Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File:                     5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier:          /Rt1nIU1+HQIrYrtda0yJGsOJVohmeGU3iv1qpuzC1w=
Subject key identifier:   22:B9:F9:79:4E:9E:0F:F8:DA:EB:9F:2E:16:FF:71:47:13:60:13:4F
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer:       /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial:       018F3BF8A8D0AF0D5EEF249B31115B1251E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number:          0CA1
Signing time:             Fri 03 May 2024 01:01:42 +0000
Manifest this update:     Fri 03 May 2024 01:01:42 +0000
Manifest next update:     Sat 04 May 2024 01:01:42 +0000
Files and hashes:         1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: EsSM6+1Dy9zm+7dqVywQOoo+0c7hERlIOSggy9uuYFE=)
                          2: JtDJk75Xn5v4cr3SS9eWr0pC1Ns.roa (hash: XTArYEkh6zQthwv8NUzk6PaWqGFkr6QZn5H1lrrZNFE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:a8:d0:af:0d:5e:ef:24:9b:31:11:5b:12:51:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
        Validity
            Not Before: May  3 01:01:42 2024 GMT
            Not After : May  4 01:01:42 2024 GMT
        Subject: CN=22b9f9794e9e0ff8daeb9f2e16ff71471360134f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:af:b0:4a:12:15:a0:1a:a3:c3:47:3c:5b:
                    71:41:17:02:b6:36:02:61:4f:7a:78:95:fe:1b:a2:
                    da:a5:48:0e:8b:74:bf:bf:8c:ef:f9:a8:94:d4:ec:
                    a8:07:ac:6e:9d:b8:c2:da:bd:19:df:dc:c6:dc:67:
                    cd:61:84:bd:04:69:58:43:0f:a3:75:35:62:14:ec:
                    f3:95:cc:9e:00:ab:cc:15:ae:12:bc:dd:1a:e3:9a:
                    b2:71:e1:53:a0:17:6c:d1:2e:32:f8:fb:71:d5:4f:
                    00:ed:8a:42:08:54:13:8d:f2:cc:27:e5:04:26:bb:
                    f2:c9:e2:7b:33:51:df:97:63:66:34:0a:1b:bb:18:
                    41:8e:96:d9:e6:54:b0:ac:66:b2:ef:fa:a7:58:5b:
                    eb:39:a2:56:dd:1e:b9:e2:03:ea:46:59:d4:50:8d:
                    43:47:b6:05:9a:8f:b6:fa:6f:ac:5f:85:13:3d:2c:
                    77:d2:dc:f3:ef:42:72:2e:5a:9a:11:31:ec:b0:80:
                    a4:fc:da:b2:8f:31:0e:74:9c:7c:39:58:86:2d:08:
                    c2:67:57:dd:14:70:74:3b:f3:75:36:fb:e9:5f:d3:
                    48:64:0b:da:ab:75:26:3f:82:52:9d:13:36:51:5f:
                    31:04:c5:23:31:bc:85:65:09:a4:b8:1c:c4:ad:fe:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B9:F9:79:4E:9E:0F:F8:DA:EB:9F:2E:16:FF:71:47:13:60:13:4F
            X509v3 Authority Key Identifier:
                keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:44:cc:28:56:f5:07:5a:91:dd:00:e8:a4:8a:85:18:ca:
         81:9a:23:ac:90:7f:04:1f:5b:b6:56:ea:0e:95:ed:68:5d:f2:
         20:8b:57:81:5d:fc:4f:dc:87:b2:c4:c3:39:2c:c0:a8:10:f1:
         83:15:21:4e:b4:ab:e0:7a:33:e3:f9:69:18:73:e3:8f:7d:4c:
         b2:4b:89:f0:49:60:49:71:32:81:14:3e:a0:db:fa:45:bb:1c:
         ac:77:a7:06:60:f3:ea:c1:06:14:af:5e:83:37:45:01:22:f0:
         29:d6:1d:25:1d:b3:67:32:e6:bb:5c:02:5f:d7:d7:bf:a6:32:
         90:98:0a:f0:3a:bb:b5:0e:0b:c8:8b:97:b8:ea:58:11:fe:1e:
         ce:60:25:7c:b6:ce:a6:c3:e7:80:32:83:3e:19:db:b1:f1:6e:
         b7:43:36:d2:c0:7d:9d:2c:4d:1e:0b:cc:bb:7b:e7:24:ec:83:
         b9:7e:89:1c:86:c6:a6:77:35:fa:97:51:7f:c8:06:cf:5c:b4:
         02:72:c2:92:5c:cf:5f:40:c1:82:12:38:f5:5c:21:ad:f7:84:
         0c:aa:a2:bd:b7:1d:d2:70:e6:fa:37:28:63:e6:91:2d:2b:23:
         cc:00:e3:8d:f8:f6:ea:a0:4b:62:f6:36:e2:06:e7:a9:53:ca:
         f4:02:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:56:07 2024 by rpki-client on console-fra.rpki-client.org