Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File:                     5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier:          kEM6aLDSiJtfzvZcFS0jZh/wRd/6b/RCKByzi3Pblnw=
Subject key identifier:   DB:D0:62:BC:E3:ED:A3:20:AF:D6:9A:0E:7D:1B:B6:1D:19:1D:86:82
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer:       /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial:       018F4A8F7E68F647861EE12E131BBCF3015C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 21:01:08 +0000
Manifest this update:     Sun 05 May 2024 21:01:08 +0000
Manifest next update:     Mon 06 May 2024 21:01:08 +0000
Files and hashes:         1: 2wpUaio1maBenEGM-CHZeSgWruI.roa (hash: +KaXc6LSzUTTnCSLxH2suuhmhrTc+zrB/XmuucoVM7k=)
                          2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: hgj+Js6Q7ZEw2cSmjF7bGu0wXvDdplFex0yR6dV2tjU=)
                          3: KOJXxCOCtOpLro4AbyFzDSrmN8E.roa (hash: t1l7HZCe/croPKxa4migr+z4Yhog6Vc1/w2C5VIKQBA=)
                          4: ZeCDjMZXEYQQsrDsYd9x4OiAZTo.roa (hash: 05KSaSywoacUG1psVrISdmCvcyHYcLPq7ZIkM5ZikpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:7e:68:f6:47:86:1e:e1:2e:13:1b:bc:f3:01:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
        Validity
            Not Before: May  5 21:01:08 2024 GMT
            Not After : May  6 21:01:08 2024 GMT
        Subject: CN=dbd062bce3eda320afd69a0e7d1bb61d191d8682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:ad:a1:5f:61:a4:89:6e:f1:f4:96:5b:1d:
                    ee:68:b2:6e:71:3f:b1:cf:b0:bf:58:53:ac:56:24:
                    d1:ca:74:e8:e7:4f:1f:ce:41:bf:83:59:7a:4a:06:
                    d3:20:a6:3e:b3:b6:ea:2d:2d:74:cb:63:c7:6e:e2:
                    28:a6:d9:23:d6:62:56:9b:06:e7:74:f1:ed:6c:8f:
                    2c:c9:ea:21:8a:fe:ec:74:bb:ed:73:87:08:8f:53:
                    9e:4b:25:d3:36:04:51:18:d8:05:75:46:c7:ed:8d:
                    91:89:d1:2b:bf:2b:ca:f8:0a:70:45:ce:e8:f4:3e:
                    95:d4:40:d5:47:8e:24:0d:39:e9:41:3c:a4:dd:38:
                    10:ff:ab:40:a8:ae:71:b0:7f:18:d0:fa:9d:bb:7b:
                    46:ab:bb:11:37:65:78:8f:5d:76:b5:d2:f1:a7:8f:
                    53:0e:ac:75:1f:f3:c4:14:43:cf:88:93:d7:1f:c3:
                    d5:94:7e:d7:b0:53:8b:00:c6:a0:81:77:37:ce:fe:
                    91:5c:0e:8a:0a:3f:f7:ce:8c:d3:dd:19:fa:2e:6f:
                    2b:6e:6a:6a:ea:2a:01:ca:36:5e:6f:13:cf:82:1e:
                    a6:9d:74:78:ca:80:6c:86:a5:1b:66:e2:1b:70:1a:
                    40:a8:a2:b7:6e:61:dd:7d:54:3c:ce:29:a7:a5:48:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:62:BC:E3:ED:A3:20:AF:D6:9A:0E:7D:1B:B6:1D:19:1D:86:82
            X509v3 Authority Key Identifier:
                keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:df:3d:14:ee:28:35:e2:9d:b9:a6:b1:60:0a:d9:3f:56:f2:
         71:39:9c:2c:67:3a:b9:4f:eb:e2:4b:b4:0e:05:6b:9a:b0:bd:
         5a:c9:fd:82:5d:e3:8f:e7:58:41:43:01:4f:62:8a:80:f9:fb:
         dd:40:bb:d7:f5:f3:bb:08:88:33:91:81:6f:e1:63:ec:ab:12:
         99:e3:61:bd:be:aa:36:f0:f6:6c:ab:88:01:ec:1e:aa:d1:da:
         de:f7:89:57:3e:ce:de:48:20:c2:e0:d1:f2:9e:c5:b4:c5:c4:
         b4:a4:fc:1a:93:d1:ae:56:91:ac:c6:69:79:be:93:7f:59:eb:
         a7:e6:ef:4f:50:86:88:9e:33:7b:98:d9:54:a4:c3:7b:92:fd:
         d6:7f:d1:5e:20:23:a3:04:31:be:3a:7d:64:c4:74:fc:35:e4:
         b0:89:b0:ac:0d:4d:57:17:4d:37:56:bf:49:97:64:15:5d:c1:
         08:61:9e:71:2a:70:b5:dd:f6:44:4f:76:6d:eb:25:31:5e:fb:
         0e:ad:c9:6d:94:78:e3:42:31:72:ec:11:ec:79:fa:3a:39:9d:
         cc:07:8c:14:df:05:fe:9b:60:bf:cc:7c:1f:4d:2d:7f:d8:cc:
         18:55:c9:96:e6:4c:98:89:46:6d:57:62:ee:0c:0b:ec:37:1d:
         e2:51:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:45:40 2024 by rpki-client on console-ams.rpki-client.org