Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File:                     5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier:          +xVFImFjtBG+cx5SpRvE++rv97sa3ay1mDHBgTGcRho=
Subject key identifier:   56:5E:90:6C:4D:1D:9D:41:B1:9F:C3:7C:8F:B5:5E:64:B9:58:01:95
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer:       /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial:       018F215C0DBE7B99EDD94278823003FCE622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number:          07AA
Signing time:             Sat 27 Apr 2024 21:00:32 +0000
Manifest this update:     Sat 27 Apr 2024 21:00:32 +0000
Manifest next update:     Sun 28 Apr 2024 21:00:32 +0000
Files and hashes:         1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: pR1blI8qnOmFOKGaUOdwsn+dkL+Uhkytei1mHAnqmlE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 15:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:5c:0d:be:7b:99:ed:d9:42:78:82:30:03:fc:e6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
        Validity
            Not Before: Apr 27 21:00:32 2024 GMT
            Not After : Apr 28 21:00:32 2024 GMT
        Subject: CN=565e906c4d1d9d41b19fc37c8fb55e64b9580195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:56:40:9d:00:05:86:71:ce:e1:c3:20:00:
                    04:4c:40:22:d4:c8:f6:52:14:89:84:0e:47:7a:ac:
                    fd:3a:72:e8:ae:03:94:fd:32:0c:7f:32:1c:f1:0a:
                    c6:36:23:ff:7b:4d:01:5a:bf:41:7f:a7:81:7d:20:
                    4b:51:22:81:a6:d6:c1:25:5c:06:3d:b8:f9:13:f4:
                    a1:aa:21:c1:8f:dd:40:5c:8d:5a:75:a0:47:17:5a:
                    e2:e5:68:c3:dd:3a:b0:73:90:cd:10:34:53:15:cd:
                    ac:b3:76:60:a3:22:4a:0d:69:cc:f2:9a:00:fc:3b:
                    01:a0:80:3b:53:bd:8f:2e:6d:5d:26:19:93:5d:53:
                    73:b0:bd:cf:79:54:ed:4a:c9:68:f8:9f:05:84:6c:
                    47:7f:80:bd:f9:23:2a:6c:94:0e:85:e2:17:33:71:
                    be:76:6b:ca:df:cf:62:46:ec:ef:62:db:fd:2f:67:
                    d8:02:7f:4c:4d:b4:95:a7:9d:ad:7c:6d:1e:58:e2:
                    fe:58:65:6e:7b:12:71:f0:0e:75:61:a2:30:a5:88:
                    07:0a:fe:7b:ef:7e:87:2f:e2:72:74:63:25:87:74:
                    d1:07:1a:d5:61:41:56:ee:28:8e:c3:0b:5e:3f:b8:
                    96:e3:78:b2:b5:3a:4c:35:eb:7e:9a:31:30:60:da:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:90:6C:4D:1D:9D:41:B1:9F:C3:7C:8F:B5:5E:64:B9:58:01:95
            X509v3 Authority Key Identifier:
                keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:d1:18:ca:98:96:76:24:dd:e8:69:25:ab:bc:a5:00:ec:
         34:06:b9:11:ff:27:ef:7c:32:07:34:dd:3a:67:28:c3:67:63:
         e2:4e:41:06:ba:75:87:58:2b:f7:ab:e3:90:69:16:e1:5b:06:
         bf:e7:b2:db:57:36:99:aa:bf:9d:21:8a:ee:2d:24:79:e2:c8:
         ec:ba:83:53:f3:06:85:d1:a4:16:2d:af:f8:93:e0:64:8d:db:
         94:86:94:b4:49:e4:24:d5:6d:14:e4:65:61:d1:a0:53:01:d4:
         0c:58:9a:ce:80:3a:6a:42:37:5f:c8:73:9d:88:a4:6a:cc:6a:
         09:84:b1:d6:8d:47:0c:1d:58:0d:9f:cf:8f:ae:e2:c7:47:99:
         22:71:43:19:07:0b:37:bc:ae:9a:95:50:a6:a1:e5:ee:d8:7b:
         40:95:a7:45:27:b7:a4:3d:20:77:99:f8:20:b2:4b:2a:27:8f:
         97:34:ce:66:da:eb:8d:b1:a2:5c:be:6c:ce:91:24:b6:7a:93:
         74:1f:48:21:43:bb:54:39:55:f0:e7:77:b8:2f:31:f1:19:ed:
         2e:13:42:e0:e5:89:22:76:08:9a:dd:9e:4b:88:75:a5:6e:7b:
         a0:e9:c9:a4:64:78:ca:18:cd:05:eb:7b:f9:fc:01:32:dc:e3:
         4c:5f:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:44:52 2024 by rpki-client on console-ams.rpki-client.org