Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File:                     ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier:          HoykiE/dlBgXz4v6Tfo0xCtXJvpaDGHnla7R8b+4ppg=
Subject key identifier:   92:ED:FA:C1:60:9E:CA:95:5C:CB:28:04:C4:97:B6:AB:B1:04:4D:2F
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer:       /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial:       018F8F023631202C444FFB0D88B7417448E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number:          05E2
Signing time:             Sun 19 May 2024 04:00:37 +0000
Manifest this update:     Sun 19 May 2024 04:00:37 +0000
Manifest next update:     Mon 20 May 2024 04:00:37 +0000
Files and hashes:         1: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: S8QhtzRd3XHG5iMpkNtzuY/5YkKXAGvZekI0Ah8xjuA=)
                          2: a4nVjj6OI8DjTRM5WFPGHhbpk10.roa (hash: r5qKTwt3b8F9/RSnDsAQtquGACsOF5+j41JQ16fdLus=)
                          3: j0IWSfbYP13OJmoHZTjGFvChNuE.roa (hash: jt9I3VP2cPp8UGACV3NIGtGH41UwO07mMfCngUYARQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:36:31:20:2c:44:4f:fb:0d:88:b7:41:74:48:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
        Validity
            Not Before: May 19 04:00:37 2024 GMT
            Not After : May 20 04:00:37 2024 GMT
        Subject: CN=92edfac1609eca955ccb2804c497b6abb1044d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:ed:61:75:78:ac:7f:64:09:a9:3e:9d:75:
                    4b:f5:4a:1a:61:d7:2d:e2:cc:2d:0c:6c:12:cd:73:
                    57:73:cd:32:1b:26:6b:d5:b6:ea:61:65:78:14:ac:
                    44:89:bd:ee:33:b5:c4:ff:b9:60:05:34:d4:34:c7:
                    ca:d8:92:6f:e1:08:77:d4:5a:5c:2d:af:30:5f:3a:
                    cf:4a:c8:47:ee:6a:86:cb:f2:aa:81:b6:5a:30:63:
                    3a:89:7d:e9:ce:61:47:4f:e5:32:b4:7e:9a:15:c6:
                    c9:e7:e3:83:3d:dd:f0:43:d5:f5:c5:5b:23:1c:44:
                    55:54:87:2b:bb:ed:e2:8c:55:8e:66:8c:fe:b3:cb:
                    9e:6f:33:4c:9f:bd:bd:30:73:ad:fc:9b:1e:a4:28:
                    34:3f:96:35:e1:4e:e0:a5:cc:7a:2b:14:3f:f1:93:
                    f2:7b:a9:5e:09:4d:d0:96:cf:56:29:50:99:07:b8:
                    72:84:27:86:6f:51:83:f3:a3:67:0f:94:9a:c3:b3:
                    00:f0:7a:68:d1:cc:ed:c0:78:01:7e:9a:4b:eb:2c:
                    55:a8:e1:48:03:bf:11:b7:4f:b2:66:40:18:54:41:
                    2d:19:33:dc:48:66:5f:bc:25:11:47:d0:0d:6f:7c:
                    0a:85:29:be:43:2d:33:0b:06:9e:ca:ec:99:81:89:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:ED:FA:C1:60:9E:CA:95:5C:CB:28:04:C4:97:B6:AB:B1:04:4D:2F
            X509v3 Authority Key Identifier:
                keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8c:7e:c3:fb:e0:20:4b:4b:b5:70:5e:94:07:32:79:2a:aa:
         9e:e6:60:ac:12:94:94:ed:94:55:4e:74:64:e2:3b:7d:29:89:
         38:d5:25:76:76:94:cb:af:d2:73:f4:43:89:a2:1c:fe:56:35:
         3c:90:77:33:5e:e3:85:15:e2:16:d7:bf:d2:e7:47:57:28:16:
         92:14:00:75:57:ed:96:6e:e6:25:ae:44:ea:39:7b:41:34:b2:
         c0:4d:22:de:b1:df:b2:15:18:33:76:c9:55:8a:a8:c7:97:19:
         52:5c:6e:54:6f:61:ca:78:f9:41:34:0f:bb:a3:e7:92:b4:cf:
         55:92:6a:e5:56:14:87:41:52:13:3a:a8:16:05:42:3f:01:1a:
         e4:8d:f6:fc:98:7a:4b:0b:6f:26:93:ae:59:fa:80:58:87:39:
         e9:eb:b5:b1:ca:47:bf:3b:cd:ab:7c:c5:72:62:34:8f:a1:a1:
         33:92:4b:5f:f1:b2:3c:27:80:47:30:77:8f:d5:f3:0d:e9:b2:
         e5:a0:d1:48:82:92:e5:78:e3:b1:45:4d:e0:c8:b7:12:b3:92:
         6f:a5:c6:4f:82:19:ea:46:bd:15:32:cc:f1:1d:39:c1:42:3f:
         3f:b7:d7:b5:d6:c6:26:1f:bd:27:4f:24:e6:8c:c0:58:5f:ac:
         81:ac:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:49:17 2024 by rpki-client on console-fra.rpki-client.org