Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File:                     5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier:          ogUPv3D/ZD6zuFzAPOk63M5/9cpCb7ZwtoPaZoJxPqo=
Subject key identifier:   53:CC:F9:4D:0F:5D:1A:13:02:AF:DF:80:84:4C:A1:8A:72:5C:9E:8F
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       018F2D29CF4D1BD8256826A4B9718442A06B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number:          0DE4
Signing time:             Tue 30 Apr 2024 04:01:05 +0000
Manifest this update:     Tue 30 Apr 2024 04:01:05 +0000
Manifest next update:     Wed 01 May 2024 04:01:05 +0000
Files and hashes:         1: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: kfaKchYrUocwf/WIwXPX2T2FrzIwbkd/0yVKaBULRTw=)
                          2: og91-pVKT1jpLb4FvyWzuZE8cSQ.roa (hash: 4FGQ1SXHGdRu7Q7qyPZ0jhhcOBINouiIlkxQt38MDYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:29:cf:4d:1b:d8:25:68:26:a4:b9:71:84:42:a0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Apr 30 04:01:05 2024 GMT
            Not After : May  1 04:01:05 2024 GMT
        Subject: CN=53ccf94d0f5d1a1302afdf80844ca18a725c9e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:5d:fa:e3:66:a8:dc:ef:50:8a:23:4f:e9:
                    02:63:49:58:2c:84:55:f1:58:7e:3e:c8:58:28:ec:
                    08:13:3c:20:3c:c9:02:22:af:8a:0f:8e:98:a0:ba:
                    06:30:75:8c:93:31:c0:68:b9:de:49:84:26:2e:b0:
                    6d:83:73:e0:f1:81:85:c9:fe:2b:d0:7b:a3:f3:91:
                    bc:04:51:d4:9a:38:7a:e9:9f:be:e6:9d:ba:ba:b0:
                    cc:9e:9e:be:da:fb:8a:e6:b3:30:21:74:92:e7:63:
                    19:fa:dd:45:f1:e4:91:29:9c:85:47:0e:f1:05:56:
                    a9:6a:9f:eb:87:02:50:a1:4f:80:e1:9a:09:3d:5d:
                    14:1f:ae:8f:1b:7e:71:73:63:e8:f1:6b:f4:7f:1b:
                    9f:b4:5e:93:c6:b9:0a:8a:d9:c2:c6:0a:25:78:6e:
                    da:d0:26:d3:cd:20:96:45:12:cf:4c:5d:7e:60:39:
                    3d:19:df:85:2d:9a:ab:39:85:a5:93:7c:f7:83:1e:
                    a0:21:53:a3:57:dc:00:c3:68:06:f6:ed:a7:d7:e0:
                    1f:12:ee:f6:de:66:ff:01:79:cd:92:fe:a1:af:a5:
                    46:34:f2:74:31:f8:4b:87:1d:98:0d:40:a7:c3:b9:
                    e8:51:de:f0:a9:0c:ae:a8:b1:38:f2:d8:eb:9f:7e:
                    66:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:F9:4D:0F:5D:1A:13:02:AF:DF:80:84:4C:A1:8A:72:5C:9E:8F
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:73:f3:b7:56:d1:00:7f:37:7e:29:78:b1:d7:ab:0a:a9:
         cd:fa:37:fd:20:ba:53:25:ab:66:30:5f:84:68:b8:4d:92:9d:
         76:3a:57:cd:56:11:f1:f9:ce:8f:7c:be:d2:fc:1f:5f:34:0a:
         26:77:1a:9d:d6:03:5d:04:ac:5d:b8:8f:d7:e2:d4:1a:4b:03:
         42:7f:51:7c:d8:aa:aa:62:dd:29:67:33:d6:3c:97:25:8e:9e:
         5e:c5:ba:3c:1d:bf:bd:49:f9:9e:01:0f:d1:a1:26:ad:b4:c6:
         19:4a:6d:5c:2b:59:cc:5a:60:b7:fd:7b:b2:66:86:3e:85:d8:
         02:72:34:f6:c0:ce:70:47:66:36:f2:d9:3d:b7:cb:ab:06:2b:
         24:de:a9:3c:f6:fc:12:fd:ea:98:f2:0c:59:07:56:bc:2e:40:
         c7:6b:53:e1:a3:db:f1:7e:fb:8e:c4:97:a2:28:4a:47:a6:7a:
         48:08:6b:4a:c2:a9:e6:c9:97:62:0c:a3:ed:8c:bd:b8:a5:66:
         af:c2:a3:22:12:36:0e:41:cf:ae:30:6b:ef:1d:b1:19:c6:8b:
         39:cd:6e:15:c0:31:96:8f:2f:18:78:3f:11:70:4d:56:db:03:
         7d:e7:da:73:9a:8e:b2:b6:3f:83:7f:ed:5c:01:25:f7:ce:cd:
         38:a6:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:44:35 2024 by rpki-client on console-fra.rpki-client.org