Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File:                     UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier:          vpCE1CTeiyDyOVZz+tA4SYwGaFbdQT04y+vHd8btuew=
Subject key identifier:   A5:37:4D:D2:F8:15:CC:CD:D7:E1:E9:3C:89:82:5D:7F:A6:0F:02:8A
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer:       /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial:       018F8749B331E5A7695FAAB64CC9D9D7D505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number:          0807
Signing time:             Fri 17 May 2024 16:01:45 +0000
Manifest this update:     Fri 17 May 2024 16:01:45 +0000
Manifest next update:     Sat 18 May 2024 16:01:45 +0000
Files and hashes:         1: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: G8AQVxyNgkgYKuLcw0VRjAFMbOLFwtdcZTfpr5vhs5Q=)
                          2: Yxl_qY5aR0oA4s22YaL2mBjemsI.roa (hash: RMemwJ4P3feFx1UU8AuxaMSRfyLp+DL5ooIPnqeKfZ4=)
                          3: hgKJSj37NLk4a7nv9oIV6B5-BrY.roa (hash: FV5Ajroag+TWBWUaLbesk0f02bQ9127lCtyZLxy6n+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b3:31:e5:a7:69:5f:aa:b6:4c:c9:d9:d7:d5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Validity
            Not Before: May 17 16:01:45 2024 GMT
            Not After : May 18 16:01:45 2024 GMT
        Subject: CN=a5374dd2f815cccdd7e1e93c89825d7fa60f028a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:9f:17:52:de:ae:1a:98:0b:2e:13:81:69:
                    1e:2a:7c:ce:ed:ac:f0:42:21:48:85:6f:b9:df:d9:
                    5f:58:1b:ed:72:20:f5:52:83:52:00:7c:5c:0e:fd:
                    34:72:ef:c4:2b:b5:32:77:f0:17:a8:c4:eb:dd:81:
                    fd:9c:31:26:0f:32:15:6a:36:cb:35:0a:be:d5:68:
                    37:8a:20:0d:a4:81:f5:b7:0f:71:6d:5e:8c:29:36:
                    1f:54:46:b7:48:d8:a2:8a:43:1d:ec:f7:33:21:d5:
                    05:83:f3:a2:61:09:9f:33:c0:57:44:ad:47:18:d0:
                    33:4b:ef:b5:50:77:1d:24:2f:a6:b9:4a:d2:c2:2c:
                    f5:d1:c6:61:42:17:90:9b:3f:35:99:18:c2:82:1a:
                    30:91:e6:5c:ca:c3:5b:a6:ce:30:dc:6c:1d:e1:8d:
                    0e:82:84:e4:95:62:03:d1:fa:f3:ab:b3:dc:bd:56:
                    da:49:19:40:2d:3c:2e:62:00:3f:a6:2b:a5:ba:dd:
                    93:e6:ae:d6:f3:05:5b:49:d3:2e:ba:71:2d:e6:e6:
                    fc:36:eb:d3:b1:e1:40:9a:ca:a0:98:38:ca:48:ab:
                    65:0f:60:7f:43:c3:48:c9:b5:35:c2:9b:06:d3:d2:
                    51:56:4d:ee:21:65:63:3a:e4:f6:e0:a6:35:86:18:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:37:4D:D2:F8:15:CC:CD:D7:E1:E9:3C:89:82:5D:7F:A6:0F:02:8A
            X509v3 Authority Key Identifier:
                keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:8e:87:f6:b1:71:04:69:b4:42:b8:1c:5d:fa:62:59:ab:
         bb:a0:6c:0b:05:cb:11:32:ec:1c:19:a2:3d:56:22:54:1e:ec:
         c1:c6:dc:d2:de:a6:17:12:87:c0:e9:25:f3:c7:c9:0f:eb:36:
         06:39:aa:80:50:1e:a8:c2:da:d6:1b:c0:5f:d3:0c:64:7e:b1:
         e3:31:8d:59:62:00:e3:b0:c1:f9:fc:de:fb:71:bc:19:4b:b9:
         20:59:12:e7:7d:82:3d:d5:bf:fe:3b:90:90:4a:61:d9:f3:1e:
         5a:58:87:84:a8:b9:01:e3:3b:50:2f:6e:85:1d:8e:f4:9f:b4:
         e3:52:96:9f:80:86:f2:2d:55:f1:40:30:b8:79:91:84:df:16:
         fb:e9:71:bf:2c:f4:d0:dc:28:46:83:ed:b9:49:ce:2a:d0:45:
         dd:d8:bd:8b:1d:ab:ff:12:a9:4d:9d:e7:42:98:c0:2b:e8:f1:
         a9:e2:58:6b:10:d5:13:35:dd:14:ac:da:8d:2e:99:8b:db:86:
         4c:ec:ac:ef:bc:81:34:66:0a:4c:9a:43:d8:be:40:25:ef:54:
         44:00:8f:57:3f:a3:f5:38:ff:92:51:10:e8:03:3a:fc:59:6c:
         94:b5:0b:57:db:4f:f7:45:34:6e:e5:45:98:74:4e:f8:18:1b:
         c5:f2:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:38:50 2024 by rpki-client on console-fra.rpki-client.org