Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.mft
File:                     5WGfuYaMjw-_Xj65znK0hfegBd8.mft (raw, json)
Hash identifier:          nHuiU6ZwkzBAS6i40zdTvFWgl8gohk8tr6sh7T5tSSU=
Subject key identifier:   B5:95:2F:4F:1C:53:57:09:62:EC:C5:CA:DD:25:7C:E6:D6:75:59:73
Authority key identifier: E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF
Certificate issuer:       /CN=e5619fb9868c8f0fbf5e3eb9ce72b485f7a005df
Certificate serial:       018F486AA3346C0D296B674ED906CB5E233A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.mft
Manifest number:          0852
Signing time:             Sun 05 May 2024 11:01:39 +0000
Manifest this update:     Sun 05 May 2024 11:01:39 +0000
Manifest next update:     Mon 06 May 2024 11:01:39 +0000
Files and hashes:         1: 4yVsgvk6SLCJV8wa4346xJZDFYQ.roa (hash: xnXZIOF2gWuWZQUCR0po4lqk5c3HkrOwMun+Me3xU0o=)
                          2: 5WGfuYaMjw-_Xj65znK0hfegBd8.crl (hash: joKv8ndCU7C30buqorNdVk+k+q/qMvIBsCsNv/YSapw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 11:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:6a:a3:34:6c:0d:29:6b:67:4e:d9:06:cb:5e:23:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5619fb9868c8f0fbf5e3eb9ce72b485f7a005df
        Validity
            Not Before: May  5 11:01:39 2024 GMT
            Not After : May  6 11:01:39 2024 GMT
        Subject: CN=b5952f4f1c53570962ecc5cadd257ce6d6755973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:04:cb:9c:34:e5:2e:5f:31:c4:e0:b6:b1:
                    45:a5:45:38:07:07:e5:26:bc:0c:ea:3a:5d:14:7b:
                    8d:56:fa:95:f7:49:5e:d6:bf:a6:af:24:04:f5:69:
                    40:25:ab:b9:22:29:d8:a4:b1:6c:4e:b1:38:78:41:
                    cd:dc:9b:6f:6d:f8:37:c1:47:48:1e:e9:d2:4e:75:
                    eb:ec:4f:d8:4f:3f:a8:25:5a:fc:96:96:b5:cb:cb:
                    9f:29:67:84:e4:26:39:c1:6b:ce:b0:eb:b8:19:84:
                    02:0b:a5:56:44:cd:47:d2:3b:7b:be:0b:85:67:9c:
                    64:5b:5c:39:d1:29:9e:90:33:dd:27:c6:3e:d3:76:
                    09:49:08:d3:28:2f:ba:a4:57:df:d0:80:51:a5:34:
                    98:fe:1e:bf:eb:f7:fb:aa:21:b1:1e:9f:7b:88:a0:
                    e4:14:97:4e:4d:3f:0b:59:eb:8a:f5:04:3f:06:eb:
                    42:0c:26:79:79:b3:cc:cf:2e:48:80:aa:f4:82:6f:
                    1c:76:81:85:b5:7f:85:df:69:68:78:8b:f7:2a:3f:
                    91:5f:2d:a2:c9:6d:47:e5:ec:92:bd:7c:b6:5a:69:
                    e3:47:61:a6:7a:aa:8a:00:43:47:67:8c:33:c5:f8:
                    77:26:5a:b4:ce:bc:5c:a6:a0:e7:20:96:5e:fc:12:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:2F:4F:1C:53:57:09:62:EC:C5:CA:DD:25:7C:E6:D6:75:59:73
            X509v3 Authority Key Identifier:
                keyid:E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:11:6c:ad:9f:f9:08:c5:d1:31:46:8e:4f:b2:5c:42:bd:56:
         69:39:9e:ae:90:cd:bc:94:16:66:f4:2a:f6:da:b0:a4:24:c8:
         23:1f:14:57:ab:d2:51:3f:ff:02:b4:29:01:41:5f:49:a1:34:
         e2:40:d1:12:83:3d:18:4a:2b:5f:84:3c:30:ca:26:8f:61:92:
         a5:f4:f2:d0:9e:32:a3:6e:02:6c:3d:8d:5d:34:9c:d6:64:1c:
         5c:bd:c8:26:ed:81:d6:9c:f8:33:67:a3:7f:12:94:03:9b:c2:
         f3:6e:70:22:d2:60:9c:5c:32:6c:6e:7d:93:b4:e7:9f:56:03:
         66:2e:94:37:b8:7d:82:d5:4e:87:ac:7b:cd:fb:09:1e:5d:28:
         ab:cd:61:d0:8f:79:ed:b0:ac:11:de:51:83:fc:a6:1a:13:4e:
         9d:f0:91:d6:c9:0b:4c:bf:3f:96:1d:fb:14:50:11:e9:25:fa:
         09:16:f0:91:2f:d2:21:de:82:25:78:a1:d4:ad:e9:34:aa:ff:
         59:85:e0:bc:bd:bd:e8:59:f5:ab:29:b2:6c:07:25:0c:e4:3b:
         ad:97:50:94:1d:4e:8c:ac:ea:9d:ed:94:4e:aa:79:c7:b1:45:
         20:07:a1:11:fc:15:a3:5f:ba:40:85:59:da:13:50:a0:d7:c0:
         6c:4d:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:58:11 2024 by rpki-client on console-fra.rpki-client.org