Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File:                     r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier:          IJAYQxbchQGnYe9sR48KCvzooArLPctKGlzA9zvNU/U=
Subject key identifier:   4B:7E:85:06:86:CA:53:8F:E4:B2:FC:64:BF:27:E9:AC:59:CD:04:F8
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer:       /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial:       018F855C7EFD57B9FE021C49A71B15DB9CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number:          096E
Signing time:             Fri 17 May 2024 07:03:02 +0000
Manifest this update:     Fri 17 May 2024 07:03:02 +0000
Manifest next update:     Sat 18 May 2024 07:03:02 +0000
Files and hashes:         1: nh9gXYbuO-HTwmrL6SeiJz0yJcs.roa (hash: MU2G4TvgdF1Nnz/zc4ub1vium29qaASdcupxfjx7Xsk=)
                          2: op2sUyazCSN-YKWL8dDP_MQtFGk.roa (hash: Y4qRoeUau+z2DXwsk9MpkT69XhrUt1V5HJc5Poj56qE=)
                          3: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: TGRJkg+HR4GyntZiTFKla3/m86OiMz3WcfoP/E93Jdg=)
                          4: ynVbja92TngfepRaKnZKVom45Wo.roa (hash: xh1mauE1wQTy5vaIryae+0JxHaCRtxW5b7iK0liwH2I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5c:7e:fd:57:b9:fe:02:1c:49:a7:1b:15:db:9c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af935603e52e831537716d458b360192f99a3689
        Validity
            Not Before: May 17 07:03:02 2024 GMT
            Not After : May 18 07:03:02 2024 GMT
        Subject: CN=4b7e850686ca538fe4b2fc64bf27e9ac59cd04f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:f9:0f:a9:f5:2f:04:a5:89:b9:25:aa:f9:
                    96:27:4e:c2:87:68:f3:de:23:68:67:94:ea:0b:ea:
                    1f:fc:8e:42:b2:74:83:1a:79:54:53:49:14:01:9c:
                    c3:a9:4f:f2:6e:b0:47:55:cf:1c:dc:a7:81:06:ff:
                    b8:bc:97:e2:30:5b:16:c3:16:eb:1c:3a:34:1f:53:
                    a4:bb:d3:26:f6:49:cd:6f:d1:96:b0:f8:52:d9:30:
                    89:df:ea:6e:fd:e3:50:b9:66:bb:c8:ca:e7:03:2d:
                    08:a1:3e:ec:8b:b8:f5:e6:41:74:c4:be:2d:81:a8:
                    91:50:10:29:1a:78:ca:4f:51:1f:a1:e9:15:70:44:
                    2c:5a:01:12:8b:ee:fc:04:de:cb:7d:d4:2c:0f:f5:
                    04:28:b4:4a:bb:37:48:e9:75:ce:cc:d4:b1:ad:36:
                    ea:a1:28:d0:3a:31:8e:d2:61:06:96:96:49:8c:0d:
                    6b:42:50:07:22:50:b1:ee:86:5f:2f:86:39:61:65:
                    44:0f:bc:5c:7b:ef:cd:c5:a3:91:eb:ca:ae:19:c8:
                    c3:46:61:07:74:ef:88:9a:6d:2c:9f:e2:33:e7:46:
                    f3:43:61:2e:01:0b:85:93:e5:a2:f6:4f:25:c0:ab:
                    72:cf:e8:83:7b:e1:d5:4d:fd:ba:9b:82:d1:74:5c:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7E:85:06:86:CA:53:8F:E4:B2:FC:64:BF:27:E9:AC:59:CD:04:F8
            X509v3 Authority Key Identifier:
                keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:0e:60:e0:ac:ad:d6:dd:37:e2:1c:b1:00:b4:d2:35:f1:
         fe:06:4d:ec:30:37:f3:e1:28:07:bb:00:d7:18:0d:c4:54:05:
         d5:53:b4:63:ea:8e:44:af:dc:0e:af:bd:47:62:3a:51:64:1d:
         7e:0c:94:a7:d4:13:ce:1f:ba:e5:df:38:3f:f2:5a:36:cb:04:
         f0:68:77:ba:d7:2b:73:95:7e:0e:03:c8:6f:21:6d:8b:64:de:
         07:d3:b8:6a:5b:5f:52:3b:d3:a0:51:11:5a:45:a9:0d:ec:ba:
         90:c1:93:e0:ba:5c:b3:0f:35:43:db:31:59:f3:75:05:6c:a6:
         fb:90:3c:c1:05:f1:88:c4:dc:b4:bd:92:14:c2:ab:f6:89:ad:
         f4:a4:df:4f:2a:4f:97:a4:5c:9e:e0:7a:6e:5b:56:e5:79:21:
         f0:e1:7c:75:9a:48:57:cf:41:92:fc:36:fc:c2:74:a6:04:85:
         a5:fa:4d:c3:09:e8:f6:b3:54:9c:60:01:89:c1:d8:c6:ad:c5:
         2d:1e:9e:bd:a7:46:fe:d4:30:35:fb:eb:26:42:33:db:4e:61:
         4c:ed:2e:2f:8e:7a:be:cb:3f:31:eb:6c:4a:f1:53:f3:4a:99:
         47:d4:d8:f1:66:04:50:df:e3:93:77:60:a8:97:7a:22:75:2a:
         16:60:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:01:57 2024 by rpki-client on console-ams.rpki-client.org