Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File:                     5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier:          vqoe8ijkWVnbTxJHzQ/UZSAERWMANDmGxIg4ZZFq/Og=
Subject key identifier:   DA:87:28:10:B0:AA:DA:CC:DD:FE:80:8A:D4:FF:A7:B5:54:4F:B8:C2
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer:       /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial:       01901DEB255FEB951A54C92C110BD257096C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number:          050D
Signing time:             Sat 15 Jun 2024 22:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:08 +0000
Files and hashes:         1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: 4uwSVwTh8boq9hTxNsVH4Fa+hfifD7V8jdNfLdd2vq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:25:5f:eb:95:1a:54:c9:2c:11:0b:d2:57:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
        Validity
            Not Before: Jun 15 22:01:08 2024 GMT
            Not After : Jun 16 22:01:08 2024 GMT
        Subject: CN=da872810b0aadaccddfe808ad4ffa7b5544fb8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:52:59:06:bb:f1:f2:da:d4:8b:92:10:02:
                    9d:61:54:8d:02:f7:18:db:23:95:65:db:c3:66:1d:
                    12:2b:1b:64:e0:21:8e:9d:03:73:d5:6b:bc:e5:f0:
                    72:42:5c:cd:94:01:35:48:fd:8d:33:89:0f:1b:52:
                    bf:b0:9a:70:84:54:31:4c:53:d0:73:24:40:05:0a:
                    20:26:36:d0:29:e2:6a:78:27:c1:fb:75:9c:82:43:
                    bd:d2:e5:b8:aa:01:cf:07:c7:7e:f7:50:f3:a3:a7:
                    32:fe:e2:c2:c8:ca:04:c5:18:0e:bd:55:3f:78:c0:
                    09:7d:15:08:1e:e4:be:98:54:ff:8a:e8:8a:ac:92:
                    96:8c:0c:39:d3:2a:1a:6e:db:4c:10:01:85:e5:39:
                    60:6b:68:db:6c:f2:e5:a8:9a:92:2f:3e:dd:a4:39:
                    c3:d2:b9:fe:30:f2:62:00:83:30:eb:bd:0c:3a:c5:
                    10:75:f2:2f:d2:92:dd:d0:3a:50:a4:82:5b:c6:f4:
                    fa:f9:75:82:5f:3b:a3:1e:ac:0f:39:ab:28:3c:e6:
                    d1:6b:c9:6b:91:fc:f3:66:4e:73:fd:8f:4f:bd:4a:
                    38:0c:83:42:fc:ba:69:99:ca:42:ef:55:82:e3:48:
                    fd:07:3a:ce:39:f1:40:35:47:27:89:13:9b:7f:f1:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:28:10:B0:AA:DA:CC:DD:FE:80:8A:D4:FF:A7:B5:54:4F:B8:C2
            X509v3 Authority Key Identifier:
                keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:f9:75:c0:32:fe:9b:30:7b:be:21:3e:52:0c:5a:8b:37:2c:
         cb:e2:3e:11:74:18:c6:49:cf:fa:2d:a2:4e:bc:07:4f:62:3d:
         ac:ec:5b:95:9c:e9:e2:75:08:32:3d:38:09:ae:2e:34:fc:c2:
         18:c1:ef:7b:d4:d9:e3:f7:88:cd:89:ed:23:11:7f:52:18:79:
         27:f1:7c:20:7d:14:af:05:f9:a4:b6:e8:a8:10:b6:2e:aa:91:
         1f:d7:37:57:99:d9:88:51:ec:3e:0d:a9:07:41:b1:01:c0:4f:
         60:75:b9:e1:92:f5:b0:3a:03:6c:d6:63:72:3e:6b:0f:9b:61:
         d1:80:14:31:bd:08:62:13:b9:f2:2c:6e:a0:1d:7a:f4:8f:72:
         43:9d:b0:9a:fc:77:c1:4c:a8:b2:bd:e9:bb:ea:a4:87:7c:29:
         75:3f:ac:bc:f3:c2:b5:0d:20:75:8d:95:21:0c:7b:dc:19:61:
         f8:2c:1f:55:6a:1b:ea:57:0a:b1:5d:a2:3a:9c:ed:5d:19:98:
         e6:79:97:4f:e9:bd:d0:17:b1:6b:21:ed:fc:63:eb:54:b3:f4:
         fc:6b:43:78:e1:a8:35:ef:48:19:91:54:e9:21:d4:4e:64:1f:
         5c:ba:78:f8:e0:b8:70:bc:61:1b:4b:39:23:99:15:44:9f:4c:
         5e:c7:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:04:34 2024 by rpki-client on console-ams.rpki-client.org