Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File:                     5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier:          THf4F3J2Mpke8bMDWYCmYL7HOww+oDb6zTTYGW1wOUA=
Subject key identifier:   07:7A:69:10:1C:1F:BC:A7:A5:7C:46:37:DE:29:4F:61:05:D4:C7:3D
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer:       /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial:       018F546E2E3DC5917690D29ED418C9E66D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number:          0680
Signing time:             Tue 07 May 2024 19:00:57 +0000
Manifest this update:     Tue 07 May 2024 19:00:57 +0000
Manifest next update:     Wed 08 May 2024 19:00:57 +0000
Files and hashes:         1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: YV1WHYwE0xwwLUlAHsR5iqm4Z1pAwgb9eUZWeD/O9J4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:2e:3d:c5:91:76:90:d2:9e:d4:18:c9:e6:6d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
        Validity
            Not Before: May  7 19:00:57 2024 GMT
            Not After : May  8 19:00:57 2024 GMT
        Subject: CN=077a69101c1fbca7a57c4637de294f6105d4c73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:05:77:be:2c:50:92:38:aa:1f:c6:0a:4f:
                    6a:9c:16:0c:e9:ea:87:59:99:1a:03:d9:45:ff:33:
                    5d:68:86:6c:7d:da:41:1c:1a:5c:6c:22:83:88:3b:
                    f6:f9:de:90:35:45:6d:a4:9e:8b:f2:2e:7b:7e:56:
                    26:db:1f:7f:44:ba:c1:da:4e:44:a6:fb:3e:91:71:
                    27:88:8a:23:6b:78:0f:c2:14:0d:d0:84:fa:22:59:
                    83:47:d0:ba:53:bb:6a:a3:af:8a:82:54:ba:52:7f:
                    b7:5f:90:fc:de:f0:28:c9:30:3f:86:fc:6e:d3:ad:
                    37:02:ef:a3:b7:a0:9f:98:70:9c:be:da:5c:ed:e1:
                    21:7e:e8:b8:de:1b:e9:51:62:ff:58:39:1e:99:84:
                    6f:e1:b2:92:8b:48:a1:a9:53:7e:1b:d0:14:3a:54:
                    5a:80:77:5a:98:85:0a:2f:f2:19:bf:5f:8d:00:7f:
                    f4:4d:86:fc:29:a7:43:69:a8:23:04:26:d7:53:a1:
                    a9:95:e7:bc:c4:7e:45:55:bf:f1:5d:7b:22:02:98:
                    9b:f2:4d:52:f0:fb:34:4f:85:59:60:8e:a4:7e:0a:
                    96:f6:22:da:b8:35:22:b3:f1:24:7b:e9:0c:cb:cd:
                    fa:d2:56:77:02:aa:59:0c:4e:