Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File:                     5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier:          p8+pfO4qwwY9/aAhROmuWPfRny5i7i2pF6TGriU7Ys0=
Subject key identifier:   5F:A4:8D:3C:FD:8C:5F:7A:E6:C6:96:BB:59:5E:E3:09:1D:90:BC:61
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer:       /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial:       018F2D976F7680B6D7A621C9EC7D3573E9EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number:          114A
Signing time:             Tue 30 Apr 2024 06:00:50 +0000
Manifest this update:     Tue 30 Apr 2024 06:00:50 +0000
Manifest next update:     Wed 01 May 2024 06:00:50 +0000
Files and hashes:         1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: TdtoO55ScN/qnIiZRmtnkkbzSq7xAwTufLP751/5Dzg=)
                          2: e5n2mhHIxYwXMndR8jsdnm-3GM8.roa (hash: EGOn9zYpxpk5AfHMCLLvUwtZY6fsdWZ1xGxiNHkjqu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:97:6f:76:80:b6:d7:a6:21:c9:ec:7d:35:73:e9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
        Validity
            Not Before: Apr 30 06:00:50 2024 GMT
            Not After : May  1 06:00:50 2024 GMT
        Subject: CN=5fa48d3cfd8c5f7ae6c696bb595ee3091d90bc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:61:3e:17:ba:6c:c6:a6:11:1c:c6:ef:28:
                    a4:2b:2b:21:27:df:67:14:e0:e4:ff:c1:a7:f4:24:
                    93:24:9f:c1:c0:8b:be:86:84:d3:e8:1c:2e:b6:85:
                    fc:5f:12:c2:9f:5e:23:5a:ea:b2:eb:76:b1:55:83:
                    c0:b2:33:62:e1:4a:6f:bd:17:89:68:e1:91:40:54:
                    48:36:20:ac:cf:70:82:3c:30:38:e2:4b:9e:53:3c:
                    17:55:ed:40:0f:11:78:4e:a3:98:d3:b4:76:2b:42:
                    4a:db:0c:fc:02:c2:5e:08:ed:f4:19:dd:db:4a:0a:
                    91:21:01:0e:99:42:8e:fd:41:dc:82:62:2c:3b:79:
                    9d:5d:6f:eb:6e:b4:a6:23:fb:71:0c:22:03:3f:96:
                    91:be:cb:70:aa:7e:1e:7d:f4:f3:c3:45:39:ff:fa:
                    08:82:95:0d:fb:33:2b:9a:90:71:3a:79:9c:f3:1f:
                    ec:14:a6:8b:bb:19:df:f1:1e:b6:eb:cc:f8:76:8b:
                    45:ca:4d:33:cd:a4:f4:93:e9:7d:f2:e8:c1:88:19:
                    a3:90:b7:de:c7:34:a0:67:05:22:af:16:24:e7:b7:
                    57:ed:6e:f4:41:28:ac:04:ca:25:9f:1a:46:aa:cb:
                    73:73:95:17:67:a0:9d:5e:d8:b8:84:61:5d:95:5e:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:8D:3C:FD:8C:5F:7A:E6:C6:96:BB:59:5E:E3:09:1D:90:BC:61
            X509v3 Authority Key Identifier:
                keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:06:6f:bd:c5:3c:84:e0:6e:48:64:1e:f6:b5:69:66:0c:1d:
         a6:33:10:43:97:01:e6:3d:d8:0a:2f:f4:99:1f:2b:0f:2a:b6:
         10:ab:b2:b6:dd:ae:1f:3f:e4:04:9f:4e:10:2f:4e:a8:57:36:
         dc:4b:5f:7f:18:9c:31:1b:dd:5d:68:55:4f:9c:a0:2f:a9:78:
         b6:27:7b:79:ec:32:db:a8:7c:cc:cc:a0:b1:1c:48:77:8d:03:
         47:cc:9f:4e:ed:3b:1f:a6:96:a3:51:92:7a:40:cf:9a:7c:2f:
         46:e7:c3:df:76:fd:c4:41:bb:e5:46:35:dc:07:27:a4:6d:b1:
         8a:fa:c1:8a:cf:be:83:d6:21:b8:e3:e0:7f:5a:dc:b6:dd:ca:
         8c:bc:3a:67:e9:37:32:76:91:cd:dd:a6:59:56:3c:cc:af:29:
         50:d1:65:5b:31:fc:54:77:0f:cd:55:30:1e:19:2e:44:4c:a1:
         cf:8b:70:7b:64:cd:69:1f:cf:3c:9e:79:56:aa:a8:a8:f0:4c:
         f9:66:be:40:8c:1a:c6:9e:a1:0b:fb:7f:12:83:c8:7d:83:e9:
         9e:1b:32:35:e9:e0:ff:62:1b:bb:ff:a1:de:3b:7b:04:5e:c6:
         cd:93:4d:f3:01:6f:ba:26:cc:7e:4e:70:eb:5e:3f:f3:1f:70:
         f1:80:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:36:04 2024 by rpki-client on console-fra.rpki-client.org