Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.mft
File:                     5fgxJ9ZRLhPojUuVHx8DnGo7rEE.mft (raw, json)
Hash identifier:          Sn6qkrk9FSPaKT5Sef0+bgzDVMfN5VM6belN8QdcNGQ=
Subject key identifier:   F1:4A:6D:11:5E:88:35:2F:64:CC:0E:C2:3B:D2:48:EA:2D:B5:54:A9
Authority key identifier: E5:F8:31:27:D6:51:2E:13:E8:8D:4B:95:1F:1F:03:9C:6A:3B:AC:41
Certificate issuer:       /CN=e5f83127d6512e13e88d4b951f1f039c6a3bac41
Certificate serial:       019236CA35B669609F2D174CA4747F475BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.mft
Manifest number:          096A
Signing time:             Sat 28 Sep 2024 04:01:14 +0000
Manifest this update:     Sat 28 Sep 2024 04:01:14 +0000
Manifest next update:     Sun 29 Sep 2024 04:01:14 +0000
Files and hashes:         1: 5fgxJ9ZRLhPojUuVHx8DnGo7rEE.crl (hash: Dhy5ZMnLme/izCDl+bVHqVMPeWACIUSTmGnhQczx17Q=)
                          2: C8lsCl5SDppDvJrxYIXvBm8Msrw.roa (hash: g/EpYJY9zNukn8t8lGX8gUATAsrPI4DJnEBIGDVX0Kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:ca:35:b6:69:60:9f:2d:17:4c:a4:74:7f:47:5b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f83127d6512e13e88d4b951f1f039c6a3bac41
        Validity
            Not Before: Sep 28 04:01:14 2024 GMT
            Not After : Sep 29 04:01:14 2024 GMT
        Subject: CN=f14a6d115e88352f64cc0ec23bd248ea2db554a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:27:5c:89:07:1b:5b:d1:cf:56:96:01:a9:
                    0b:20:a8:88:af:f3:49:42:4e:f8:32:4a:20:9e:9a:
                    c4:43:1a:ed:b4:f1:2d:9f:8e:d5:12:ce:10:f4:9e:
                    5a:b5:75:c3:c0:ce:95:f6:14:86:29:ea:d0:69:4f:
                    14:1d:46:8c:c4:9a:35:3c:95:fa:76:f7:48:70:fb:
                    8f:15:05:64:87:29:a1:4c:11:88:e9:30:2f:a7:58:
                    7b:cc:00:1a:b7:2b:78:c7:56:b1:0b:65:de:38:8a:
                    6b:3f:02:c0:86:6b:72:a5:19:52:a1:9e:ad:9f:db:
                    a6:54:6e:68:98:7e:41:b2:54:4d:b9:11:d0:69:45:
                    67:86:3c:4f:35:a2:55:1d:a7:d3:24:7b:ed:7c:1d:
                    4d:9d:23:70:9f:2e:81:48:89:ab:b2:6b:3b:db:41:
                    55:1b:b3:67:f0:d9:43:56:b0:5e:83:bf:f4:8c:a6:
                    05:ec:dc:02:b4:43:be:77:c3:a0:c1:6c:4d:ca:71:
                    5a:c0:a1:60:3e:9a:c3:66:38:c2:1d:90:3b:63:ed:
                    57:6c:72:c6:a2:ab:d6:0a:bb:1b:3d:54:20:91:a6:
                    98:16:ef:9b:b4:84:93:95:06:61:8c:42:5f:60:43:
                    05:f4:78:28:a9:79:bf:1f:92:17:9d:48:e1:3d:6c:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:6D:11:5E:88:35:2F:64:CC:0E:C2:3B:D2:48:EA:2D:B5:54:A9
            X509v3 Authority Key Identifier:
