Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File:                     5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier:          Rh3V5l7IfHei1suFMzRM5qJ4dALXUPDKh5UwT6Y7jjo=
Subject key identifier:   BC:AB:70:B4:4C:72:AA:4C:51:16:8F:A1:C4:84:D3:64:AA:FD:56:D9
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer:       /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial:       018F3C9D76D0CB973D512372F3FD18532EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number:          1153
Signing time:             Fri 03 May 2024 04:01:43 +0000
Manifest this update:     Fri 03 May 2024 04:01:43 +0000
Manifest next update:     Sat 04 May 2024 04:01:43 +0000
Files and hashes:         1: 5ELd4_NlRowNtHaIESAPUWgkF1E.roa (hash: hGDKiJx+cdpI7/AYqSwBIg0pne35S3xdf1clkD84dbA=)
                          2: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: nHNnq+yQS0ID/f6DgzXshk1RW+nejVoLGG5j76yyWdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:76:d0:cb:97:3d:51:23:72:f3:fd:18:53:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
        Validity
            Not Before: May  3 04:01:43 2024 GMT
            Not After : May  4 04:01:43 2024 GMT
        Subject: CN=bcab70b44c72aa4c51168fa1c484d364aafd56d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:22:11:28:e0:8f:dd:ac:72:64:22:1b:e2:
                    69:e6:70:64:c7:a9:a8:7b:a9:47:76:e8:4e:0d:75:
                    40:64:88:75:3a:60:f1:e2:0e:39:2d:be:f3:c0:17:
                    a8:1f:4a:b3:51:26:b2:5c:37:7f:dc:a7:45:11:ea:
                    19:63:f9:3d:04:8a:b6:11:3d:de:3a:86:2b:8f:4a:
                    6b:d8:5f:5e:31:88:79:8a:8c:50:bd:83:12:1a:79:
                    ed:88:9a:0a:40:76:d2:87:61:31:0e:c0:90:fa:2a:
                    ae:0e:fe:6f:01:31:61:a4:2d:40:e4:98:48:94:53:
                    08:5c:dc:54:0d:28:6a:ce:bc:19:11:e6:6d:a6:35:
                    00:5f:e7:43:bc:0b:51:0c:10:d3:8d:97:c1:65:3b:
                    c3:80:0a:c2:22:2c:23:26:50:43:fa:5e:86:f2:72:
                    56:2d:dd:88:6b:da:86:23:7a:73:f2:f1:f0:e0:62:
                    76:c6:07:98:b9:2d:17:36:df:e2:65:1e:dc:3a:31:
                    cc:a8:80:f2:16:c4:e1:65:02:47:21:9c:ae:9f:3e:
                    be:64:38:ef:9b:85:e9:1c:7c:03:7c:f5:6d:a1:e6:
                    49:78:fe:2b:d4:44:2d:84:bc:de:62:c4:a2:ff:4b:
                    02:3f:5f:2d:4c:df:78:02:7a:b2:da:6f:92:2f:6a:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AB:70:B4:4C:72:AA:4C:51:16:8F:A1:C4:84:D3:64:AA:FD:56:D9
            X509v3 Authority Key Identifier:
                keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:5a:1b:49:41:05:de:d1:63:94:53:8c:b4:aa:e9:64:e7:
         89:95:bb:4f:34:af:1b:dd:75:0b:e1:c1:50:6f:eb:b4:f2:c6:
         8e:79:e8:41:88:97:9f:d6:8e:66:f7:9c:3f:fe:ff:98:7a:a1:
         66:ba:1d:5b:b7:aa:e0:02:54:f8:06:23:1e:38:58:c6:47:20:
         3c:39:33:cc:bb:f0:d1:5a:33:09:ef:59:0e:ac:58:e4:1f:b9:
         c4:aa:7e:6d:b8:73:57:25:7a:5c:7b:ed:63:7f:4a:51:f9:8b:
         c4:ec:a7:5c:46:23:a5:a7:5b:b8:9f:84:12:10:d0:e7:de:2e:
         6c:91:33:0f:09:b0:4d:f7:16:13:88:ea:ed:9f:49:32:98:f4:
         2d:15:6a:57:cf:25:64:7c:26:2b:9b:18:f8:77:37:6f:b0:a4:
         7b:48:54:cd:3e:30:6a:f7:d4:f9:71:19:a3:1b:39:eb:aa:91:
         9b:88:f2:19:7a:ec:72:e6:db:a7:99:9b:a9:d8:1c:fb:42:c0:
         66:78:92:20:6e:c5:51:70:74:6d:a0:95:6f:a7:d6:65:00:0a:
         87:c7:0e:21:17:b9:fe:2b:53:db:28:40:90:1c:70:37:aa:07:
         aa:0b:37:c9:cf:2b:4f:fa:84:25:7c:e4:a7:36:3e:18:c5:12:
         fd:19:5b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:09:38 2024 by rpki-client on console-ams.rpki-client.org