Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/dPWTAQEcRa9jVjTS5TwLCMIFTi0.mft
File:                     dPWTAQEcRa9jVjTS5TwLCMIFTi0.mft (raw, json)
Hash identifier:          SEQUebGlsvg4yRzQyqnVzCFHi6IdKysm9g7W7/leXEU=
Subject key identifier:   67:BC:D9:2C:4E:A5:1C:35:64:D5:BA:ED:9D:4A:B2:6F:D0:A3:44:32
Authority key identifier: 74:F5:93:01:01:1C:45:AF:63:56:34:D2:E5:3C:0B:08:C2:05:4E:2D
Certificate issuer:       /CN=74f59301011c45af635634d2e53c0b08c2054e2d
Certificate serial:       018F8891EBE2D6E8A81DAD355EFD318A7EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPWTAQEcRa9jVjTS5TwLCMIFTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/dPWTAQEcRa9jVjTS5TwLCMIFTi0.mft
Manifest number:          05A5
Signing time:             Fri 17 May 2024 22:00:15 +0000
Manifest this update:     Fri 17 May 2024 22:00:15 +0000
Manifest next update:     Sat 18 May 2024 22:00:15 +0000
Files and hashes:         1: dPWTAQEcRa9jVjTS5TwLCMIFTi0.crl (hash: 49Q5b+VrvM/N8WCkpOMnL/FlmQcqoI9ktendSXkeSDU=)
                          2: qefX8nsNSFezO2M8rsjsOtg6B4Y.roa (hash: Atq8BFa11OqjPrGzIa+8IsbLn4KKlwy/f0fF+jBqFxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/dPWTAQEcRa9jVjTS5TwLCMIFTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/dPWTAQEcRa9jVjTS5TwLCMIFTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPWTAQEcRa9jVjTS5TwLCMIFTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:eb:e2:d6:e8:a8:1d:ad:35:5e:fd:31:8a:7e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f59301011c45af635634d2e53c0b08c2054e2d
        Validity
            Not Before: May 17 22:00:15 2024 GMT
            Not After : May 18 22:00:15 2024 GMT
        Subject: CN=67bcd92c4ea51c3564d5baed9d4ab26fd0a34432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:d1:1d:f4:8d:f7:ff:61:61:4f:5a:88:f3:
                    98:7f:ee:27:27:ec:45:c1:b5:45:21:6d:a2:4d:bc:
                    be:09:66:c7:8e:71:96:60:70:87:87:52:31:81:f7:
                    cf:4f:9e:48:56:26:1c:ae:8a:2b:b4:54:75:05:4b:
                    6f:9d:6d:6e:0f:14:f3:ea:5b:6c:fc:1f:3f:c5:b6:
                    60:b0:fc:e4:89:f9:f4:bc:03:51:c4:0c:8d:d8:32:
                    97:56:83:c5:c2:62:61:d1:33:57:fe:5b:bb:2f:7e:
                    6c:4a:09:84:79:c2:05:c7:2a:ba:38:a0:bc:e7:9e:
                    ba:46:12:83:82:e4:bc:06:73:2c:f8:ed:c5:39:7c:
                    dc:f9:21:31:ce:ea:9e:a3:e2:a9:07:a0:68:79:ae:
                    4e:47:e5:85:78:50:cb:db:1d:d0:f5:ea:62:6d:bf:
                    ee:50:3b:cc:da:60:3c:b1:57:7e:e8:1c:ed:e1:11:
                    8e:71:cf:66:d5:b3:ac:aa:47:31:36:80:ef:33:3b:
                    ac:a7:78:9b:00:79:9a:de:0e:b2:c3:41:e9:e2:7d:
                    7f:23:41:7f:08:a9:b7:60:48:59:c7:6b:8e:72:07:
                    5c:c6:41:f4:9c:c2:88:5c:81:0d:22:bb:f3:bf:63:
                    09:7a:9f:1a:7c:e7:22:44:45:d8:bc:08:54:ec:17:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:D9:2C:4E:A5:1C:35:64:D5:BA:ED:9D:4A:B2:6F:D0:A3:44:32
            X509v3 Authority Key Identifier:
                keyid:74:F5:93:01:01:1C:45:AF:63:56:34:D2:E5:3C:0B:08:C2:05:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPWTAQEcRa9jVjTS5TwLCMIFTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/dPWTAQEcRa9jVjTS5TwLCMIFTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/dPWTAQEcRa9jVjTS5TwLCMIFTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:88:1e:27:a4:e7:75:65:b9:d6:25:7e:d3:61:c7:b9:02:f7:
         03:e8:11:51:db:7a:70:c5:c8:57:eb:94:34:37:f1:62:87:46:
         25:1c:13:c2:76:c1:eb:7e:a6:c3:e9:48:84:1a:47:62:ef:9b:
         10:11:b7:bf:c4:fb:f8:5d:6f:b5:a3:29:21:7a:a2:b0:30:eb:
         71:47:dc:c6:b0:0d:d7:ff:a8:01:8d:68:b2:e0:fb:8f:0c:a9:
         66:01:89:07:45:e3:1d:e6:d0:65:6a:cd:c4:76:7e:69:2d:e8:
         53:40:2f:52:be:7d:29:76:ee:69:00:8b:bd:19:98:f9:72:00:
         ba:e5:1e:5a:bb:bc:3b:0f:5d:a8:e1:3d:c7:c8:7c:39:5b:87:
         2f:95:a7:b9:a7:a2:87:c2:e0:8a:05:c2:d9:03:e2:47:98:9b:
         16:55:29:4e:8a:98:73:ac:c7:da:c4:d3:e5:6b:ea:f2:fc:0b:
         43:06:f3:d4:12:42:b4:37:5c:8a:7e:fb:a0:48:da:6a:a6:a6:
         e2:92:08:c3:5d:16:31:7b:45:5e:47:75:1c:cb:9b:0e:a8:a7:
         de:aa:c6:0b:4d:6a:59:22:0c:2e:91:c6:28:53:90:8e:d4:e7:
         d7:8f:8f:51:3c:c4:c3:08:1c:77:bc:a4:98:d1:ae:42:bf:be:
         43:4d:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:58:12 2024 by rpki-client on console-fra.rpki-client.org