Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File:                     5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier:          Ypozo9iMeSd3bynGM/fnIieo0qMfiWDWMU4N07dy8A8=
Subject key identifier:   3B:B9:FD:1A:89:18:DC:65:53:05:19:7F:0C:C6:AD:B4:30:20:8C:0C
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer:       /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial:       0190448C4E852A149D20B4DA0230C2651E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number:          11D7
Signing time:             Sun 23 Jun 2024 10:02:44 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:44 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:44 +0000
Files and hashes:         1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 0R4eTslyptqI4t5OaM3Cjb5P+713l2a98kyA+0dwrLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:4e:85:2a:14:9d:20:b4:da:02:30:c2:65:1e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
        Validity
            Not Before: Jun 23 10:02:44 2024 GMT
            Not After : Jun 24 10:02:44 2024 GMT
        Subject: CN=3bb9fd1a8918dc655305197f0cc6adb430208c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:12:c2:14:7f:f9:e3:f4:9c:48:07:33:0f:
                    e0:d4:e1:70:2d:cc:f2:33:e4:b1:c0:26:77:1d:b4:
                    37:e1:71:16:47:2a:3d:30:e5:20:f9:69:fa:1d:be:
                    49:be:1a:ff:24:53:bb:cd:c7:ca:df:f5:c3:cb:7b:
                    94:e8:45:44:17:fd:e2:ae:aa:d1:51:9a:f5:38:c4:
                    e5:fd:68:65:1c:4d:d3:9d:e8:ba:9f:37:b4:40:1e:
                    fc:4d:71:bf:e7:a5:08:09:1d:ab:05:2c:91:f8:b9:
                    e8:af:5c:5c:f7:41:43:22:e7:cf:b5:0b:04:ca:31:
                    08:e1:93:60:4c:b9:5a:83:04:8a:09:b4:ff:8f:bb:
                    2b:94:da:8e:6a:3c:8f:fc:fa:66:0c:e2:98:be:39:
                    44:0b:e7:b7:ff:1e:5e:24:c2:5d:c9:f4:ad:7f:63:
                    b6:5c:d4:70:ad:bc:1e:b9:73:0c:e9:d8:e2:86:41:
                    ea:25:0f:fa:8b:78:53:6b:92:20:f1:96:6d:ee:de:
                    d8:91:6e:dc:4e:6f:c2:a7:f1:fe:32:4f:87:26:e0:
                    f0:59:d6:50:c9:2c:ee:af:8d:39:cc:64:f4:a8:95:
                    e5:15:61:e6:27:38:85:2d:43:48:b3:5f:f9:a6:c7:
                    20:d6:a0:9f:e5:1f:93:a7:61:40:12:8f:c3:4b:f4:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B9:FD:1A:89:18:DC:65:53:05:19:7F:0C:C6:AD:B4:30:20:8C:0C
            X509v3 Authority Key Identifier:
                keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b7:c6:b0:31:19:ce:6f:f1:13:2b:8e:00:a6:fc:e7:7a:68:
         74:1c:78:05:a3:ef:e6:11:fc:72:15:5f:d0:38:cb:51:78:ff:
         e0:f1:1e:e0:3b:92:af:53:69:59:67:e9:e8:6f:1f:24:df:56:
         fa:ca:4c:13:1b:45:cd:51:8d:4c:30:44:20:f4:f0:a0:07:ef:
         62:51:44:54:0e:f7:60:db:8a:40:d5:e3:9e:ac:3e:15:7f:1c:
         aa:3b:41:9d:a8:e7:6f:08:89:4a:94:1e:05:83:fd:0b:02:1c:
         92:ce:ae:cc:11:6d:3e:2f:10:74:da:bb:8b:83:41:a6:6c:0c:
         4a:c5:5b:20:13:c0:76:7c:0e:fb:ed:df:23:0a:74:6d:08:6d:
         dc:be:24:b6:8e:19:b9:3d:9e:8b:70:a5:8a:d2:69:64:f6:9b:
         07:1b:ab:7c:42:e3:a2:97:0e:4c:87:0a:d7:7a:6e:a4:99:b9:
         81:20:1e:37:d8:d7:fc:1f:b8:71:a9:4d:d9:28:2a:73:d4:74:
         b3:b4:6e:b5:d7:0f:b0:69:b4:0c:49:80:03:e0:f6:49:56:ed:
         a8:47:82:c4:6d:65:cc:ee:e0:48:64:66:c6:e5:f8:bd:4e:d8:
         1b:c5:5d:a4:65:1c:4c:cb:42:85:0c:33:2a:da:9f:ba:a9:b4:
         1a:6b:ee:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:12:19 2024 by rpki-client on console-fra.rpki-client.org