Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          RYad9ZCf7X1ZtOKNG5O9WyilnOBHtGlpt5bmuwX2bUg=
Subject key identifier:   BB:7E:87:2D:FC:FB:57:AF:93:D4:5E:B3:6C:B1:31:DE:D5:EA:BC:64
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       018F46EA078EFA30DA33B23174E46C666F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 04:01:33 +0000
Manifest this update:     Sun 05 May 2024 04:01:33 +0000
Manifest next update:     Mon 06 May 2024 04:01:33 +0000
Files and hashes:         1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: Ju1EH/diOVSN1yfYF/PxzYkQ1npTKGkgkruCW7n7GsQ=)
                          2: e9qdXczCJ0niStCTM6jWuBfy2fY.roa (hash: 5a+xLSJp5u6Dz1v/vKnZCBQJRjuYXrKiZ1UKVTRi3aI=)
                          3: v6aeYseNmxMPLq361xNfCHpSI8I.roa (hash: WsvXGa5CAkT0VWdxTN/fpDNjSCEMjowoVtd2n44jQRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:ea:07:8e:fa:30:da:33:b2:31:74:e4:6c:66:6f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: May  5 04:01:33 2024 GMT
            Not After : May  6 04:01:33 2024 GMT
        Subject: CN=bb7e872dfcfb57af93d45eb36cb131ded5eabc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:8e:a0:03:47:c2:18:80:20:0b:70:68:1e:
                    44:55:a4:c3:c8:7b:9b:74:39:66:56:ac:dd:26:b9:
                    84:ef:46:8e:d6:a3:cf:83:10:18:ba:ec:4f:e8:29:
                    64:ef:e6:3f:80:75:e5:bd:76:da:93:76:05:e3:8c:
                    49:2b:53:26:c3:6f:d2:73:3e:e3:6e:f1:3a:a9:63:
                    89:6c:64:30:a0:06:b6:e2:01:b4:ff:f8:09:5c:45:
                    36:49:7c:ea:4f:f7:2a:dd:39:e9:59:8d:24:5a:13:
                    5d:6e:a5:eb:4c:32:d0:05:8f:47:d8:e0:67:4a:b6:
                    0a:5d:e0:b1:ec:2f:49:cb:e7:6b:c7:84:ff:e1:b1:
                    3e:5d:a0:d1:e7:44:32:89:77:1b:45:bc:16:31:f2:
                    32:c9:27:ee:b7:4a:ac:78:5f:2b:3a:5b:90:d5:dd:
                    fc:78:5d:d5:95:8e:28:ff:e8:44:97:0b:0c:5a:b6:
                    54:a6:24:3b:c9:8f:1b:34:83:5c:dd:05:72:bd:ae:
                    eb:66:93:0a:79:e1:59:84:11:de:b2:97:36:57:83:
                    5a:d2:56:9d:1a:f6:4c:ed:8b:aa:02:16:1f:33:ff:
                    cf:34:ec:ca:0f:1e:04:b6:ba:95:ac:b7:f6:e7:43:
                    d8:78:1d:9b:4c:48:31:c9:6e:1a:6b:84:99:dc:2e:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:87:2D:FC:FB:57:AF:93:D4:5E:B3:6C:B1:31:DE:D5:EA:BC:64
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:8e:41:cb:3f:25:25:55:bd:cf:23:c8:fd:64:52:69:e3:
         cf:87:6f:15:2d:c2:cf:46:e9:9b:8f:86:bf:77:52:1e:3e:d2:
         73:3d:b0:b3:d6:b8:10:58:ee:17:eb:07:c4:2e:a0:20:15:51:
         f2:e4:19:fe:e5:11:33:46:93:36:ec:15:3d:46:e0:46:e7:1a:
         de:e9:9c:20:41:6e:22:7e:41:1e:14:e1:c8:43:e8:d3:3f:d3:
         1e:3c:b4:ff:d6:3e:a9:cf:a2:ff:6c:6c:1c:fc:41:94:92:22:
         03:20:0c:19:f4:78:a4:e3:75:85:c9:98:7f:47:b2:1e:3a:c1:
         2c:63:4c:6b:0b:49:68:c6:90:d2:9a:68:79:72:a3:12:79:d8:
         79:87:01:fd:f0:71:40:e6:3d:6c:d6:55:4b:fe:d3:6f:e7:40:
         93:84:93:0c:c1:8a:5f:0c:6b:04:82:2c:26:39:c1:4a:03:91:
         10:4e:ea:99:6d:4a:e3:e8:43:9d:87:bd:21:f7:30:fa:fa:02:
         5c:ff:d8:a0:b5:d9:04:b0:a1:dd:18:e0:cf:98:43:b0:fa:fc:
         4e:dc:9b:5b:20:bd:aa:d1:b8:d3:47:14:dc:db:02:70:3b:1b:
         d9:0b:88:7a:1b:1a:f2:fe:65:aa:af:d2:26:b3:b2:7f:37:05:
         f5:a5:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:34:52 2024 by rpki-client on console-fra.rpki-client.org