:46:14:82:56:E6:C0:C9:D1:8B:1C:6F:9A:FC:3D
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer:       /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial:       018F44C4AD09C76AE15BB134406E14783ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 18:01:31 +0000
Manifest this update:     Sat 04 May 2024 18:01:31 +0000
Manifest next update:     Sun 05 May 2024 18:01:31 +0000
Files and hashes:         1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: K3+R644JKEUCEvWX5g4sKR2NSyyNI8wXqRU0VEAFJyc=)
                          2: 8CNFtHeunOAHjVPuKNT21-SEA8M.roa (hash: fwwIPeUn0nsXgKw34ZvecC7VgTTCgABJxpG7ex26gWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:ad:09:c7:6a:e1:5b:b1:34:40:6e:14:78:3e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
        Validity
            Not Before: May  4 18:01:31 2024 GMT
            Not After : May  5 18:01:31 2024 GMT
        Subject: CN=95b296bcf95746148256e6c0c9d18b1c6f9afc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:93:ef:8e:96:59:70:83:9b:be:91:d1:44:
                    9b:0f:67:5e:c0:a0:64:8d:44:6b:b9:fa:3a:a0:dd:
                    05:4b:03:00:eb:20:e1:49:07:e1:34:90:dc:2c:26:
                    01:29:d6:08:cf:4c:65:54:81:1b:54:5c:b1:5c:40:
                    26:64:63:bc:f2:d9:75:7a:0d:0b:c1:27:e9:8c:d3:
                    7b:04:c3:6f:d9:97:02:16:7c:55:a7:a2:48:49:8b:
                    03:bc:12:c2:ec:d7:4d:ea:ed:e1:3b:82:4b:cf:6f:
                    31:36:19:7b:c3:19:ad:c9:9c:06:11:44:30:26:bb:
                    d4:e9:23:65:de:89:57:bc:1d:de:a4:86:8c:4a:80:
                    46:b2:fa:2b:d9:6a:01:09:5b:70:1e:fc:6c:28:2a:
                    a9:07:31:75:73:2b:41:9c:cf:d2:7d:a0:9d:90:82:
                    02:7c:15:3f:4b:a8:68:66:1b:1c:f6:10:1f:0c:a0:
                    2c:5d:36:82:ca:ee:d4:70:c6:b0:5f:77:56:41:9c:
                    1b:21:2b:8c:a9:04:b7:a6:05:41:3a:b4:cb:fa:e3:
                    e6:6c:2a:7b:b4:41:b4:bb:21:ae:42:8c:35:62:26:
                    d4:b1:79:f7:7c:ca:48:c8:4c:6d:9e:f0:74:d4:36:
                    dc:87:5a:31:6f:5f:5d:4d:0d:ab:f3:64:57:71:ff:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B2:96:BC:F9:57:46:14:82:56:E6:C0:C9:D1:8B:1C:6F:9A:FC:3D
            X509v3 Authority Key Identifier:
                keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:51:4a:be:99:61:8f:e1:cb:09:d8:65:bf:a9:03:9e:3d:
         d7:80:c5:84:6b:e6:31:2f:01:1b:55:9d:5e:80:77:bf:aa:2b:
         16:85:d9:2f:66:aa:49:02:e6:02:f4:08:ab:75:72:c4:aa:ef:
         1a:d3:ea:7e:4c:b6:f5:ed:2e:4c:f7:42:24:90:48:c8:48:d8:
         ad:02:c6:e1:3e:90:55:65:fc:b6:61:a1:6b:5c:16:2c:ce:43:
         ca:c1:d2:f4:d1:c8:cc:b8:71:de:d5:49:8b:f8:6a:41:7c:b1:
         63:71:c6:9f:4b:16:06:71:bd:31:9b:90:9b:df:c1:5a:02:3d:
         03:a8:7d:17:43:17:7d:52:1c:59:ca:66:7f:9d:a3:c2:ef:af:
         46:e5:92:c0:30:a9:cb:23:c7:de:1a:77:82:96:6e:db:f7:ea:
         ad:7f:0b:49:0e:75:33:45:36:0d:d0:17:1b:09:cc:f4:0b:79:
         1d:88:57:64:c1:76:a8:cb:c9:a1:b9:9f:62:d5:33:90:42:80:
         e8:22:2b:2d:0b:f7:25:cd:df:2f:7f:88:88:db:bf:2e:4d:39:
         5f:41:2b:64:8e:1a:fc:fe:43:82:6f:a8:24:0d:f8:fa:67:ef:
         1a:b1:a8:e3:be:80:7c:2f:87:46:a7:14:65:9d:6b:c1:8a:f8:
         0e:7c:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:17:01 2024 by rpki-client on console-fra.rpki-client.org