Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File:                     p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier:          MeNd+y+LqXq+/bdgBhxfCBEhBdBINtbscodAj6SLSTQ=
Subject key identifier:   6C:65:6C:7F:7D:7A:6A:F0:1F:95:66:4D:B2:77:E2:B3:89:40:1E:86
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer:       /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial:       018F874ACAD0F5143C09047F19E074404E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number:          0D65
Signing time:             Fri 17 May 2024 16:02:56 +0000
Manifest this update:     Fri 17 May 2024 16:02:56 +0000
Manifest next update:     Sat 18 May 2024 16:02:56 +0000
Files and hashes:         1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: W4iG4U0o2sDUcdrEzxGeHrj9rYuMlXN8uvsxbX4oj/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ca:d0:f5:14:3c:09:04:7f:19:e0:74:40:4e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
        Validity
            Not Before: May 17 16:02:56 2024 GMT
            Not After : May 18 16:02:56 2024 GMT
        Subject: CN=6c656c7f7d7a6af01f95664db277e2b389401e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:d5:91:72:ff:dc:2b:0a:d8:87:a5:8b:84:
                    dd:82:3e:02:80:9f:79:61:1e:fe:de:d5:c7:72:08:
                    bb:14:36:03:51:d5:55:1a:ec:0c:2f:a2:f2:f9:1d:
                    bc:72:26:82:b4:97:fd:cd:ae:7f:d3:61:9f:7c:3f:
                    7e:0d:cb:c7:b0:4f:22:2b:af:e3:f6:4d:4f:18:21:
                    0d:e7:3b:43:06:58:b2:a1:1e:af:ad:e0:f1:d1:1f:
                    1d:77:fa:4e:8a:bc:f2:0b:c4:c3:11:9d:77:13:ee:
                    b3:f1:37:c9:a5:45:34:d3:93:79:a1:04:7f:d6:1c:
                    5f:29:e8:77:e0:b1:6e:8f:fe:5c:dc:a9:31:ba:f5:
                    7d:17:8c:cf:71:9a:a0:47:d7:70:7d:0a:e3:b6:03:
                    89:1c:fc:44:a8:eb:50:7e:eb:6d:41:67:08:26:af:
                    be:cb:c8:d7:c2:a3:b0:95:d8:fe:b6:ed:6f:6d:3d:
                    d9:12:dd:b5:58:dc:3e:df:a7:9a:5e:6c:a1:cc:48:
                    92:b7:69:09:7b:13:83:a3:ee:cb:8e:62:8b:c4:f9:
                    66:83:af:31:ee:a6:aa:ff:1c:18:d9:60:ad:1c:78:
                    df:9a:bc:21:a1:59:b0:e7:69:25:f4:57:2d:cf:ac:
                    21:d0:51:a9:25:93:67:38:ba:75:46:77:2c:28:d1:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:65:6C:7F:7D:7A:6A:F0:1F:95:66:4D:B2:77:E2:B3:89:40:1E:86
            X509v3 Authority Key Identifier:
                keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e1:56:6d:0e:39:22:7f:b4:5d:56:6d:85:9a:50:38:73:5d:
         e3:b4:8e:b7:e6:71:2f:be:5f:56:39:73:1e:61:67:1c:8c:5f:
         8f:9a:1d:08:e6:23:ca:88:06:c3:a8:b2:e0:20:59:2a:e0:bc:
         9c:a6:81:ba:10:a5:3a:56:22:71:e8:db:8e:cf:11:c1:c2:19:
         29:f0:e8:3c:a8:3d:4d:d5:0d:d9:8d:cb:87:d4:85:80:2c:43:
         52:50:0c:79:4d:93:80:12:ad:df:59:b4:c8:21:97:c0:d7:b8:
         c7:13:a0:ac:05:4b:5a:36:66:13:8d:82:4b:4d:96:bf:63:26:
         3a:60:f2:8a:61:be:08:73:7b:26:15:74:d9:e9:b4:01:b8:6d:
         3b:da:1a:dc:ab:0d:61:29:63:72:c6:e7:fd:b3:81:d2:b8:62:
         a7:49:ee:ef:4d:7d:5b:61:1e:d3:c1:ce:a5:bf:c0:81:4d:88:
         77:1e:c3:12:41:63:89:d0:03:ec:0d:8d:f7:03:75:4b:b0:f6:
         3d:c0:72:5f:51:c4:50:3a:69:c7:66:1b:03:52:2f:54:ac:2e:
         79:6a:e8:02:45:fe:f6:02:f5:f7:53:a6:66:c4:f9:e4:14:e4:
         74:98:5b:43:0b:de:af:fc:a4:45:a9:8f:b5:15:12:c5:94:d7:
         26:fa:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:45 2024 by rpki-client on console-fra.rpki-client.org