Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File:                     mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier:          WxQmiHksw9nOD8dQ0KhVh5ubYqe6PqyXuvHXahm05Ds=
Subject key identifier:   DA:C1:EA:3A:50:F0:9F:B5:DE:6A:A1:CF:E4:B3:16:20:CA:11:AD:C1
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer:       /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial:       01901BFE1EF71A53F9629BCF290A8574AB96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number:          0F09
Signing time:             Sat 15 Jun 2024 13:02:37 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:37 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:37 +0000
Files and hashes:         1: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: xXzEGNdjgqd3tkKkI8q5MjhP4n2l06cPlls/98m3FwA=)
                          2: xf-rBr_dbCggR6ojx_SzY6RS_hQ.roa (hash: D760C7rjyuufJhBDEIBEw5gRk8kdR4Q39Tlu3cFQFFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:1e:f7:1a:53:f9:62:9b:cf:29:0a:85:74:ab:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
        Validity
            Not Before: Jun 15 13:02:37 2024 GMT
            Not After : Jun 16 13:02:37 2024 GMT
        Subject: CN=dac1ea3a50f09fb5de6aa1cfe4b31620ca11adc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:e4:ce:c4:c9:a5:f8:cb:69:65:48:82:1a:
                    6d:6c:7c:5d:b7:f5:09:3e:a6:84:44:82:48:9b:f8:
                    da:d4:93:ab:7c:bb:17:94:ed:73:79:66:d3:63:1c:
                    e7:ed:b6:e5:0a:b8:2e:39:37:f5:61:fa:ca:a0:f6:
                    61:42:7d:d8:91:9b:01:56:60:47:d0:60:f7:14:ae:
                    18:f3:83:81:6f:ab:4c:ac:47:e7:89:af:e7:d8:47:
                    0f:16:7e:46:72:1d:1f:38:4c:46:26:88:51:d7:f7:
                    5f:ac:78:3d:f5:24:14:9f:f8:d3:0b:68:01:9d:cd:
                    e2:61:d8:88:91:cf:a4:2c:8c:d5:0d:2c:d8:74:7f:
                    77:20:eb:06:96:83:f2:2e:60:a4:30:17:60:d4:79:
                    93:1b:fd:6d:18:15:7e:81:1e:b3:c3:39:4e:8d:eb:
                    2c:de:10:41:26:47:bd:35:6b:5b:df:3a:49:be:58:
                    c9:dc:10:c7:67:38:5b:b3:c8:80:5d:80:85:7f:53:
                    11:6d:9e:2b:71:ac:af:e8:1b:d9:8b:e4:ab:df:f4:
                    14:e9:49:3f:0f:d7:ea:42:a8:5c:b4:4e:8f:36:bd:
                    ee:08:2b:87:da:cc:c9:c9:ec:5c:e5:0c:b7:86:87:
                    a2:31:54:bd:70:f2:00:49:ed:4c:a9:4b:f3:a1:4d:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C1:EA:3A:50:F0:9F:B5:DE:6A:A1:CF:E4:B3:16:20:CA:11:AD:C1
            X509v3 Authority Key Identifier:
                keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:54:6c:82:7c:e1:18:62:52:d4:ed:a1:1f:05:36:ae:eb:
         6b:ca:03:d2:af:01:df:2d:1b:5a:e9:97:13:a6:7c:01:ab:10:
         bd:3b:5f:3b:37:b8:9f:24:f0:7e:5d:35:05:c0:02:bd:a7:c4:
         1a:8a:74:ec:77:98:be:83:b8:4a:af:79:13:19:d1:74:d5:ba:
         3a:71:5a:68:79:d4:3c:76:9d:22:a7:32:54:74:61:48:fe:7b:
         1d:ba:26:2a:13:e8:53:36:27:bc:97:70:1e:64:61:f4:35:35:
         a9:54:a6:c1:d9:2a:bf:cf:13:30:78:96:2e:1b:8e:43:95:24:
         c8:05:fa:f3:92:e2:41:e2:63:b1:5a:54:7b:af:fd:0e:58:46:
         35:d5:c4:61:2f:e8:41:b9:16:f4:d3:89:52:54:c1:d6:8d:d1:
         81:b1:3b:09:ce:aa:32:4c:4f:cf:37:84:73:c1:3c:65:74:b9:
         0b:de:b6:d4:e1:b4:46:0c:c4:ab:68:a4:1d:ec:32:5d:64:ee:
         bb:8f:13:5e:bb:45:ff:11:f1:ac:a3:b0:4d:61:48:cd:c6:47:
         55:1c:e2:cc:9d:19:9d:b5:59:43:03:5e:f7:a3:43:c3:be:5c:
         80:2c:0c:7a:49:ec:45:1e:a0:bb:35:5c:9f:6c:ce:6b:50:eb:
         4d:60:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:34:54 2024 by rpki-client on console-ams.rpki-client.org