Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File:                     5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier:          xSOJCgj0D3M1dQVLlsjEX3oXCVnNmYCxb+inWNjz1dM=
Subject key identifier:   75:91:5E:B4:C4:33:13:B3:7E:DB:FF:65:35:2C:94:39:E3:22:50:C0
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer:       /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial:       019357D2F1B27828EE9913388C0DBB948AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number:          02AE
Signing time:             Sat 23 Nov 2024 07:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:02 +0000
Files and hashes:         1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: X9oFF9JtVC2rEcWJVFlOvImkQvAlWJCznf070KP8IiI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:f1:b2:78:28:ee:99:13:38:8c:0d:bb:94:8a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
        Validity
            Not Before: Nov 23 07:01:02 2024 GMT
            Not After : Nov 24 07:01:02 2024 GMT
        Subject: CN=75915eb4c43313b37edbff65352c9439e32250c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:c6:05:d4:3b:63:40:4a:45:ce:c8:58:05:
                    d5:03:4a:aa:b1:04:fd:d2:9f:f6:ef:c6:e1:7c:ca:
                    b0:92:8e:11:94:2f:01:90:91:fd:5a:c3:6c:64:bf:
                    25:81:25:92:bb:59:cb:0e:43:5f:c6:1e:a3:f4:07:
                    81:84:a5:cd:2a:77:5f:09:06:01:45:fe:a3:77:7c:
                    35:76:5a:78:fd:14:5d:b1:ca:42:30:90:5b:87:ea:
                    f8:17:9c:c4:2e:7b:d9:3e:bb:9d:2c:eb:4c:ab:fb:
                    43:d2:da:27:54:90:ea:5d:33:a2:bd:69:f9:47:ab:
                    77:f8:93:01:f1:3a:89:18:43:00:1b:90:74:6d:a7:
                    a0:19:99:b8:ed:0b:13:e4:b4:2e:87:ea:0e:d0:42:
                    5d:94:52:66:b8:8c:97:1a:89:e3:3f:3d:8b:7a:13:
                    e4:8c:21:ee:10:f2:df:02:ee:75:1d:44:f9:00:4b:
                    ad:42:18:47:3e:d3:7c:18:0e:03:17:52:ce:85:0c:
                    a3:0a:63:56:ed:d7:87:93:8b:84:08:a4:15:ad:2d:
                    30:4d:63:46:99:31:2c:31:e4:dc:a9:ff:5a:42:fd:
                    9a:1c:88:81:cc:c0:60:c7:06:94:13:95:a4:53:97:
                    a4:b6:1a:63:41:4e:ae:17:f4:03:f3:3b:b9:06:2f:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:91:5E:B4:C4:33:13:B3:7E:DB:FF:65:35:2C:94:39:E3:22:50:C0
            X509v3 Authority Key Identifier:
                keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:a9:6a:fc:42:00:6b:92:55:45:db:03:c2:ba:04:02:ee:
         89:c4:58:1a:1a:e7:27:b8:8e:d9:6e:6d:3b:6a:d8:07:f6:52:
         4d:4c:f9:b3:0b:a7:ec:2b:9a:a7:83:dc:39:63:ab:ae:7f:b9:
         d8:84:41:7f:f2:09:be:7f:c1:eb:0b:86:51:4f:b8:a2:51:42:
         e6:0e:2a:ed:cc:a3:08:9f:23:0b:6e:5d:d4:f3:93:58:ff:78:
         d2:cc:8e:50:f1:db:75:8a:fb:f7:ec:02:75:dc:05:05:83:d1:
         9f:1e:c1:8f:bd:ca:42:cc:9c:ae:b5:2d:85:88:5b:d4:c0:cb:
         e5:73:ba:c5:63:9e:5c:a3:a2:b4:14:74:1b:17:99:05:b3:8f:
         9b:8b:04:c4:36:c4:be:83:f7:23:6e:47:23:5f:ab:d3:dc:7a:
         e2:2e:16:ba:d3:c9:3c:58:ed:68:28:bc:a0:03:ec:ca:12:4a:
         af:06:de:70:a6:95:f3:f9:8f:e6:3e:63:20:c7:57:86:4f:a4:
         7c:3a:43:9e:25:7d:e5:27:fc:75:4b:81:90:9a:bc:37:6b:46:
         e0:19:4a:5e:23:40:33:97:a0:6e:8a:db:f1:63:3a:89:1d:af:
         76:88:fe:aa:1e:94:cc:1f:26:4d:5e:da:66:cd:ae:77:65:2e:
         78:2d:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:44 2024 by rpki-client on console-fra.rpki-client.org