Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          RDMpF13wK7RzFlIP3NHkgwiLjY8ZPwRpZt8e0XLsjqw=
Subject key identifier:   7D:2D:B3:5F:F1:3C:E1:FD:1E:0A:7F:B7:0B:FC:6F:A9:58:D1:2A:87
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       01904453B74992D26DF02BADCAB93CC4CA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          03A2
Signing time:             Sun 23 Jun 2024 09:00:55 +0000
Manifest this update:     Sun 23 Jun 2024 09:00:55 +0000
Manifest next update:     Mon 24 Jun 2024 09:00:55 +0000
Files and hashes:         1: 3g2sZuWmZacSTKVHGTHfYYaqdc8.roa (hash: d6Y+blljXMQLxIzMTmFcaFeDQMH5wReNnuK8fUsH880=)
                          2: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: zvwAtDPDtwuq8fuKrS8DgqDWbumdla30l+zz86/d0VE=)
                          3: Qcv3udxBZzp5KpxEdKGc4XBm0x8.roa (hash: K5GGpUMtklGsk5M1tPJ8K74ao9Ro7eWjcco53PDHKrk=)
                          4: aNAmKU6b_nS3QCpIBzAo_KHHvRg.roa (hash: aG8Zm1Ax0xs9Ana0v+IseqwS481SfzBBmlIHPEL6wsg=)
                          5: iRHwoxgI61ro82tf_WYMvk63y7Y.roa (hash: AOr3HIyvS3/f7nGzmXJcTUoAplH8x3kwiAsYJ3NBj4o=)
                          6: j--GPG5aVZnHhOqHomQH9uqPKdI.roa (hash: MTWhL6e5bcuKBa93Qxpn6fKkjLdEHavrc6aTIZxS5gI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:53:b7:49:92:d2:6d:f0:2b:ad:ca:b9:3c:c4:ca:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Jun 23 09:00:55 2024 GMT
            Not After : Jun 24 09:00:55 2024 GMT
        Subject: CN=7d2db35ff13ce1fd1e0a7fb70bfc6fa958d12a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:90:91:6a:81:83:00:26:b2:f4:24:97:6c:
                    7d:0f:b9:ab:2e:07:78:91:ed:03:96:11:1b:33:83:
                    41:70:92:3c:06:8e:9a:2d:4c:cf:2f:8b:66:11:4d:
                    26:4f:39:3b:88:2e:d0:72:0e:c9:ff:1f:16:20:4a:
                    16:f3:94:36:8f:93:84:b4:0f:9c:2d:f8:b2:4c:0b:
                    f8:8f:89:0d:b6:87:72:ab:39:ba:40:f2:29:f7:c8:
                    69:2b:7f:11:b9:2a:9b:c9:d2:06:af:25:e9:a3:5f:
                    74:22:c1:27:98:05:71:03:95:e8:02:ea:9f:30:d6:
                    c8:0c:5c:c4:c2:fa:4d:b4:cc:c2:6d:dd:1a:b0:84:
                    08:26:5e:94:b4:4b:6b:64:8c:73:19:31:be:a4:0c:
                    e2:6d:c9:61:09:d5:2b:e7:17:a5:77:1b:d2:85:70:
                    11:ed:36:af:1f:99:cd:ab:8f:75:bd:fa:7b:59:a3:
                    83:ad:db:84:fd:c7:9e:71:22:08:5f:f9:09:a2:49:
                    6b:ec:68:12:ef:40:d5:4f:2e:90:b6:5c:9a:da:a4:
                    ab:a5:18:50:bb:6b:5a:5e:fc:57:92:a1:33:8d:9e:
                    74:5d:2f:30:98:b0:e1:93:7b:e4:31:a3:09:59:79:
                    8f:e1:ed:2e:55:60:43:48:91:8a:e4:03:af:cd:c8:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2D:B3:5F:F1:3C:E1:FD:1E:0A:7F:B7:0B:FC:6F:A9:58:D1:2A:87
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:50:38:1f:56:80:2e:04:cf:46:01:79:c4:ce:a4:7b:af:c0:
         91:db:6b:90:76:a8:94:6b:b4:28:6e:f3:72:de:b9:b7:8f:cf:
         9d:eb:a7:84:a9:7e:50:d2:43:c1:52:35:79:47:e9:ea:cf:7c:
         5e:f0:3a:bc:83:a3:92:35:7c:29:fe:2f:44:70:53:16:30:9d:
         e4:c3:c9:e4:e5:2e:58:0e:4b:92:69:51:dd:35:4b:f7:1f:25:
         b8:dd:41:c3:09:37:77:51:ce:5d:6d:2f:05:68:2e:e1:d0:9c:
         ac:06:1f:33:f6:e6:64:e4:ee:40:8e:de:62:81:24:71:75:6b:
         6c:66:26:50:5d:0f:ce:37:21:a5:1f:b1:cb:a5:8f:06:53:35:
         55:09:d9:e8:c1:6e:1f:e2:31:e5:5e:ba:6a:33:ad:25:1a:f3:
         db:76:8b:e6:5b:97:2c:61:b1:5a:58:db:c8:29:ab:92:4a:a4:
         59:49:3c:10:88:b0:e2:52:5f:5b:5a:2b:6e:34:e4:10:e2:af:
         d4:91:a0:b3:c9:d0:b2:36:d8:f4:dd:c0:2c:eb:2f:3b:7f:72:
         49:1d:6f:fd:1a:ff:a0:4e:68:ba:95:ea:5b:68:49:94:15:e2:
         87:81:cf:de:16:85:de:4b:1f:3d:e4:05:68:8a:8b:dc:02:dd:
         92:1b:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:49 2024 by rpki-client on console-ams.rpki-client.org