Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File:                     5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier:          CsMAZeQczhFcEuQ0i6+qAdFtWc/vrcuo8uJ4wrXHrio=
Subject key identifier:   C1:01:B7:66:D7:D4:CF:0E:D2:95:11:34:FF:53:BA:5D:EA:A4:E7:40
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer:       /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial:       01901CA12C98659AEFAE30449444210CB651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 16:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:42 +0000
Files and hashes:         1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: CJlRfJN86oSogzAHHKUdvxBjRLILuHSUkNEdBXEH2AE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:2c:98:65:9a:ef:ae:30:44:94:44:21:0c:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
        Validity
            Not Before: Jun 15 16:00:42 2024 GMT
            Not After : Jun 16 16:00:42 2024 GMT
        Subject: CN=c101b766d7d4cf0ed2951134ff53ba5deaa4e740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:64:fa:a4:a7:0e:a2:e1:8f:22:1a:00:b0:
                    bc:9c:f8:24:76:29:36:2d:e2:7a:77:47:23:e5:c6:
                    f2:8f:d5:5b:1d:c4:0f:0d:be:02:02:8c:58:5e:88:
                    4e:46:e4:c1:bf:fe:a4:b8:70:68:d9:66:87:99:9d:
                    11:fb:ee:e6:32:56:60:af:c6:f7:72:01:5a:73:0f:
                    73:e3:cd:1e:8e:c9:7b:7b:c6:92:01:9a:81:3e:08:
                    a0:cc:a9:e6:b5:54:4b:c9:66:4a:f6:34:dc:c7:c9:
                    81:d7:d7:4d:d8:ec:68:2d:66:54:de:5b:70:6c:b5:
                    55:2d:2f:f2:53:d9:28:14:ed:87:77:06:d3:c8:bd:
                    cb:b5:c6:31:83:b4:a0:b3:88:62:6b:f3:30:b5:db:
                    2e:2b:05:ec:70:bd:08:54:c8:6e:ad:1e:50:44:fc:
                    72:05:1e:cb:f0:d3:61:e0:f9:50:70:75:d7:67:b0:
                    49:a4:e1:7b:89:2d:04:86:6c:83:2c:a8:d4:30:38:
                    be:54:84:73:d4:ff:67:32:cf:c5:e9:3b:c2:e7:60:
                    20:c0:e8:50:d2:36:07:c5:cf:a2:1a:5f:16:21:2b:
                    53:a3:78:48:7c:9a:48:6c:85:d5:94:9a:b5:24:61:
                    57:b7:b9:7b:12:ae:50:66:bd:1c:3c:b9:a8:70:82:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:01:B7:66:D7:D4:CF:0E:D2:95:11:34:FF:53:BA:5D:EA:A4:E7:40
            X509v3 Authority Key Identifier:
                keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d3:08:e4:7e:62:26:10:60:52:b6:d4:ab:7b:de:a3:69:53:
         ca:19:ff:c8:fb:f3:56:95:db:54:0a:4a:d2:85:47:b0:b0:b7:
         aa:7d:c5:6c:99:d7:f5:42:ad:e7:1c:55:ba:f1:4f:95:78:23:
         28:97:3f:da:5a:bd:45:1d:b9:67:ad:0c:a1:57:1b:2c:a4:fc:
         80:da:b9:7b:2d:d7:8f:01:fd:6b:8d:1a:78:e3:a5:34:c6:d4:
         de:93:59:b7:29:de:e6:bd:72:23:76:87:c5:36:82:65:fc:bb:
         81:c7:25:d0:c4:83:3c:7c:5d:d3:8b:68:3f:68:55:99:9a:b5:
         e5:82:04:18:33:57:af:a4:77:da:9f:88:95:ff:97:59:b2:b9:
         9a:09:27:8e:9c:b2:e9:77:01:3d:5b:c7:ef:0c:7e:e6:33:97:
         40:65:2b:c4:25:aa:11:d8:87:21:4c:d7:3b:92:3b:be:e0:15:
         50:4a:51:46:ea:79:d4:95:18:e1:58:07:30:9f:3c:3e:b4:96:
         6e:0e:29:03:3c:de:9b:75:1a:31:58:bf:fa:b4:12:ab:94:6a:
         8f:5f:20:ef:8b:ff:d8:a7:d3:f8:d7:47:7a:8d:9f:84:c6:73:
         5b:f9:ef:ca:f0:37:d4:b9:be:c2:3d:a5:74:d1:3e:b8:0e:a7:
         85:06:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:22:51 2024 by rpki-client on console-ams.rpki-client.org