Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File:                     5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier:          99+O+LYN+P9tDVYVKFe5HXybMnlmWBM/XpE8ypI6SbQ=
Subject key identifier:   4B:F0:21:8D:B8:F3:8A:08:1A:0E:08:2F:23:40:E8:93:2E:AD:EC:B4
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer:       /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial:       018F42688EC6D279246DAC859A2C4217D790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 07:01:39 +0000
Manifest this update:     Sat 04 May 2024 07:01:39 +0000
Manifest next update:     Sun 05 May 2024 07:01:39 +0000
Files and hashes:         1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: Vtgt8aSRu1c1wT5//6HaRm/CKZDtH3MaZRfC3QJf4oE=)
                          2: vfLEJA6B-ywqzFnQSGRmtPEA7hg.roa (hash: zYjIlSt+BzTpkxDLNgUZ1Hrm+Ivp0EjDRq+bpewI32s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:8e:c6:d2:79:24:6d:ac:85:9a:2c:42:17:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
        Validity
            Not Before: May  4 07:01:39 2024 GMT
            Not After : May  5 07:01:39 2024 GMT
        Subject: CN=4bf0218db8f38a081a0e082f2340e8932eadecb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b7:19:11:34:ea:fd:a9:32:f5:95:d9:8a:72:
                    e8:37:e1:9c:99:c4:c4:12:ae:80:37:ae:70:91:c0:
                    83:c4:1f:1b:a8:a5:a2:cb:bf:d2:cc:c4:20:0a:f6:
                    9a:2c:02:56:45:96:3e:35:4f:46:59:9e:27:16:6a:
                    f2:c0:67:ab:dc:7a:72:43:65:e5:a1:3e:c5:35:15:
                    71:f9:ec:3b:6e:cc:7f:09:c1:71:7e:eb:f4:ef:5c:
                    f3:e3:e3:b2:38:16:fb:b6:93:e1:89:26:d8:7e:e1:
                    0b:ab:6f:9f:14:13:45:90:4e:dd:17:e0:4d:f5:67:
                    61:5f:41:0b:de:f4:d2:d5:40:de:d0:4d:bb:26:a6:
                    8e:4f:97:03:0e:c7:cf:1c:fa:54:6e:78:de:d3:a4:
                    61:c5:37:2a:d0:e0:9c:99:35:12:b5:4e:97:f4:c3:
                    ed:80:5c:11:77:ff:7c:31:f1:1d:1d:f0:16:30:1d:
                    c5:a0:db:ae:1d:12:10:dd:9f:b7:99:ba:83:09:e2:
                    4b:8e:16:bc:2d:7c:43:f3:35:fe:58:5a:0d:34:7d:
                    0d:b1:de:ee:67:4d:0d:85:45:ab:7d:fc:01:37:7c:
                    97:ab:d9:83:c8:c2:fd:3f:4b:c1:97:4d:c1:d2:cd:
                    9d:fa:72:1c:3e:4c:02:0e:7b:56:4f:5b:d8:a6:cb:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F0:21:8D:B8:F3:8A:08:1A:0E:08:2F:23:40:E8:93:2E:AD:EC:B4
            X509v3 Authority Key Identifier:
                keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:49:92:9d:b1:07:00:ba:3c:ff:7d:c9:60:6c:d9:78:e8:66:
         82:0a:d6:c8:a0:92:25:6f:7f:3e:ce:4e:ae:74:99:15:c0:60:
         81:37:6f:75:8e:1c:63:6c:3e:e4:6f:e0:56:ed:d7:58:6e:d0:
         4d:e6:c3:14:51:06:01:ca:97:a1:9f:f8:c1:82:69:ef:e8:35:
         3b:67:f8:ae:12:da:86:48:0c:d8:30:e5:e5:12:66:c7:37:dc:
         0f:d1:d2:af:10:9e:69:7a:92:5d:84:66:d4:66:f3:10:1d:21:
         ac:76:ac:9b:d3:44:96:f1:b6:8e:6d:78:86:4a:9f:50:ba:c0:
         7f:29:53:4e:28:17:03:34:94:61:76:90:a5:f6:d2:44:7d:b0:
         d8:29:99:cd:43:24:9e:db:45:1e:63:86:95:84:0a:0c:eb:b6:
         77:d9:d2:37:d0:23:8f:01:9f:da:24:44:38:49:5d:2e:1b:60:
         e5:59:db:bc:21:26:24:9f:b0:b1:8a:03:a3:1b:44:bd:e5:4a:
         2c:0d:58:05:ed:4b:2f:aa:dd:59:91:4f:7d:ce:e9:0b:01:8c:
         62:e6:64:75:cb:51:94:8e:03:38:36:a7:bd:09:87:39:f0:87:
         ec:49:6c:b8:b5:8f:0a:86:50:7a:63:af:81:e5:58:50:14:88:
         42:48:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:17:56 2024 by rpki-client on console-fra.rpki-client.org