Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
File:                     5FudrqoDQlXqMxFPWLiMHD48fK8.mft (raw, json)
Hash identifier:          c0OWj8v2pYhrWiFGxV11jqo8eiEZZlYaFZ/kBtIVSUo=
Subject key identifier:   E1:17:37:56:57:57:93:F7:2B:86:78:D0:34:A1:19:7F:FE:B4:33:68
Authority key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Certificate issuer:       /CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Certificate serial:       01901DED86AFF47A7CDF7BE74F0D3D26BFAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
Manifest number:          0910
Signing time:             Sat 15 Jun 2024 22:03:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:44 +0000
Files and hashes:         1: 5FudrqoDQlXqMxFPWLiMHD48fK8.crl (hash: JURMYU9V9jEwFF3Rm6n3yRgXXnKKWGmFhV4QiI+2Khg=)
                          2: jdR3XAe03YrfNCLEGzgN8Ph3YX4.roa (hash: zPn9My7kljcm4wOZvIBW1hCUzbFiqqgnzEi7EcmUEXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:86:af:f4:7a:7c:df:7b:e7:4f:0d:3d:26:bf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
        Validity
            Not Before: Jun 15 22:03:44 2024 GMT
            Not After : Jun 16 22:03:44 2024 GMT
        Subject: CN=e1173756575793f72b8678d034a1197ffeb43368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:c3:7c:1a:59:9d:fe:4e:b2:9b:f0:a8:05:
                    9d:db:09:89:a4:cd:db:e3:8d:11:03:96:f0:67:21:
                    a6:a2:b3:53:5b:ab:00:43:36:ce:14:ee:76:3c:fb:
                    69:03:c1:cb:07:d5:e7:2c:a5:82:e7:cd:9b:ee:db:
                    94:fe:18:f5:cc:5c:bc:85:06:bb:f5:6a:f6:d0:dd:
                    71:75:d7:45:56:c0:2d:28:dc:6b:08:b1:e6:61:0e:
                    4e:23:08:fb:9e:9e:c6:24:5e:e9:ba:e2:c1:e8:6d:
                    2b:cb:b6:75:11:48:c8:23:3a:55:77:4a:54:c5:3c:
                    54:a6:95:42:88:3b:ac:f2:a7:d4:52:23:d0:54:62:
                    69:2b:a9:c6:10:9c:0b:e4:c5:cf:f6:a1:0f:95:7e:
                    a5:06:fd:2d:69:1c:20:60:57:5b:54:d0:37:24:26:
                    7c:3a:37:48:65:04:3c:12:6b:be:e9:48:c7:cc:ef:
                    7e:77:ac:50:6e:f4:f0:14:cd:c8:a4:15:d1:bc:f6:
                    ae:58:3c:12:2f:7c:3d:02:cf:32:5b:93:e6:06:39:
                    9f:17:ec:4d:01:58:00:d3:62:9b:bd:f1:08:66:83:
                    cf:4a:d4:b2:4f:5d:df:07:a6:cb:b6:5e:4b:f5:d8:
                    ab:d5:50:23:1c:7f:9e:af:16:d9:d6:ee:1b:b8:06:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:37:56:57:57:93:F7:2B:86:78:D0:34:A1:19:7F:FE:B4:33:68
            X509v3 Authority Key Identifier:
                keyid:E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ff:8f:51:4b:c5:68:bc:ab:78:fe:90:ff:70:e9:60:00:4b:
         fe:92:28:80:5d:6c:2f:37:94:db:f7:bf:9d:35:d4:1a:0b:72:
         5f:e1:20:1d:97:cd:55:6b:7f:09:c3:08:c0:54:de:8c:91:2a:
         44:fa:81:56:e3:90:f5:08:ef:1b:41:d0:00:7d:f7:5d:4f:ec:
         61:2d:0e:3b:45:63:5c:c8:27:61:2c:45:ad:f2:c3:aa:4e:22:
         41:18:aa:a2:ce:56:d8:a1:63:34:3e:27:dc:db:f0:57:a3:00:
         55:b4:fe:8f:21:98:4e:d0:87:fb:fd:b6:ad:72:9b:2b:48:f2:
         56:da:52:7f:35:94:41:fd:a2:07:c0:c6:5e:f0:f3:d0:09:e7:
         76:d7:22:7a:50:32:bb:fc:94:c8:bb:f9:b1:0f:99:64:c2:5b:
         cb:93:5f:dd:72:6b:ea:cd:86:ab:c6:fa:05:7a:d8:6a:f0:ec:
         5c:d2:6f:bf:a5:c6:28:e6:d2:a0:60:0d:7d:ef:4a:c8:f3:39:
         04:bd:b4:d2:90:31:74:50:6f:3e:d1:d3:47:b5:7c:c2:f1:52:
         a4:44:85:fd:a2:61:b3:a3:22:81:f6:0f:e2:ec:56:3e:ab:3d:
         92:ac:d7:b8:cf:83:e2:7c:53:c3:6a:ed:41:70:a9:78:fc:14:
         90:f7:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:18 2024 by rpki-client on console-fra.rpki-client.org