Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/39d10d-f795-4952-9091-ebbaaf58a8c2/1/5_zx-uJUrmilZvqzUqFlzVyjQfA.mft
File:                     5_zx-uJUrmilZvqzUqFlzVyjQfA.mft (raw, json)
Hash identifier:          c+yPYyswi7rSyudJcYWQpSm7Q9ChM/Fll4LjKlUkdQs=
Subject key identifier:   07:D1:51:63:46:9E:B4:4D:CB:4B:A6:E7:C1:F9:91:EA:F8:E3:B4:0A
Authority key identifier: E7:FC:F1:FA:E2:54:AE:68:A5:66:FA:B3:52:A1:65:CD:5C:A3:41:F0
Certificate issuer:       /CN=e7fcf1fae254ae68a566fab352a165cd5ca341f0
Certificate serial:       018F3DE8FBDD46A57646181131BCA72DDCD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_zx-uJUrmilZvqzUqFlzVyjQfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/39d10d-f795-4952-9091-ebbaaf58a8c2/1/5_zx-uJUrmilZvqzUqFlzVyjQfA.mft
Manifest number:          0878
Signing time:             Fri 03 May 2024 10:03:49 +0000
Manifest this update:     Fri 03 May 2024 10:03:49 +0000
Manifest next update:     Sat 04 May 2024 10:03:49 +0000
Files and hashes:         1: 5_zx-uJUrmilZvqzUqFlzVyjQfA.crl (hash: +VtMCw/bu59AdZMDCtQZXpt9hsDcNSDnJtZ16+7/dak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/39d10d-f795-4952-9091-ebbaaf58a8c2/1/5_zx-uJUrmilZvqzUqFlzVyjQfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/39d10d-f795-4952-9091-ebbaaf58a8c2/1/5_zx-uJUrmilZvqzUqFlzVyjQfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_zx-uJUrmilZvqzUqFlzVyjQfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e8:fb:dd:46:a5:76:46:18:11:31:bc:a7:2d:dc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fcf1fae254ae68a566fab352a165cd5ca341f0
        Validity
            Not Before: May  3 10:03:49 2024 GMT
            Not After : May  4 10:03:49 2024 GMT
        Subject: CN=07d15163469eb44dcb4ba6e7c1f991eaf8e3b40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:d1:99:55:1e:e9:64:1b:60:8f:85:79:f1:
                    9d:5a:74:55:60:60:93:b9:8d:50:6b:cd:98:2d:e9:
                    81:a3:d0:47:df:b9:4e:d6:cf:64:98:43:fa:14:2e:
                    2b:7c:74:5e:d2:8c:3d:6f:79:13:a8:5b:93:b6:61:
                    e0:25:7a:c0:62:4d:65:58:fc:e7:85:5b:b4:11:05:
                    53:df:03:4c:c8:19:77:44:9d:57:8b:f6:22:9e:e5:
                    36:3c:f1:6d:c5:16:62:07:30:83:48:80:e4:f9:53:
                    cd:e8:df:79:53:ff:6a:28:b7:04:9a:28:79:72:9a:
                    15:69:62:11:ec:21:7f:f2:7e:c0:7d:c9:5e:53:f9:
                    d9:46:b8:0e:48:58:ce:51:ba:4f:2b:66:f4:ab:5c:
                    c9:bc:8b:11:19:41:d2:33:ec:2c:9c:6d:8d:ad:b4:
                    97:fd:91:35:9f:12:ba:ad:5b:f5:a4:29:85:50:9a:
                    2d:37:b6:75:9a:e8:a5:5a:ee:db:53:7b:9b:f5:14:
                    8d:e4:f6:a8:9e:ca:30:77:f4:71:51:af:c1:3f:a0:
                    b9:f3:fe:89:d9:f7:1d:96:76:ce:6d:61:0e:b3:81:
                    13:24:25:c8:e8:e9:af:54:c2:ce:b6:93:8d:38:ef:
                    15:4a:da:4f:11:f6:21:e5:14:3b:ea:83:64:95:5e:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D1:51:63:46:9E:B4:4D:CB:4B:A6:E7:C1:F9:91:EA:F8:E3:B4:0A
            X509v3 Authority Key Identifier:
                keyid:E7:FC:F1:FA:E2:54:AE:68:A5:66:FA:B3:52:A1:65:CD:5C:A3:41:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_zx-uJUrmilZvqzUqFlzVyjQfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/39d10d-f795-4952-9091-ebbaaf58a8c2/1/5_zx-uJUrmilZvqzUqFlzVyjQfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/39d10d-f795-4952-9091-ebbaaf58a8c2/1/5_zx-uJUrmilZvqzUqFlzVyjQfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:4c:52:50:8e:cf:93:b2:ec:02:48:07:67:a7:69:64:00:78:
         90:06:f0:11:3c:b3:20:8b:db:87:6f:cd:65:64:fa:b5:bd:6c:
         48:b3:a8:37:0e:52:43:92:e6:86:ce:75:e0:f1:cf:d7:d3:d5:
         65:4e:50:17:ed:45:28:8d:db:dd:1a:b7:7c:cb:47:40:d1:07:
         d3:17:44:8a:63:93:de:04:64:3f:07:64:67:58:84:1e:2f:5e:
         7b:2a:d7:38:ba:c6:2b:2b:7b:1e:77:6b:96:ca:79:c0:a7:68:
         a7:3a:ba:89:d1:0f:52:7a:26:a5:91:e7:f9:66:bb:99:4b:3b:
         60:85:0a:ee:f8:6b:d6:29:a0:b3:d0:d4:9b:2f:0c:4b:b3:3d:
         ce:e8:7a:43:0d:45:7c:59:f9:77:9c:b2:36:ec:76:06:98:f3:
         90:3a:66:3d:a1:15:fe:93:0e:b8:85:c3:ab:ee:57:42:0b:d1:
         e0:02:a9:9f:cc:68:3c:30:b6:41:46:b7:da:0a:05:4a:7e:70:
         5e:f3:3b:a3:e0:4a:68:3c:f7:9c:17:d8:50:04:6f:05:a7:18:
         80:ea:0c:67:71:c5:53:50:b4:50:fa:7a:bf:2d:85:0e:10:e7:
         f0:2e:95:8c:b7:de:bc:6d:83:22:35:21:4a:7c:73:c9:d8:81:
         7e:e1:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:20:53 2024 by rpki-client on console-fra.rpki-client.org