Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft
File:                     i5k5NI9Nv9sQH096N8ecBHR9DQM.mft (raw, json)
Hash identifier:          ZHzZBLCzOcCYVvKm+sPX2hIwsOl2KDzPWyIJ6+9tkwc=
Subject key identifier:   5F:48:64:17:01:EA:D1:86:C7:CE:0C:29:C0:31:EE:CA:24:C8:5E:A6
Authority key identifier: 8B:99:39:34:8F:4D:BF:DB:10:1F:4F:7A:37:C7:9C:04:74:7D:0D:03
Certificate issuer:       /CN=8b9939348f4dbfdb101f4f7a37c79c04747d0d03
Certificate serial:       018F87492A7CCA51A55FD4789E8000FF6EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5k5NI9Nv9sQH096N8ecBHR9DQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft
Manifest number:          0626
Signing time:             Fri 17 May 2024 16:01:10 +0000
Manifest this update:     Fri 17 May 2024 16:01:10 +0000
Manifest next update:     Sat 18 May 2024 16:01:10 +0000
Files and hashes:         1: i5k5NI9Nv9sQH096N8ecBHR9DQM.crl (hash: VPA3z/R800d/gW93qbnxbQ5u7BBzkr9/KBl3Vga2QIg=)
                          2: tREMf7QGdM-PQji27EWjh87JWTs.roa (hash: s5XimyknGqlx3y0B3fb8n7wxeFvpK0dSsHVAasJO12w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5k5NI9Nv9sQH096N8ecBHR9DQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:2a:7c:ca:51:a5:5f:d4:78:9e:80:00:ff:6e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9939348f4dbfdb101f4f7a37c79c04747d0d03
        Validity
            Not Before: May 17 16:01:10 2024 GMT
            Not After : May 18 16:01:10 2024 GMT
        Subject: CN=5f48641701ead186c7ce0c29c031eeca24c85ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:24:c5:bc:69:55:a9:25:e3:00:eb:25:72:
                    e4:b8:41:f6:4f:29:85:dc:a0:88:37:7f:42:be:d4:
                    25:65:23:3a:0e:0d:70:a3:fb:78:a4:48:68:a6:f6:
                    f4:32:0d:c9:fa:90:db:e6:77:3c:67:ca:2b:2c:61:
                    dc:66:66:6b:21:c7:cb:4b:7a:5d:2b:7a:8f:13:b5:
                    f3:d8:ba:8d:c6:56:b8:80:1b:c1:d6:83:12:30:59:
                    89:45:9a:ff:5e:7e:b0:cc:77:a0:d0:10:3d:1a:a8:
                    8f:8f:cb:81:e8:f3:9b:7b:1f:4a:db:f9:af:b4:5f:
                    35:9b:e7:47:3d:c7:d7:48:96:4b:f0:63:1c:c0:81:
                    3f:66:4e:13:8a:c9:57:8f:10:39:37:e9:0e:7a:fc:
                    1d:43:ab:5e:11:7a:53:55:c9:54:48:ab:cd:40:3b:
                    6a:a6:58:25:82:f9:d1:68:e0:54:52:de:ff:d4:5b:
                    9e:1f:19:c5:6e:13:da:44:ef:ed:d1:7d:b4:04:d0:
                    dc:73:70:83:bf:3a:17:b4:ef:d7:0f:4d:41:c1:f8:
                    ef:b0:07:54:80:a3:9e:16:7e:03:02:54:53:bc:78:
                    5d:f9:85:10:df:1d:39:10:0d:9c:dc:9c:d3:6a:a4:
                    b6:ff:54:71:7a:57:a5:ad:f6:e3:ee:4b:8e:a0:ce:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:48:64:17:01:EA:D1:86:C7:CE:0C:29:C0:31:EE:CA:24:C8:5E:A6
            X509v3 Authority Key Identifier:
                keyid:8B:99:39:34:8F:4D:BF:DB:10:1F:4F:7A:37:C7:9C:04:74:7D:0D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5k5NI9Nv9sQH096N8ecBHR9DQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:25:c8:d5:0a:fc:bb:1b:07:06:13:08:48:1c:55:e4:6d:
         61:24:e3:42:18:7b:4a:0c:a8:88:df:c0:d5:37:09:63:ad:c2:
         e1:f6:69:4a:51:85:3b:8d:46:4a:7d:d7:36:87:61:7c:b3:ba:
         31:36:6b:b3:ad:0c:1b:8c:a4:91:22:f3:45:23:e2:84:86:1c:
         d5:c4:c3:32:f5:6b:a0:17:bd:cd:5d:0b:f5:4b:b5:57:d4:af:
         1b:71:81:be:21:7c:f9:87:6d:e9:c8:fd:45:f4:8a:4f:73:c2:
         01:34:8f:5e:38:39:f9:e5:cd:81:64:f8:91:bd:29:75:41:fb:
         56:74:ce:5c:ed:71:ef:86:01:e6:f7:43:24:90:32:fc:7c:a1:
         97:0d:8b:dc:a5:a8:c9:0e:b4:cd:fd:11:20:57:ff:62:70:dd:
         3c:48:13:c7:b9:b0:60:5b:19:8a:72:b8:f1:f1:55:13:d2:b1:
         7b:df:6c:61:77:9a:b6:75:3a:a7:5a:75:68:fc:ca:ff:e5:40:
         fc:b5:2d:6f:82:27:d9:58:3c:5a:74:50:8c:dd:c8:ed:74:43:
         16:0c:69:c7:52:64:e1:4b:ea:59:5c:8a:93:11:74:eb:aa:10:
         4b:73:6d:18:25:27:09:16:d8:02:11:34:1e:1f:e9:70:87:3c:
         f5:30:56:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:09 2024 by rpki-client on console-fra.rpki-client.org