Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
File:                     5SBEb3n_wtfDqe80DOneJXI6cZo.mft (raw, json)
Hash identifier:          9N39GGeRW8fKdOVpu+zw+mXXtQeyociGwVHg5VS9Qog=
Subject key identifier:   18:2C:39:9B:F8:C9:EC:C1:D2:71:40:1F:41:A5:EF:C5:CD:F7:4D:28
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Certificate issuer:       /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial:       0193568B30727661EBDBDD0C73205D42C72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
Manifest number:          09E7
Signing time:             Sat 23 Nov 2024 01:03:02 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:02 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:02 +0000
Files and hashes:         1: 5SBEb3n_wtfDqe80DOneJXI6cZo.crl (hash: MDTmRfUnERh0qyra6zp1X8VYaHN2PcTuR7Gv7lMsbrY=)
                          2: ek1PR8UiUCG8zFP2r0CR1ZgqfWg.roa (hash: 4JdpJPKqvUIvqDhssar3BSQyOGtUyhPjNjARRbVe5iA=)
                          3: kYmtXfUc5PRc1gr0SUmPa32oWV4.roa (hash: tEktmtrl/M5ciELGgyjiAg4gHGsV1sLw+1RcWnhouP0=)
                          4: stmMBbBNBdy4IND9tdb1cI5mg-s.roa (hash: Pu7nhqa7FM87hST33cNo6WLmzpisS1O7CqJ3cYfjQ8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:30:72:76:61:eb:db:dd:0c:73:20:5d:42:c7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
        Validity
            Not Before: Nov 23 01:03:02 2024 GMT
            Not After : Nov 24 01:03:02 2024 GMT
        Subject: CN=182c399bf8c9ecc1d271401f41a5efc5cdf74d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:96:d7:17:db:51:5f:e5:c0:49:b8:5b:ac:
                    98:e3:ae:c7:a2:79:e9:8d:ee:bf:5b:2e:12:a2:b4:
                    67:6f:02:c9:64:c3:41:ca:b5:da:29:9f:7d:ed:ab:
                    98:96:5a:d2:51:17:3e:34:9f:29:58:88:a2:e1:be:
                    91:18:2c:de:7a:27:7c:0b:18:e8:03:fa:10:3d:4f:
                    f5:fa:f2:ad:53:ae:f0:63:83:7a:c8:2b:ca:78:41:
                    d2:5e:4b:c3:01:bd:11:59:6e:a7:a7:59:6e:21:34:
                    85:99:8b:77:9f:06:52:65:19:59:08:ca:ee:94:7b:
                    b7:f0:2d:cf:ea:63:a6:f7:01:48:42:36:68:53:ea:
                    97:90:c0:c7:3b:3b:24:3e:35:05:41:6e:89:3b:22:
                    0d:21:a0:8b:41:39:af:13:21:45:c0:f5:e3:9a:6a:
                    7d:5d:33:68:15:bb:f4:47:5b:5f:a7:67:c2:3b:20:
                    ca:89:4e:9c:10:d9:19:12:36:2a:1e:73:90:09:17:
                    e2:c6:5a:e9:ef:03:6c:ca:f4:32:ce:cd:6f:00:1d:
                    56:48:92:28:db:ad:e1:f7:8f:c3:73:7d:53:3f:a5:
                    a8:a7:10:e1:f9:c2:77:19:b6:e8:04:85:45:24:86:
                    a5:2f:aa:97:39:b9:3f:21:32:6f:b4:7d:68:c8:80:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2C:39:9B:F8:C9:EC:C1:D2:71:40:1F:41:A5:EF:C5:CD:F7:4D:28
            X509v3 Authority Key Identifier:
                keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:83:58:88:1a:b4:55:2a:06:89:b4:5c:76:58:dd:bb:44:
         05:76:4b:37:20:07:4c:1b:0a:92:44:ed:16:29:33:85:45:e7:
         db:b6:b6:80:25:99:b9:78:d1:a1:9d:95:d0:86:67:9e:6a:f5:
         67:d2:76:35:f9:49:aa:b0:cf:8d:5b:17:c9:04:a5:ef:13:7b:
         be:2d:8e:a3:e8:01:cd:33:c4:6c:69:d3:a0:45:bb:e1:69:26:
         ed:dc:37:eb:c3:04:44:8f:69:40:40:24:9c:dd:fd:ca:c1:55:
         fe:52:9e:fd:42:2c:1e:92:f4:9b:c3:50:9d:5a:ce:49:f6:06:
         2e:63:a7:2b:0a:85:5b:67:fa:a5:27:a3:01:14:30:15:b0:a7:
         0b:5b:22:57:6b:5c:15:3b:e1:1b:2b:43:2c:de:e1:39:16:95:
         54:0d:bf:a7:a7:e6:28:c6:1a:36:78:37:ae:2b:11:17:cd:6c:
         47:b5:40:3c:c1:2d:d8:e6:3f:ff:ba:41:a0:88:d4:3c:cc:b6:
         81:14:50:76:a4:a9:a4:6b:7b:00:a6:ca:fb:3b:1e:06:fb:00:
         55:1a:74:eb:31:e0:38:1a:c4:6d:fe:22:67:30:46:d8:fe:56:
         94:73:49:60:97:72:a2:2a:e3:be:6f:11:41:51:66:f1:69:30:
         3f:f7:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:53 2024 by rpki-client on console-ams.rpki-client.org