Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File:                     5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier:          c4LvzD7s7fknrbfN/4dbmOLG6Gj6wZPM96DV7uf0Kak=
Subject key identifier:   61:96:39:5B:F1:94:0E:87:29:7F:DA:8B:D3:0D:13:68:BD:13:E4:CA
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer:       /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial:       018FB3B5D0974A3A8B441EDCE533F82F147C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number:          084D
Signing time:             Sun 26 May 2024 07:03:07 +0000
Manifest this update:     Sun 26 May 2024 07:03:07 +0000
Manifest next update:     Mon 27 May 2024 07:03:07 +0000
Files and hashes:         1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: gJjuV365Q62+EmqIz3m3ofDx45+YBwX1hQMtH0eXbL0=)
                          2: NbNDJUzQH3dtWjDzVWxuRPVMYyo.roa (hash: zPXQLLkqUR2q+otq95xoxuS3o0Oaha6YRs1J0+I7cCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b5:d0:97:4a:3a:8b:44:1e:dc:e5:33:f8:2f:14:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
        Validity
            Not Before: May 26 07:03:07 2024 GMT
            Not After : May 27 07:03:07 2024 GMT
        Subject: CN=6196395bf1940e87297fda8bd30d1368bd13e4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:c5:23:44:d4:6f:d1:2e:0a:1f:37:2e:62:
                    19:79:9f:f8:37:51:f2:48:6d:4a:60:e5:62:19:28:
                    0a:aa:d3:38:32:c1:3a:de:b7:f0:d2:6c:de:57:7a:
                    c4:b9:96:2a:33:16:bf:94:2c:81:87:00:6e:97:dc:
                    31:15:7d:07:28:ef:fd:94:d4:5d:a5:cb:dc:45:5c:
                    72:7a:e6:db:11:03:12:75:9b:90:62:16:d8:f4:21:
                    4d:1f:60:aa:87:58:f8:fa:a7:9f:69:ff:00:ff:ca:
                    f9:22:65:82:39:a5:20:b8:5f:0c:23:04:f8:f6:61:
                    85:bf:95:f9:6b:35:6b:09:9c:fb:bf:57:b1:98:46:
                    b4:4c:4e:57:70:31:51:5b:c9:38:bf:75:b1:83:dc:
                    aa:a0:a8:8a:75:1e:d0:76:0c:93:3a:60:2f:bc:f1:
                    03:50:b5:40:2d:c9:21:50:1f:c1:68:34:91:ea:30:
                    6d:95:00:09:e8:84:bb:56:c8:ad:7a:6a:a3:08:0e:
                    4c:78:ed:95:7b:6d:86:5a:38:a7:24:d8:7b:94:ce:
                    1b:ea:19:a6:c5:cc:a2:75:7c:36:6e:5d:09:d2:81:
                    cc:d9:59:a1:75:ba:86:3f:cc:05:ee:49:8e:07:c6:
                    1b:0d:63:5d:f4:fa:30:76:52:e3:aa:a8:f9:ee:6d:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:96:39:5B:F1:94:0E:87:29:7F:DA:8B:D3:0D:13:68:BD:13:E4:CA
            X509v3 Authority Key Identifier:
                keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:d4:f4:ae:5d:a1:40:3e:b3:c9:dd:5d:ca:b3:4a:08:a4:
         38:79:dd:41:58:02:2b:33:31:38:0a:48:db:da:2e:ae:19:8c:
         d0:bc:f1:bb:14:82:c4:16:0c:de:61:28:4c:32:db:65:92:73:
         f7:18:c7:ab:df:b2:cb:b0:db:e2:1d:ed:00:86:f5:cf:7e:8d:
         32:a1:01:92:92:f0:54:e9:0f:2c:47:ce:36:e4:f9:f1:79:2c:
         fb:f0:4c:48:b4:96:db:97:f6:47:bf:de:d3:cd:13:e9:b1:49:
         09:a9:e3:2a:1d:ea:62:34:d6:1a:b7:84:f8:f7:26:fc:bf:60:
         e1:50:e2:ca:7a:22:87:25:63:17:80:1d:e4:67:f5:4a:3f:ee:
         c8:63:45:6c:29:89:a2:33:8e:5a:3d:d5:79:ed:c2:06:aa:e2:
         4e:b0:ff:75:97:93:0a:ba:d9:ec:34:1f:84:59:26:b7:6c:4c:
         0f:e5:7d:c6:2e:ad:f4:1e:03:bd:39:4c:82:07:84:96:f5:7e:
         c5:27:6e:7d:ac:ab:1d:7f:96:c9:65:e8:29:81:95:d9:01:22:
         d9:62:7c:f9:2a:56:5d:f1:c4:2f:4c:a0:9c:44:26:17:01:44:
         28:23:b8:de:4f:65:23:f5:f0:fd:6b:86:aa:5f:ef:7e:17:e9:
         22:7a:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 12:46:17 2024 by rpki-client on console-ams.rpki-client.org