Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          kTpLs5co7rKBLt5lPX/spjRuXqt7r/WKaRkEyEt8+5k=
Subject key identifier:   DA:A2:7E:5C:06:D9:71:09:E3:48:11:0F:AF:BB:2F:D9:C2:A1:85:3F
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       018F4B341D528C3CBAD7FEC4C35EB11E8B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          0C2B
Signing time:             Mon 06 May 2024 00:00:57 +0000
Manifest this update:     Mon 06 May 2024 00:00:57 +0000
Manifest next update:     Tue 07 May 2024 00:00:57 +0000
Files and hashes:         1: 42oA1Z5xULsdlYHZ2rpZQMpE7Yc.roa (hash: Ynn5p7sNVggJp5F9kZ0D9Isy7mQl5GF/C73eXRaoYeE=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: LPBkkO17Ed7O6Br2vxk7q9b36cGw759UVQbzSUFKRa4=)
                          3: Ly7IQbLhzwDZHbqQ9r5L5b87aT0.roa (hash: +fQo9CemPWGK3E93NtZEwrKaLheOfYPByLCsNPLL1lE=)
                          4: aFT560fIKe2WUbP_n6CnvwwXwJY.roa (hash: U0j/ohq9so4uNB8ZkaplKF3T9hD6TIfrUwbEh3cHIRQ=)
                          5: ihS39tl8c_1-F6LyYOT_Ge1KWFc.roa (hash: ZHjUCO9XAhzG6r/UwNxE2z89cMDfFG/dXSc5KZTgUGw=)
                          6: iqzw2LCnserEwJTrekyUrRzELwM.roa (hash: bjBLWRUmLV3ncVzCxUtm5ZDa30SIQH5Sx6Uz/KLDz9o=)
                          7: jDGZnifI5DUmphiiUml1WZ3Ym0s.roa (hash: CrmxQw1xA2DZF/d19cAo3AqDy2F826asUMVzpv3zg08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:34:1d:52:8c:3c:ba:d7:fe:c4:c3:5e:b1:1e:8b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: May  6 00:00:57 2024 GMT
            Not After : May  7 00:00:57 2024 GMT
        Subject: CN=daa27e5c06d97109e348110fafbb2fd9c2a1853f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:3a:ff:f1:38:47:e0:67:44:ec:d2:ea:4b:
                    a6:b0:cc:b0:1a:de:ae:42:34:ad:e9:9f:65:ed:f5:
                    6d:19:ac:83:b3:6c:53:96:2c:a0:40:2e:6a:55:f4:
                    8b:12:6a:64:6d:4b:7f:3b:c4:8e:63:89:7b:3b:d1:
                    c5:97:1f:1a:f1:7a:ee:f0:39:4e:0b:99:cc:83:aa:
                    29:79:25:56:94:26:dd:c1:4b:07:91:d9:a2:73:14:
                    b6:7c:1e:55:0b:7a:73:4f:db:cb:38:80:21:ab:12:
                    60:1e:a5:14:84:a4:96:eb:b1:54:3b:46:d5:b3:29:
                    35:f8:ea:59:bf:48:75:4c:8c:83:0e:1c:b8:29:88:
                    c6:5d:90:ac:de:2c:04:55:1e:61:4e:f1:31:ec:a8:
                    9b:e7:21:92:61:e7:d8:6a:be:9f:75:5d:6b:47:7d:
                    8e:55:af:90:ff:b9:4f:50:ab:77:08:d8:7d:45:c3:
                    64:cb:87:6e:dc:92:5a:a4:aa:ba:d3:ce:54:b6:91:
                    5c:01:f6:4e:d5:a1:b1:c6:ea:5e:04:5b:e8:89:87:
                    51:7b:13:54:e3:e0:86:1c:c5:ed:30:93:13:8a:ea:
                    60:22:ba:dd:45:5d:be:bb:9b:c5:b8:e1:9b:e3:55:
                    ba:6c:ca:cc:b8:1e:4f:46:73:92:8d:39:1b:74:b6:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A2:7E:5C:06:D9:71:09:E3:48:11:0F:AF:BB:2F:D9:C2:A1:85:3F
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:03:fa:95:11:3a:a9:4e:2a:f0:6a:ba:35:d1:b2:33:c7:b5:
         26:89:44:6d:04:b2:ea:3e:35:eb:28:cc:4a:1f:3d:3e:e4:7b:
         5e:2d:5a:9e:53:61:27:b9:b7:dd:bf:2f:eb:63:d9:cb:94:b1:
         77:c8:c1:0f:ef:75:87:58:a4:7a:ba:e4:e5:86:a0:69:7e:d8:
         29:6a:4c:5e:9f:f1:0d:a3:61:85:0c:6f:57:40:8c:e5:6c:36:
         e1:fe:bb:3b:fc:64:43:f6:c8:90:7c:67:3b:fe:74:e2:81:0b:
         89:ae:6a:f0:7b:51:8a:cf:1c:14:eb:b5:ec:1a:66:91:d6:41:
         7f:37:85:fc:de:5f:24:45:a6:dd:78:17:62:2c:66:2a:b3:42:
         7f:e0:a7:ee:d4:6e:cc:30:46:59:9a:15:5a:ce:7e:51:af:c0:
         07:b1:e8:8d:64:58:8c:f0:a0:3e:c4:8f:e5:7e:75:9c:d3:29:
         79:6c:74:18:38:7d:0c:30:d7:7b:f6:6f:c9:03:2a:0f:db:96:
         3b:8c:e8:8b:f8:22:b4:f1:e5:d8:28:b0:07:df:65:a9:0d:1a:
         87:42:bf:ca:b5:73:30:61:a8:8e:f2:71:16:4d:ce:94:57:9f:
         2c:fb:9c:43:75:64:d6:fb:26:98:26:f8:3d:5d:1b:90:d2:23:
         f8:cb:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:08:44 2024 by rpki-client on console-fra.rpki-client.org