Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File:                     5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier:          C1Uyi1EX/NDuaxSLrU1Rt67Jw9PQMM6jb1adnA8oDAs=
Subject key identifier:   E8:62:6D:C2:5C:C3:3C:34:B5:23:A5:D0:4F:43:6F:CD:35:3E:F4:C0
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer:       /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial:       018F41C4265BB4C6F555A7CD1213F02A4020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number:          0EDC
Signing time:             Sat 04 May 2024 04:02:04 +0000
Manifest this update:     Sat 04 May 2024 04:02:04 +0000
Manifest next update:     Sun 05 May 2024 04:02:04 +0000
Files and hashes:         1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: VB14Y2av/IopVIZTmKM/GXptC/lIPbBNUhjWAS8+7Ik=)
                          2: Kbjd4Dqi0TnC6qtaa0kVBqih8Qc.roa (hash: jfkOqoZxFkrpjbjuH8HoWsCjInDv8kqX9g7Eql27jGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:26:5b:b4:c6:f5:55:a7:cd:12:13:f0:2a:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
        Validity
            Not Before: May  4 04:02:04 2024 GMT
            Not After : May  5 04:02:04 2024 GMT
        Subject: CN=e8626dc25cc33c34b523a5d04f436fcd353ef4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:0d:f2:65:7e:ee:26:be:de:81:48:f0:be:
                    92:97:44:51:33:d6:3d:7b:c9:eb:ef:bd:26:01:b9:
                    fe:77:60:78:73:ca:fd:e2:91:fd:3d:9b:70:26:c9:
                    24:6b:3e:7c:99:29:12:98:bf:b7:3b:a1:11:d4:c8:
                    0b:a0:8c:e7:97:73:11:75:ea:25:4e:62:55:81:e0:
                    c7:a8:e2:d5:b3:c4:fb:3f:7a:c5:c4:56:62:96:b8:
                    a1:ab:c0:f9:c6:e3:24:f2:66:cd:60:ab:03:d6:6c:
                    21:b3:e7:56:11:9c:7f:e2:a0:4a:98:6d:62:27:37:
                    bf:c0:f2:4d:b3:b4:61:0f:81:bf:ca:19:16:c7:74:
                    95:ad:53:ba:df:21:81:c6:b8:cc:d6:9a:4f:29:1c:
                    f7:2a:08:58:64:5f:71:b0:8c:c8:8e:1c:a7:ff:e1:
                    7d:0d:c1:e8:04:39:51:36:f7:eb:ef:93:90:f1:a9:
                    35:9d:07:af:14:10:e6:03:63:42:6a:eb:eb:1d:82:
                    b9:9f:c9:50:53:77:1c:d0:4a:01:48:8f:8a:88:d5:
                    db:e6:6f:ad:d9:7f:ba:c3:1f:66:80:e3:16:b9:97:
                    0c:1d:b7:3b:0e:a9:fc:b1:00:8f:7b:b2:65:43:a2:
                    ec:d2:47:05:5f:ae:7b:e3:e4:f8:07:40:ef:1a:8b:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:6D:C2:5C:C3:3C:34:B5:23:A5:D0:4F:43:6F:CD:35:3E:F4:C0
            X509v3 Authority Key Identifier:
                keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:e6:50:f8:c7:1b:70:40:e2:63:cd:70:8c:21:d2:54:61:
         b8:25:1b:1c:c8:8f:af:fc:8c:ff:3c:24:52:7f:5d:ff:ba:54:
         62:8b:7e:a9:fa:5f:cd:92:28:8a:c6:64:1e:b1:d3:79:c8:b9:
         2f:35:70:ff:56:e3:68:06:48:89:40:09:02:1a:9e:8a:5f:b9:
         a5:88:3a:00:8c:00:5f:d1:dc:2d:d2:32:04:78:19:54:cf:4f:
         50:48:b1:d7:7e:88:fa:4a:ea:a7:fd:b7:32:4c:a1:67:86:0c:
         c3:a3:06:97:25:8c:4b:ae:0f:72:03:55:3a:6f:7e:6f:7a:af:
         b2:25:6e:70:73:60:55:b3:89:b4:2d:88:92:f1:f8:f3:76:9f:
         57:47:5c:f3:0e:7f:ea:33:03:11:da:88:22:19:9e:8c:11:6a:
         d9:7f:55:d8:0a:8a:01:ff:81:4d:11:0b:f5:e7:8e:e6:30:60:
         2d:dd:1c:93:a1:27:63:da:13:d4:9b:00:12:07:ff:7c:15:bc:
         d9:57:96:fc:5b:3a:c9:7c:da:5b:8f:cc:e8:90:9a:1d:82:09:
         6a:05:14:1b:f3:a9:aa:f1:0a:c9:a2:f5:6f:27:1d:25:b2:f4:
         cc:b0:98:3a:8e:08:40:1a:a4:99:ac:4a:58:17:90:01:61:f9:
         03:10:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:18:33 2024 by rpki-client on console-fra.rpki-client.org