Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File:                     2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier:          93aiOOr04S0r2RYCkcZIE7oj6qURhWo8nO00yMGMjxc=
Subject key identifier:   5A:82:68:E3:6A:9D:E8:1C:CF:A9:A5:A7:0D:70:F4:39:17:BD:89:EB
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer:       /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial:       018F344057481382F8F58931281354057BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number:          0AE9
Signing time:             Wed 01 May 2024 13:03:02 +0000
Manifest this update:     Wed 01 May 2024 13:03:02 +0000
Manifest next update:     Thu 02 May 2024 13:03:02 +0000
Files and hashes:         1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: zuUdVYflqAmCXyQk53MtDUO2HhX+wmGdcDtRx2DGCO8=)
                          2: pSQoWWPdZSTIp6Z6AFeCoIkQKps.roa (hash: rQK/crddGXti56i3LCMkjQOwsfPXecW6ctigDmxjkKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:40:57:48:13:82:f8:f5:89:31:28:13:54:05:7b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
        Validity
            Not Before: May  1 13:03:02 2024 GMT
            Not After : May  2 13:03:02 2024 GMT
        Subject: CN=5a8268e36a9de81ccfa9a5a70d70f43917bd89eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:ba:f3:55:98:90:25:6c:c3:31:51:a5:7b:
                    41:b4:16:ba:49:ba:fa:0b:86:2f:d5:42:0f:9c:9a:
                    ae:e7:fb:c1:9f:5b:35:98:26:da:5e:55:3e:2a:4a:
                    85:66:79:32:0c:ff:f2:da:93:c5:45:f8:19:78:68:
                    1b:2a:a1:f4:02:9b:d9:a9:52:d5:08:3e:20:87:99:
                    d4:27:a3:9a:9c:b3:18:35:6d:d0:4f:40:de:49:e3:
                    76:f8:f1:c5:49:96:54:6b:1d:30:27:0b:16:bf:8c:
                    7b:d8:ed:68:61:96:bc:bc:b4:2c:18:e8:1c:a5:26:
                    94:f3:da:4c:e5:cf:c9:1c:59:1a:7d:15:14:d4:45:
                    91:99:22:6c:9e:15:17:6f:6b:fe:9e:ff:d4:16:0a:
                    dc:26:81:3d:9b:9c:40:f7:72:40:ab:40:df:57:99:
                    41:47:11:94:5b:3d:64:6d:68:5e:a0:30:a9:23:21:
                    30:ea:bf:89:a3:d9:b7:39:48:8d:bc:b6:e2:b3:a9:
                    66:1a:02:4d:8a:f0:fe:54:75:44:19:42:9d:f0:1c:
                    f9:39:90:3a:dd:16:7f:78:6b:a4:58:d8:54:d7:17:
                    9f:c0:a1:bf:8f:40:4d:79:58:50:7e:9d:c5:72:97:
                    60:b6:b4:bd:d6:46:d9:c9:0e:a2:54:34:16:c7:5d:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:82:68:E3:6A:9D:E8:1C:CF:A9:A5:A7:0D:70:F4:39:17:BD:89:EB
            X509v3 Authority Key Identifier:
                keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:57:18:56:fd:9b:0a:e5:a0:94:0b:f4:3f:5e:30:f3:a0:c1:
         1d:91:88:33:2b:97:11:7e:83:df:8c:d7:6b:5e:85:2e:88:a5:
         28:ed:a4:8d:54:1e:c2:73:ad:10:99:ed:5d:ce:b2:eb:0c:ad:
         a3:ec:31:a7:c6:6b:72:97:f3:a8:80:0b:40:91:3d:15:41:b4:
         b3:d8:9d:4f:3b:71:b4:87:9e:30:06:eb:96:61:4f:e9:31:38:
         50:09:84:61:47:cb:a1:c3:48:58:f2:e2:6e:9e:dd:c6:6b:79:
         0c:3a:b2:87:fe:f8:16:1a:ae:1e:bf:aa:30:9f:3f:88:fb:f7:
         e9:ff:3b:51:bd:bf:c1:06:55:f0:2e:64:74:92:14:58:cf:9d:
         ba:73:0b:c7:31:33:b9:1b:bc:83:d0:59:44:48:88:25:60:15:
         36:5b:97:a4:37:df:02:7f:85:cf:7e:30:49:a8:43:23:6f:ba:
         89:bf:b5:9a:f0:5c:43:b2:ee:3b:fe:23:4e:51:e2:6e:fc:7b:
         4a:e4:c2:a1:30:ff:5d:05:e1:af:7c:20:be:67:54:3f:f7:fe:
         9b:fe:21:76:39:d3:c6:87:74:d8:19:07:95:07:a7:f2:48:22:
         21:64:54:4d:de:a7:48:19:85:dc:18:57:63:d6:4a:26:67:1c:
         f9:03:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 17:54:59 2024 by rpki-client on console-fra.rpki-client.org