Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File:                     cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier:          n59Su54BJF7XRvfKqssZukWfRFhp5ioPMuimK1TdV6A=
Subject key identifier:   ED:E9:62:74:61:CE:59:88:42:F4:F9:24:0A:40:97:A9:3D:56:BE:10
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer:       /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial:       0191FA7E1A5F79F1D759601EA4010ADF0519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number:          0112
Signing time:             Mon 16 Sep 2024 11:00:53 +0000
Manifest this update:     Mon 16 Sep 2024 11:00:53 +0000
Manifest next update:     Tue 17 Sep 2024 11:00:53 +0000
Files and hashes:         1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: /CAdetNErBenfsycR1NiGeUZ+8aVOBkDj2YvneIZaQ0=)
                          2: vavU8x_SSO0NQ9TW1Uxm7PibzJo.roa (hash: nSkNs5WbloAAx3bu9ek/AIzEXjvqCYjfMqeBupBKivA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:1a:5f:79:f1:d7:59:60:1e:a4:01:0a:df:05:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
        Validity
            Not Before: Sep 16 11:00:53 2024 GMT
            Not After : Sep 17 11:00:53 2024 GMT
        Subject: CN=ede9627461ce598842f4f9240a4097a93d56be10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:ff:19:36:01:c7:ee:f1:af:55:a4:ee:b7:
                    12:da:28:f6:e0:66:b9:67:f2:e9:ef:39:96:37:c5:
                    04:d6:fe:7a:44:0c:ae:a1:f2:b5:bf:19:73:55:c0:
                    60:3b:1d:70:7f:16:b8:02:e6:4f:fc:53:ac:cb:7d:
                    86:9d:59:f8:29:f1:de:bd:08:43:b4:82:36:44:5f:
                    1a:11:ac:e5:79:56:71:86:a4:3b:ab:0d:88:a8:28:
                    84:8d:09:b0:7e:27:3f:a3:1f:84:20:db:0b:1f:c6:
                    35:9a:66:a1:aa:be:67:c2:3f:2f:a2:ec:7a:b6:ff:
                    3c:e3:a8:7a:54:51:a9:4c:34:b7:c3:a7:76:ef:39:
                    40:9c:01:bd:40:c7:5e:75:45:d9:46:4d:db:31:35:
                    1d:29:0c:25:66:9c:db:33:66:c8:1e:57:58:ff:af:
                    2b:4d:49:3f:22:fe:ca:3a:c9:73:01:97:ad:af:fc:
                    43:71:88:7e:bf:e5:65:b6:57:90:9b:19:60:fa:4e:
                    37:b2:b9:c6:b2:06:fd:78:59:06:2d:15:27:94:86:
                    30:4b:96:3a:3a:55:6d:8e:e3:2f:cd:75:9d:7e:7d:
                    68:c1:50:15:64:1e:62:a8:40:e9:82:44:f1:56:ee:
                    b9:61:60:f0:da:96:7a:24:0c:6f:fe:59:c8:c1:ca:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:62:74:61:CE:59:88:42:F4:F9:24:0A:40:97:A9:3D:56:BE:10
            X509v3 Authority Key Identifier:
                keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:84:81:6d:71:30:23:06:20:e5:cb:09:b2:d5:04:43:51:c1:
         c2:35:32:75:19:2d:02:7e:9e:c1:f9:c0:a4:64:14:30:10:29:
         6d:fa:c8:b6:e1:e8:05:25:3f:2b:93:61:9e:f0:de:06:5b:cb:
         f1:ee:eb:e1:c3:1d:61:49:8d:8e:a0:0c:11:50:d1:c6:1a:b8:
         69:70:5c:f3:a3:64:96:10:f0:73:4f:4a:8c:24:0b:e2:d1:28:
         b7:bc:15:70:d6:67:3a:43:7f:d6:42:93:1c:43:dc:ff:15:94:
         7c:75:e7:40:fd:13:57:26:ec:0e:0c:3c:58:84:76:5c:e0:78:
         b3:68:a4:ea:4d:14:d1:eb:62:2b:b7:3c:96:75:85:70:25:b8:
         54:c6:e5:d9:80:d2:8a:ab:e3:8d:92:71:ab:33:7c:8f:d8:71:
         b0:15:86:79:76:d4:13:e7:da:9a:8a:5e:67:e4:a5:b2:6b:6d:
         91:48:25:22:7a:c6:f7:32:84:c4:05:fe:72:89:20:e4:90:c6:
         77:0f:90:f4:1b:9f:90:77:50:6e:4e:3b:e5:e8:f6:9e:5b:69:
         5e:9d:74:95:fc:40:f0:df:4c:08:79:07:66:fd:b4:bd:b2:d5:
         7f:24:46:b8:be:65:d7:1c:80:5b:53:5d:4b:32:1e:2a:6e:ae:
         2e:c8:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:29:14 2024 by rpki-client on console-fra.rpki-client.org