Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
File:                     l5FbqA0-1wRSRoFIinK-mR-mcNw.mft (raw, json)
Hash identifier:          cfher6bvfTHbmJscV5xSAde9OH1zmDE7KQv8JDCf/uo=
Subject key identifier:   CD:AD:9B:62:5A:40:A0:5C:C6:CB:CC:C6:94:3A:97:14:49:E5:3B:3A
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Certificate issuer:       /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial:       018F8748F89B510A9D6BAB527FD3249515B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
Manifest number:          6A
Signing time:             Fri 17 May 2024 16:00:57 +0000
Manifest this update:     Fri 17 May 2024 16:00:57 +0000
Manifest next update:     Sat 18 May 2024 16:00:57 +0000
Files and hashes:         1: YNWN0krYnzvZQIh9DTTRKRPBhJc.roa (hash: 52YTE101qAZNsroNR1agKOPOnBrx9nGlTBXP+kBWsZY=)
                          2: l5FbqA0-1wRSRoFIinK-mR-mcNw.crl (hash: JgCXARTmfvZDd0WMRDYNQYwZ16AJuwkOjZ9wWrjMZnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f8:9b:51:0a:9d:6b:ab:52:7f:d3:24:95:15:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
        Validity
            Not Before: May 17 16:00:57 2024 GMT
            Not After : May 18 16:00:57 2024 GMT
        Subject: CN=cdad9b625a40a05cc6cbccc6943a971449e53b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:a2:2b:d2:14:41:bd:ca:fd:71:e4:85:33:
                    e3:d3:76:58:84:7b:b2:ab:41:9c:bb:d7:c7:91:77:
                    bd:3b:1d:6b:17:b1:cc:d2:b0:c9:f8:05:06:b9:7a:
                    11:12:d1:54:3b:1a:b8:d4:1d:a7:d7:33:82:95:24:
                    99:2c:14:61:b8:d1:96:e3:fa:f8:0e:cd:97:c3:4b:
                    0f:f6:64:b2:3a:d4:bc:33:81:61:92:dc:d5:3c:2c:
                    96:0d:6d:df:fb:8b:09:cf:1c:75:81:fe:e0:3c:86:
                    e5:34:4d:8e:d8:72:5c:f3:09:c0:9a:66:9b:4c:9d:
                    da:6d:14:e3:5b:bb:09:5f:9f:89:5f:1b:73:86:48:
                    8e:79:39:51:25:5d:ef:57:f3:84:6d:48:cb:e0:78:
                    c5:d0:80:03:e9:8d:c7:bb:1b:04:1b:13:2f:2b:b2:
                    cd:71:2c:bc:90:a4:d2:ba:43:99:fb:dd:f2:85:7e:
                    f5:2d:e3:48:46:c4:25:48:72:13:f1:47:92:81:ac:
                    74:eb:ca:a1:56:4e:df:e0:5d:8f:3b:bf:5e:8f:95:
                    68:e7:d7:c3:59:c3:9a:a0:cf:59:e8:bf:d4:89:0b:
                    e5:d4:d8:16:c7:87:0a:57:08:6a:a2:e5:a3:ce:7b:
                    a0:24:e0:dc:a8:13:ee:c5:de:9e:4f:f1:14:53:cf:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AD:9B:62:5A:40:A0:5C:C6:CB:CC:C6:94:3A:97:14:49:E5:3B:3A
            X509v3 Authority Key Identifier:
                keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:cc:77:2c:61:fb:0e:6d:89:22:b4:9b:65:84:9b:9f:4b:
         b5:ca:5a:d0:70:d8:94:74:00:cc:44:ab:22:14:8a:32:29:ae:
         53:cd:aa:1a:eb:68:54:0c:3e:a6:ae:1f:37:18:fb:36:79:7f:
         2b:86:b8:ad:e3:99:6d:31:6f:9c:6c:d6:03:db:f4:36:45:80:
         e9:37:f2:5a:2c:cc:21:a2:1b:f4:a6:fc:d3:be:da:c5:f3:c8:
         61:de:5e:d7:90:9b:0f:30:40:29:55:97:be:ae:29:7a:95:98:
         fe:ca:6c:17:f5:ef:ef:8b:ca:ea:a6:ec:e8:fd:f0:59:e5:05:
         08:10:57:fe:33:6e:27:17:2f:e2:45:54:6a:e9:a3:94:03:aa:
         5b:a8:5d:48:b6:54:ee:56:60:5a:d7:37:a0:f9:d4:2f:c7:94:
         6b:c2:b1:14:0a:b4:5d:68:6c:da:0b:12:ec:13:f9:98:f6:9f:
         ae:2d:c5:8e:83:5a:fe:28:2a:2e:5c:92:d4:02:b9:db:c6:79:
         2d:d5:06:60:57:3b:e9:8c:eb:25:11:6a:1c:d6:63:f0:dd:e0:
         ee:2f:73:be:0f:90:4c:6e:42:90:8d:5b:ee:8a:ee:04:2e:62:
         68:10:b5:0c:f5:83:21:35:25:38:1b:d2:47:34:fe:39:27:82:
         02:26:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:17 2024 by rpki-client on console-fra.rpki-client.org