Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File:                     5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier:          dOhfn1AwzRvYbfBpSW3bXTSl5iO+40u1WJyC28dsqmg=
Subject key identifier:   23:7E:79:F1:B7:66:22:25:B1:CF:27:BD:49:36:4A:67:97:85:CB:DC
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer:       /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial:       018F3C65D4F34E87F2386114C33AEC24BF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number:          0491
Signing time:             Fri 03 May 2024 03:00:57 +0000
Manifest this update:     Fri 03 May 2024 03:00:57 +0000
Manifest next update:     Sat 04 May 2024 03:00:57 +0000
Files and hashes:         1: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: bZPoXzbQ5z5CviYo6dN27nR24qQw43KUkpbqf54ZT+g=)
                          2: yQbE2F7D8SUoPYHDwe_C32Ev_Iw.roa (hash: qH8wZHEUQzY7t0ub2sS32MpbfVlucfQ3Ric/1FQrm94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:65:d4:f3:4e:87:f2:38:61:14:c3:3a:ec:24:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
        Validity
            Not Before: May  3 03:00:57 2024 GMT
            Not After : May  4 03:00:57 2024 GMT
        Subject: CN=237e79f1b7662225b1cf27bd49364a679785cbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:10:76:8f:22:15:c9:80:bf:21:53:58:78:
                    42:e0:aa:32:46:33:25:06:4c:90:d7:12:2a:f4:eb:
                    88:df:e1:6c:b8:3f:5d:0c:2e:ae:0e:a8:27:b0:65:
                    dd:27:25:9b:32:36:aa:3b:45:6b:7b:41:21:ab:62:
                    bb:4c:1a:25:b5:fb:86:e0:b0:f2:74:61:4a:84:21:
                    44:85:7b:0d:3c:da:4e:d7:f9:88:b8:a0:cc:c4:3f:
                    6d:d8:62:43:38:21:96:69:d3:78:9f:3f:b4:dd:bb:
                    16:09:5e:45:22:c7:4e:e5:7a:62:9f:2d:d0:a6:3e:
                    b3:72:b1:d0:bc:ef:f1:f4:f8:b1:ba:4f:55:6b:ea:
                    cf:96:3b:61:bb:5f:c4:29:07:f6:d7:bb:af:1c:61:
                    cd:aa:21:cc:d2:32:09:a1:5d:65:12:37:3e:ec:b5:
                    89:37:70:d4:93:fa:7e:c4:23:b0:05:d0:19:7d:10:
                    27:37:d5:e5:f5:3d:8a:f8:80:16:ad:ed:4e:9a:c3:
                    5a:aa:1e:bf:88:4a:4d:c7:7a:c8:8d:6b:f6:3a:36:
                    82:20:3c:87:f0:4f:6d:61:6c:df:3d:f9:b3:04:81:
                    b0:33:f9:c3:cf:84:d1:ee:72:9c:8c:bf:a7:78:5a:
                    32:13:22:c8:eb:d4:f2:cc:5b:e8:c6:4a:ff:ec:fb:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7E:79:F1:B7:66:22:25:B1:CF:27:BD:49:36:4A:67:97:85:CB:DC
            X509v3 Authority Key Identifier:
                keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:22:4f:57:df:fd:30:49:7c:6e:ba:f7:97:df:b7:9b:6a:65:
         73:18:7e:1d:10:f4:0f:b6:76:b5:1e:c6:00:d1:b2:52:ff:1b:
         30:e8:dd:12:13:1f:b9:04:3b:8f:e4:ad:91:b1:b3:f7:f2:b2:
         9e:e2:b4:2a:16:6a:b1:2b:14:6e:e2:85:04:83:3f:3d:ac:8c:
         fe:d5:4e:ea:50:5b:47:38:0f:15:b7:c8:03:a4:61:d4:dd:0a:
         2a:82:39:7a:7e:90:b5:ea:5c:46:87:6b:40:c3:b1:0e:e0:44:
         db:8b:c5:e9:b5:12:65:96:1f:c8:45:fd:c0:27:16:6e:0f:7a:
         8e:6a:ed:8d:92:8a:9f:5f:67:02:f5:d8:96:52:fa:08:75:42:
         30:62:65:0b:15:a8:ec:21:a6:e5:ee:25:af:8b:9b:ae:0f:2f:
         39:e6:91:02:98:bb:57:16:95:1a:9c:c8:4a:4b:dc:24:f4:5c:
         51:4a:a4:8a:b3:56:a4:67:19:9c:01:6e:7a:f3:73:5d:cc:54:
         2d:5c:15:78:21:1b:47:90:26:fc:ba:9c:29:fd:15:5e:ca:1e:
         86:63:f4:1d:c5:7b:d9:9d:dc:04:62:3d:bc:33:6f:b0:cf:a1:
         9f:90:67:4a:32:ae:75:bf:af:1c:8b:50:f7:64:06:72:75:46:
         02:ea:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:16:22 2024 by rpki-client on console-fra.rpki-client.org