Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File:                     pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier:          zZQu51JTO8JlLcsAJOYI+FqP8QOzB7eiunXmUoBBWjg=
Subject key identifier:   CE:5B:93:8B:15:5A:61:C2:47:4A:42:FE:E2:16:6A:90:E6:23:B3:19
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer:       /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial:       018F87ED8B164FEC51332B882367294796DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number:          09F5
Signing time:             Fri 17 May 2024 19:00:42 +0000
Manifest this update:     Fri 17 May 2024 19:00:42 +0000
Manifest next update:     Sat 18 May 2024 19:00:42 +0000
Files and hashes:         1: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: wkzpbdSo8v6W2nOn/rSy6Ezd7WnUB1z/SA6s1ycZdrU=)
                          2: u8QMMjOaWd_Krv_W8LJeX00Sr3k.roa (hash: DylluWXw3pryeNDu9eYwxpsQ4bBN0mctFdR5kcS5inA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:8b:16:4f:ec:51:33:2b:88:23:67:29:47:96:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
        Validity
            Not Before: May 17 19:00:42 2024 GMT
            Not After : May 18 19:00:42 2024 GMT
        Subject: CN=ce5b938b155a61c2474a42fee2166a90e623b319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:2f:44:1b:cd:8c:6b:8d:4d:1b:89:47:a7:
                    98:5c:a0:39:9f:15:2d:65:04:a9:01:a8:57:46:04:
                    c2:d3:dd:da:d5:3d:b7:18:78:72:69:71:ef:a1:39:
                    ae:35:1f:59:42:04:fe:a6:33:56:fd:35:ba:02:7b:
                    db:3d:e8:d7:82:60:65:4b:8a:34:0b:39:32:79:21:
                    e7:ed:31:e2:7b:00:a8:06:98:2c:1a:e0:1a:f7:43:
                    93:85:2a:32:8d:ed:98:12:9b:31:9d:d1:d2:7e:73:
                    58:5b:81:e5:81:7e:34:df:a0:e7:85:53:28:c5:e6:
                    bb:4a:ad:b3:30:65:c8:b1:fe:0b:c4:9e:0c:86:d2:
                    9b:ed:ec:16:a1:99:2f:96:6a:47:2d:7a:1f:52:9c:
                    ef:36:2a:d4:2d:2b:59:b6:bc:a2:5a:a9:0d:60:24:
                    ed:e6:86:9d:78:ef:26:6d:ac:f3:d2:55:8c:6f:17:
                    98:fc:cd:a5:6c:a4:df:f2:ca:b3:ee:f0:03:be:8d:
                    f0:4a:d8:40:43:33:33:61:07:fa:94:6c:93:63:e6:
                    08:cc:6a:7a:4c:ff:31:1b:ad:55:66:54:11:4b:67:
                    f3:22:52:1a:06:69:0b:bd:9c:ae:28:c8:b9:a9:d8:
                    37:4a:5c:4d:17:0c:cb:32:ce:73:d7:14:5f:c6:c2:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:93:8B:15:5A:61:C2:47:4A:42:FE:E2:16:6A:90:E6:23:B3:19
            X509v3 Authority Key Identifier:
                keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:50:91:c4:df:c4:11:bd:b1:cf:c7:89:41:4b:7f:f8:42:
         23:56:e1:b3:88:59:c3:b0:15:25:ea:dc:14:c4:4e:b4:37:2f:
         6d:e2:1f:61:7a:d9:27:49:89:c6:13:b4:ea:0b:72:33:4e:1d:
         40:ca:ba:dd:0c:ad:c6:02:de:d8:86:db:ca:89:36:8d:d6:a0:
         fe:b7:22:d2:49:6a:24:f1:80:03:53:2d:ae:d7:3d:3b:d3:44:
         29:b3:56:30:ec:be:1d:a7:72:47:cc:b0:7e:17:0e:f4:ee:88:
         05:26:01:0b:ee:b7:5a:3b:00:92:2e:1e:1b:7c:e0:15:69:29:
         8c:20:5f:64:4e:da:36:ea:60:dd:4f:27:a7:d5:00:a8:96:fd:
         af:fb:0f:45:80:9a:59:db:5f:04:d7:d7:8d:99:00:6b:2f:fb:
         dd:f5:7a:f8:69:26:c1:20:14:d0:5c:cf:0c:f3:e4:ba:3c:e4:
         c3:2f:9d:8b:8b:4f:b0:d1:e5:1d:81:f4:b3:ec:28:ec:32:64:
         60:86:a9:08:12:3e:81:ad:ae:47:41:d1:c1:65:89:80:5a:0e:
         07:a8:a4:ed:21:0d:02:cb:84:9c:e8:79:1f:ff:33:ed:60:30:
         8a:ed:4b:1a:b1:46:78:62:30:c2:6d:39:23:30:00:eb:6e:00:
         85:b7:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:22 2024 by rpki-client on console-fra.rpki-client.org