Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File:                     5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier:          UTOCj8d3wKDXbX94oe7IYJigKz41QTehomeRF58Moh4=
Subject key identifier:   52:8C:6F:FF:71:EA:3B:30:EE:FE:11:B5:85:D0:60:22:AB:82:8D:F3
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer:       /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial:       018F4BD9A62CC38C7E4C9F4BC1D092FE46AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number:          0E37
Signing time:             Mon 06 May 2024 03:01:46 +0000
Manifest this update:     Mon 06 May 2024 03:01:46 +0000
Manifest next update:     Tue 07 May 2024 03:01:46 +0000
Files and hashes:         1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: v1VDPmgfWV4Wqd02Dwv6lNRb+78HqTo6ErCdX2MD/sE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:a6:2c:c3:8c:7e:4c:9f:4b:c1:d0:92:fe:46:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
        Validity
            Not Before: May  6 03:01:46 2024 GMT
            Not After : May  7 03:01:46 2024 GMT
        Subject: CN=528c6fff71ea3b30eefe11b585d06022ab828df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:1f:25:54:c4:04:02:6a:7e:b6:14:27:6c:
                    d9:1c:00:d3:48:d8:73:90:db:50:b9:ac:78:34:7a:
                    84:ab:bf:71:94:e2:0c:e5:f8:7f:b5:f5:d9:e2:18:
                    10:77:a6:e8:61:24:37:de:65:68:bb:d3:22:9c:b7:
                    c4:9d:49:42:39:aa:a1:d3:f2:11:78:f1:5a:ec:0e:
                    80:6d:d1:83:14:ff:f9:d6:44:f7:e9:3b:6a:cd:6e:
                    d1:1c:12:88:ca:1b:10:4c:57:af:76:4e:0e:e0:38:
                    8a:10:2a:0c:0e:5d:cd:75:20:7d:7b:e7:62:ee:6d:
                    f8:a6:13:4c:51:fe:6a:2b:b5:fd:6f:15:ba:53:0f:
                    9e:05:05:be:bc:2b:60:ad:41:bc:70:3b:b7:f6:01:
                    47:60:0a:3b:fb:be:18:6a:cd:ec:4e:d7:13:b7:1a:
                    b7:38:33:53:de:01:ee:87:3c:45:b6:ba:6e:2b:9f:
                    11:74:9d:ab:dc:3b:58:95:b2:64:11:5b:7c:92:f3:
                    03:7d:96:cc:6f:25:7d:43:0a:dd:c7:5e:b1:39:88:
                    12:15:38:cf:ce:32:a3:e3:a3:c5:a9:e3:88:2c:b6:
                    1b:e0:31:57:7e:ca:bd:ad:93:fe:6e:e5:94:b2:d0:
                    64:2a:b6:ac:21:8d:11:11:00:9c:ce:f0:d8:69:a9:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:6F:FF:71:EA:3B:30:EE:FE:11:B5:85:D0:60:22:AB:82:8D:F3
            X509v3 Authority Key Identifier:
                keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3b:19:e0:ad:1a:e6:3e:cf:27:87:e1:e1:5b:7a:61:73:50:
         0f:c6:ac:d0:7c:7b:d7:4f:83:64:b5:b8:1d:e7:10:0c:46:e3:
         72:1e:c5:cc:52:17:74:2c:67:bc:54:79:e0:ae:fa:b5:e6:f5:
         59:b8:45:fc:34:78:99:df:9c:79:1e:89:c9:41:10:09:45:0a:
         2a:d0:89:d9:15:7b:7e:b6:25:d9:12:3c:0e:da:7d:6a:9d:50:
         cc:3c:6e:d8:3f:f8:d9:ba:cb:37:b0:5c:6f:e3:fa:0a:04:52:
         3e:c3:b2:32:e4:ca:96:e7:25:a3:ff:2a:72:bb:15:73:c1:f3:
         7f:0f:2d:4c:11:be:d4:0d:89:6b:84:79:95:51:23:f1:aa:fb:
         42:89:38:03:72:78:62:e7:bb:ad:b3:58:ac:40:36:d7:c7:64:
         9c:5f:23:72:e9:09:4b:3c:e0:48:bb:b6:2e:74:8f:0f:b9:c9:
         8b:6f:98:55:62:bd:10:27:ad:3d:bc:13:6c:d3:ec:95:8b:30:
         e3:2c:23:a6:e3:ef:a9:31:e7:8a:d8:63:b3:68:8c:37:8c:88:
         70:55:91:83:31:d3:d9:9c:9d:47:4c:a5:e6:a0:d7:35:f1:e1:
         15:fa:db:f9:59:22:44:1b:ff:e2:5b:34:e3:dd:21:8d:66:0e:
         c7:bb:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:13:30 2024 by rpki-client on console-fra.rpki-client.org