Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.mft
File:                     5dkNfwNRL229BkXf4nQ2ji2ETCM.mft (raw, json)
Hash identifier:          wL7uDDI+ufmBFv7ssxq05cnHdIqHrwnMaOZSufBOEHM=
Subject key identifier:   22:75:EE:AC:DA:90:04:8B:88:6D:39:32:3D:4C:81:7E:42:73:A4:A1
Authority key identifier: E5:D9:0D:7F:03:51:2F:6D:BD:06:45:DF:E2:74:36:8E:2D:84:4C:23
Certificate issuer:       /CN=e5d90d7f03512f6dbd0645dfe274368e2d844c23
Certificate serial:       018F4079EE843DC6DC5DE4032E7692B6214E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dkNfwNRL229BkXf4nQ2ji2ETCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.mft
Manifest number:          1155
Signing time:             Fri 03 May 2024 22:01:23 +0000
Manifest this update:     Fri 03 May 2024 22:01:23 +0000
Manifest next update:     Sat 04 May 2024 22:01:23 +0000
Files and hashes:         1: 5dkNfwNRL229BkXf4nQ2ji2ETCM.crl (hash: Cuf3uK0kH75mu//fAHhRri+hQTd5jB14tHGQIzh6Kn8=)
                          2: yur-CtCR3Plhjz2pZ6OupE3Ojp4.roa (hash: 1u3lLuhAfhn5X1h73o27YBqU/RbpwZ9XAOfQxkgFXdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dkNfwNRL229BkXf4nQ2ji2ETCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:79:ee:84:3d:c6:dc:5d:e4:03:2e:76:92:b6:21:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d90d7f03512f6dbd0645dfe274368e2d844c23
        Validity
            Not Before: May  3 22:01:23 2024 GMT
            Not After : May  4 22:01:23 2024 GMT
        Subject: CN=2275eeacda90048b886d39323d4c817e4273a4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:32:ba:8b:e3:f8:e5:e1:77:ce:35:50:e5:
                    51:f1:f8:41:9e:92:2c:f9:4f:ec:94:dd:a4:58:bb:
                    85:6a:8d:5f:70:34:07:d0:6c:59:49:0f:b4:4a:f6:
                    bd:b0:d8:a1:9f:df:2e:2a:77:98:c1:b9:50:bd:8d:
                    e8:55:cc:f4:25:cb:06:7d:f9:13:18:f0:4c:34:53:
                    58:b9:5d:6b:66:48:34:9b:82:cf:4f:57:e0:c5:60:
                    78:03:fb:90:3f:5b:ab:34:4f:9f:b8:e2:97:f7:9e:
                    81:52:e6:ac:c1:e3:f6:0d:35:f7:a5:36:15:e2:98:
                    ba:e2:88:1c:d0:99:d1:46:41:a9:55:00:2a:51:a3:
                    ad:d6:23:8e:42:53:33:e1:e5:1b:f1:42:e2:16:5e:
                    88:9a:cd:99:95:85:c7:17:71:a2:86:a5:3f:97:93:
                    e6:65:de:56:f2:b3:23:c2:04:ac:33:94:27:90:42:
                    9d:ff:c9:59:86:76:73:d4:80:8a:c7:d0:fd:f5:36:
                    21:58:1e:00:67:6e:47:c2:d8:70:3c:da:66:30:5d:
                    d0:5f:c4:73:cc:84:05:be:e1:0a:fe:8e:02:84:29:
                    95:26:0d:b1:39:3f:13:c7:86:5c:8b:91:82:a5:fb:
                    1b:b1:b1:35:65:2e:60:41:c2:3a:c0:99:ae:6a:cf:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:75:EE:AC:DA:90:04:8B:88:6D:39:32:3D:4C:81:7E:42:73:A4:A1
            X509v3 Authority Key Identifier:
                keyid:E5:D9:0D:7F:03:51:2F:6D:BD:06:45:DF:E2:74:36:8E:2D:84:4C:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dkNfwNRL229BkXf4nQ2ji2ETCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:5d:0c:82:41:d1:38:74:f1:90:69:45:c6:16:68:a8:e1:
         5c:ab:eb:65:2a:6e:37:28:91:4b:73:cc:a9:ad:48:6f:4d:c2:
         d6:a5:71:21:74:c9:92:94:54:f1:5b:1f:ce:2f:ea:bd:33:03:
         37:1d:ee:43:bb:69:f3:7f:42:eb:cc:06:c1:27:aa:71:e2:b9:
         e8:27:ea:7a:97:bb:27:23:c3:ff:ef:be:68:ea:7a:58:da:51:
         20:a4:5c:87:bc:03:e1:1a:7a:0c:80:8d:87:e4:62:fb:a7:a2:
         94:38:e5:43:e5:57:80:e1:29:01:a9:9c:a6:5e:ff:f8:2f:2f:
         53:a1:88:96:b1:42:04:cf:67:ca:53:15:6a:02:5d:28:a6:e3:
         07:f0:5a:2a:16:70:44:5d:ba:c2:64:6e:f5:db:6a:e5:59:fe:
         5d:53:fc:90:2e:26:85:f3:50:61:ec:75:05:96:93:5f:35:7b:
         22:87:75:81:be:29:c5:25:bf:c9:14:b2:13:78:79:9c:92:82:
         7e:26:12:3f:92:59:2c:26:e9:c5:b1:e8:b5:7d:68:9f:7e:84:
         c1:5b:99:cc:df:0e:5b:c3:75:41:0b:f6:c6:d0:bf:c5:33:86:
         f7:5f:64:25:a6:a2:7c:3b:3a:77:84:d5:94:a2:d6:0a:ca:43:
         ad:4d:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:41:08 2024 by rpki-client on console-ams.rpki-client.org