Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File:                     5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier:          LpJNJQ3W4LFAK4k564+KadYyVTIhLAHPwZZTmImn47Y=
Subject key identifier:   04:BF:89:FF:CF:90:0B:56:99:D0:C3:D7:9F:8B:A2:DA:B7:D7:48:35
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer:       /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial:       018F4C1053A67FAC9A3459D27E39A935386B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 04:01:29 +0000
Manifest this update:     Mon 06 May 2024 04:01:29 +0000
Manifest next update:     Tue 07 May 2024 04:01:29 +0000
Files and hashes:         1: 1-4MHs9jzgMbZN1MOLRmGck0u0J0.roa (hash: IgIKP5MGVVewtsZj7yM9Pd5bnK1M1RJ2NtikEZzgLeg=)
                          2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: EixmUjF+1c2pCOLkTcy0ZZVT0Qxokw59QpQSkCqouyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:53:a6:7f:ac:9a:34:59:d2:7e:39:a9:35:38:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
        Validity
            Not Before: May  6 04:01:29 2024 GMT
            Not After : May  7 04:01:29 2024 GMT
        Subject: CN=04bf89ffcf900b5699d0c3d79f8ba2dab7d74835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:03:36:ab:4d:a5:ba:ac:cf:4b:15:47:d9:
                    0d:6c:c5:5a:2c:7b:8a:e6:3e:b8:52:97:c0:31:5f:
                    be:2b:fd:b4:92:68:66:01:51:9e:0f:94:ce:85:36:
                    00:64:c8:2a:41:8e:2a:d4:44:48:5f:06:5a:ee:3d:
                    21:4b:73:93:ea:89:6b:bf:7f:6a:e7:ea:2b:5c:de:
                    d8:05:a5:d2:44:ff:ee:18:f6:d5:7e:93:3f:6a:f0:
                    61:81:87:64:a9:68:da:d7:14:69:64:75:be:15:bb:
                    81:ce:e6:45:0c:c6:d2:d3:ee:b8:d8:f3:d9:95:7f:
                    75:69:c4:96:14:ad:10:b3:bf:af:a4:79:4b:cb:aa:
                    6f:22:32:fb:4a:43:90:f7:2e:c0:c3:c9:43:16:a0:
                    14:28:c5:3e:7c:34:8a:04:02:1d:2b:87:38:97:24:
                    12:fd:8e:19:50:7f:8c:46:32:b3:c0:e3:3e:88:36:
                    fb:09:04:20:f5:32:3f:3d:74:d7:42:8c:04:b9:e4:
                    62:7a:36:0c:9e:54:ca:ad:05:fc:30:54:c0:10:9e:
                    56:d8:2a:f6:13:19:04:6c:55:37:db:ee:62:25:45:
                    ea:e1:9c:60:fc:97:31:56:26:9c:f2:1f:3a:3f:cc:
                    a3:6e:d5:b5:5b:5e:5a:d6:d1:50:de:02:c6:53:1e:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:89:FF:CF:90:0B:56:99:D0:C3:D7:9F:8B:A2:DA:B7:D7:48:35
            X509v3 Authority Key Identifier:
                keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:9c:9f:50:60:ef:ea:f5:5f:56:2f:05:69:f2:ee:7e:ae:
         86:3a:8c:bf:02:f6:c7:d0:97:dc:ce:6b:36:6b:ba:95:9e:8b:
         97:f3:17:54:d7:78:0a:79:b5:53:74:e6:81:ef:34:c7:d8:53:
         36:09:db:48:7a:25:99:46:6e:0d:80:73:f7:67:86:5e:ab:bb:
         96:e1:ef:eb:26:97:00:e0:8a:42:4d:1f:bb:69:4b:15:2d:13:
         ca:f8:c2:95:e0:f3:76:7a:d7:c7:c0:77:bb:1f:ba:0e:d7:05:
         9d:58:b1:0a:7b:71:0e:ab:f8:7e:8e:19:37:fc:44:fb:56:c8:
         48:44:0b:56:d3:0a:2b:26:36:47:10:bf:ba:8c:e8:4b:4c:72:
         df:34:ce:d4:f9:c0:75:7c:54:6d:54:b0:65:1e:ac:b8:6c:f1:
         e9:13:21:62:27:91:b4:eb:fa:8a:16:e7:16:e1:8d:bd:63:14:
         08:ef:8f:8d:20:00:73:c8:90:ea:4f:7a:7d:3d:e8:ba:55:69:
         bf:0e:ad:a1:cf:24:4e:19:f8:f7:88:82:b3:13:97:97:a2:03:
         0b:6a:5a:41:01:ef:d0:e2:4d:c9:c3:d0:6e:86:c0:89:b3:50:
         9e:5a:1f:ab:b7:d3:01:62:13:f5:9b:34:31:67:15:d6:ac:68:
         a0:65:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:19:16 2024 by rpki-client on console-ams.rpki-client.org