                keyid:E5:F8:31:27:D6:51:2E:13:E8:8D:4B:95:1F:1F:03:9C:6A:3B:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:ab:4c:a9:76:d7:3f:04:d8:49:24:70:3e:84:7a:55:2f:
         9a:ab:bb:81:0e:76:87:b2:80:58:9f:9d:cd:f4:b4:5b:0d:5d:
         4f:99:a0:73:7c:56:92:de:43:bb:db:3b:a1:85:61:f3:a5:1a:
         ed:d2:a6:85:69:68:8b:7e:43:96:19:5b:e5:09:66:08:72:31:
         ee:29:22:d4:60:64:f6:c7:80:5f:34:ee:b7:7e:42:37:ec:c6:
         96:b7:18:cd:1d:58:3d:42:f3:86:4d:2f:a8:ba:f9:21:c4:c2:
         d9:c1:17:b9:b9:a0:f2:5d:94:aa:1d:1c:81:aa:11:18:09:3b:
         91:4d:84:0c:1b:b0:cf:3f:8b:89:46:5b:8e:84:9c:94:92:61:
         9f:34:f3:7b:dc:6e:8d:8f:11:1c:e9:5b:df:42:81:c3:2d:34:
         f7:f0:47:a1:7e:15:6c:b6:f9:2f:a3:14:68:f4:df:c8:1c:3f:
         85:15:68:ef:a2:db:2c:42:1d:a6:d4:2e:33:84:1a:c4:64:75:
         bd:48:5e:05:96:a8:19:6b:fd:b6:e1:43:db:0b:b9:73:5d:1a:
         3d:fe:d8:56:41:c1:30:2a:00:17:25:55:1d:f2:c1:08:2e:73:
         96:93:df:0f:82:94:d4:8e:7d:28:10:42:9e:76:3d:3b:ad:57:
         30:c3:10:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI2yjW2aWCfLRdMpHR/R1vDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjgzMTI3ZDY1MTJlMTNlODhkNGI5NTFmMWYwMzljNmEz
YmFjNDEwHhcNMjQwOTI4MDQwMTE0WhcNMjQwOTI5MDQwMTE0WjAzMTEwLwYDVQQD
EyhmMTRhNmQxMTVlODgzNTJmNjRjYzBlYzIzYmQyNDhlYTJkYjU1NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU8nXIkHG1vRz1aWAakLIKiIr/NJ
Qk74MkognprEQxrttPEtn47VEs4Q9J5atXXDwM6V9hSGKerQaU8UHUaMxJo1PJX6
dvdIcPuPFQVkhymhTBGI6TAvp1h7zAAatyt4x1axC2XeOIprPwLAhmtypRlSoZ6t
n9umVG5omH5BslRNuRHQaUVnhjxPNaJVHafTJHvtfB1NnSNwny6BSImrsms720FV
G7Nn8NlDVrBeg7/0jKYF7NwCtEO+d8OgwWxNynFawKFgPprDZjjCHZA7Y+1XbHLG
oqvWCrsbPVQgkaaYFu+btISTlQZhjEJfYEMF9HgoqXm/H5IXnUjhPWxgmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFKbRFeiDUvZMwOwjvSSOottVSpMB8GA1UdIwQY
MBaAFOX4MSfWUS4T6I1LlR8fA5xqO6xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZneEo5WlJMaFBvalV1Vkh4OERuR283ckVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NjE1OGYtN2Q0NS00MTNlLWE4ZTYt
NjA1MDM2OGI3ZTAzLzEvNWZneEo5WlJMaFBvalV1Vkh4OERuR283ckVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NjE1OGYtN2Q0NS00MTNlLWE4ZTYtNjA1MDM2OGI3ZTAz
LzEvNWZneEo5WlJMaFBvalV1Vkh4OERuR283ckVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocerTKl2
1z8E2EkkcD6EelUvmqu7gQ52h7KAWJ+dzfS0Ww1dT5mgc3xWkt5Du9s7oYVh86Ua
7dKmhWloi35Dlhlb5QlmCHIx7iki1GBk9seAXzTut35CN+zGlrcYzR1YPULzhk0v
qLr5IcTC2cEXubmg8l2Uqh0cgaoRGAk7kU2EDBuwzz+LiUZbjoSclJJhnzTze9xu
jY8RHOlb30KBwy009/BHoX4VbLb5L6MUaPTfyBw/hRVo76LbLEIdptQuM4QaxGR1
vUheBZaoGWv9tuFD2wu5c10aPf7YVkHBMCoAFyVVHfLBCC5zlpPfD4KU1I59KBBC
nnY9O61XMMMQtQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:32:12 2024 by rpki-client on console-ams.rpki-client.org