Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File:                     XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier:          /FySA9+wHt23WZ0/LVMij1pgwkqa+yzHiZk0Ym6k8hk=
Subject key identifier:   77:CD:43:B4:42:CF:9C:CA:5E:8D:35:BC:23:B5:DE:8D:7B:6B:7E:71
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer:       /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial:       018F8824874A867D132903B959261894095F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number:          52
Signing time:             Fri 17 May 2024 20:00:46 +0000
Manifest this update:     Fri 17 May 2024 20:00:46 +0000
Manifest next update:     Sat 18 May 2024 20:00:46 +0000
Files and hashes:         1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: zaMzepL2taewrvVN0DdZ4rdZI+IMf7xwAi5hQxjsDv8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:87:4a:86:7d:13:29:03:b9:59:26:18:94:09:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
        Validity
            Not Before: May 17 20:00:46 2024 GMT
            Not After : May 18 20:00:46 2024 GMT
        Subject: CN=77cd43b442cf9cca5e8d35bc23b5de8d7b6b7e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:a9:29:6f:f2:b5:65:6e:47:26:3f:77:f2:
                    ba:6f:94:5a:30:9a:32:89:07:aa:34:02:2c:d9:2a:
                    f7:17:7b:04:ce:2b:fa:31:7f:38:66:19:04:08:1c:
                    d3:f0:66:30:e5:a6:39:cd:0c:31:b1:6c:13:37:a5:
                    f0:49:b0:61:ff:6e:c2:69:16:6d:30:52:02:c2:31:
                    94:ca:a9:f5:83:22:a7:16:ef:10:e5:a1:8e:f3:25:
                    d1:0b:2e:f8:40:de:f2:d6:ad:a7:69:72:f2:f6:d1:
                    61:16:21:8c:16:1a:88:09:36:1f:4b:5d:b0:56:ee:
                    51:fa:01:19:42:be:a4:b8:30:e7:0e:89:a1:f2:15:
                    25:c6:38:81:3c:a2:36:a8:fd:21:2c:2e:ee:96:a0:
                    5a:31:06:fc:d5:44:84:3a:4a:df:1f:5d:55:11:b5:
                    6b:9c:07:6c:9a:97:b9:3e:01:20:69:20:d6:f5:9e:
                    6e:8c:58:d0:9b:bf:11:b3:30:d5:6d:c3:48:41:d6:
                    aa:82:13:51:18:bb:07:1a:91:39:06:f8:12:0e:55:
                    bc:2a:35:d2:68:ec:99:8a:ca:93:d7:a3:22:10:48:
                    ff:f2:28:23:45:24:b7:b3:ac:66:4e:d7:d2:9a:c1:
                    16:4f:ce:ff:9d:a2:2d:e6:6d:88:d6:ac:ad:92:27:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:43:B4:42:CF:9C:CA:5E:8D:35:BC:23:B5:DE:8D:7B:6B:7E:71
            X509v3 Authority Key Identifier:
                keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:62:30:e6:e6:72:fd:a5:ce:d8:fc:c7:01:b9:ab:5a:59:
         16:8b:b0:95:34:22:04:2d:76:e9:ee:b9:44:15:fe:af:6c:52:
         3a:1d:0a:e8:66:2b:7a:03:44:3e:9b:95:c6:8b:2a:f2:7a:81:
         68:ce:be:66:71:ec:a0:72:be:77:ed:de:12:79:60:01:19:c4:
         08:09:cd:02:9e:cf:b1:b9:87:21:ef:e6:58:5f:c9:0b:64:c5:
         83:94:52:44:2e:c5:2f:17:af:67:8d:ee:5f:0c:10:0c:63:cc:
         37:c0:61:31:32:5c:9c:94:2e:ec:44:fc:4e:7c:d8:5f:35:57:
         f7:5d:9b:9a:ec:49:a8:dc:16:95:65:6a:e1:d9:6e:c0:d7:b6:
         82:8f:65:ca:6c:d0:00:bd:a3:99:f4:57:25:fe:25:aa:d0:d4:
         5e:76:3e:4a:81:4b:3a:ed:6d:fb:3b:f1:9f:39:8a:d5:e3:e8:
         3c:fa:26:cc:12:ac:07:47:3b:15:c0:b0:f6:d5:c7:1c:9d:25:
         c3:62:87:29:40:cf:c0:5b:a7:d6:6a:00:c1:d0:01:d9:c5:ac:
         74:2a:57:80:59:1b:63:f4:2a:92:34:e5:9c:88:e3:19:88:93:
         f6:bc:9e:fe:7d:7c:a5:47:fc:ac:b8:63:a0:34:e5:0c:77:29:
         0b:71:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:11:15 2024 by rpki-client on console-ams.rpki-client.org