Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File:                     C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier:          Gzn2ZsxiTC+99I1MwQkvuPVyqBGvM2eiDBFgi/3ESAU=
Subject key identifier:   51:54:27:D6:7F:E0:B5:32:51:E6:AF:56:96:41:15:35:53:4F:70:66
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer:       /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial:       018F448D94522AB3F7A994294FF0BCF043A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 17:01:20 +0000
Manifest this update:     Sat 04 May 2024 17:01:20 +0000
Manifest next update:     Sun 05 May 2024 17:01:20 +0000
Files and hashes:         1: 6dv-5vHf3EfV2GsC1E1I-P-a0qo.roa (hash: BE2xOlyvEFYE3Im8vUEEQH2HZpN+5Mqka7A5mBFDiCc=)
                          2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: zbFWnZC0crz5ufKWM15zIlWdIWz4CmR4pDk8Hly+7Dc=)
                          3: t6V3C37X_ODXvmI_dBxBALgYH9M.roa (hash: lZ5HDcFwzMAZk2XAAS0mR3nuMBnO/gefqXQ6vJ3rcU0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8d:94:52:2a:b3:f7:a9:94:29:4f:f0:bc:f0:43:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
        Validity
            Not Before: May  4 17:01:20 2024 GMT
            Not After : May  5 17:01:20 2024 GMT
        Subject: CN=515427d67fe0b53251e6af5696411535534f7066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:90:e0:74:af:f1:7e:ce:d2:a2:f1:50:be:
                    4c:9c:04:30:40:7c:7c:4b:15:50:9e:aa:46:2e:34:
                    0b:df:d7:d4:15:6f:48:15:56:a9:17:a0:18:3b:3a:
                    f3:b6:81:b4:14:e6:10:c6:2c:17:6f:0a:d2:d8:91:
                    90:bc:6f:d1:d1:9d:33:2d:e8:83:e8:10:07:65:2e:
                    49:8b:ca:b1:a5:2c:2f:1f:44:54:6e:6e:96:a2:5e:
                    4a:c2:01:42:ae:b8:4d:b5:13:22:7a:61:c4:33:2e:
                    49:80:00:b6:18:e2:0d:9d:b7:01:e4:fe:e6:f7:66:
                    fe:54:43:6e:ae:cb:24:f5:38:39:75:89:34:c8:5c:
                    74:b7:d3:01:41:2e:d3:53:1d:92:23:25:f0:da:e8:
                    36:4d:96:14:45:4f:8a:2a:66:9b:a8:52:77:fb:e4:
                    b7:5a:d0:c9:dc:d0:18:68:50:b8:e4:5b:3e:6b:67:
                    3d:e7:47:67:da:e8:31:6f:5d:57:dd:3e:38:f5:91:
                    75:e2:31:83:00:cb:a2:24:6b:77:9d:30:6a:c6:7f:
                    20:75:b3:13:b2:98:e8:86:90:bb:1f:1f:75:ce:80:
                    b4:2d:ab:46:e2:82:77:25:45:1e:5b:d6:8a:71:3f:
                    52:02:f7:13:38:b8:de:97:8f:f7:ab:26:08:23:8c:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:54:27:D6:7F:E0:B5:32:51:E6:AF:56:96:41:15:35:53:4F:70:66
            X509v3 Authority Key Identifier:
                keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:80:60:60:28:5b:2a:06:b2:5f:29:b5:2c:a1:67:2b:c0:
         e1:5d:43:b8:19:c0:68:86:d1:8c:64:a2:de:45:b5:c5:48:30:
         22:df:8a:dc:ed:ce:a7:bd:43:f6:2a:06:1a:b1:a9:6a:81:63:
         71:7d:ee:9f:99:41:76:8a:aa:31:84:af:5a:c0:93:a4:c4:31:
         78:62:63:ab:32:8e:97:66:2b:f4:db:ce:ed:29:04:87:7a:17:
         12:38:39:4c:22:b4:d9:00:ef:94:cb:5f:f4:50:db:32:8e:9d:
         85:5b:37:4b:3c:2e:6b:f1:47:34:0d:90:95:a0:91:9f:92:8e:
         42:74:9a:53:3c:51:82:af:69:08:e8:1c:14:de:3e:13:2e:9b:
         31:ff:9d:79:4d:c7:c0:1a:5f:3b:d9:fd:bb:e6:83:0f:77:2c:
         18:4b:06:23:f4:19:a5:91:cd:0e:3f:ae:47:f2:b4:3c:93:d3:
         ca:b6:c1:e4:99:5b:24:5b:04:ed:9a:5b:2c:c2:2a:bd:b7:24:
         67:a5:79:33:5e:a2:c9:ef:1f:cb:17:a2:6a:7e:46:70:71:61:
         d6:fa:38:fa:42:47:71:6b:6f:f8:b9:3f:bf:c9:21:78:ca:40:
         c4:fc:b4:e9:97:2d:fb:36:34:19:05:cf:58:b3:22:1e:0c:0b:
         e3:76:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:52:33 2024 by rpki-client on console-fra.rpki-client.org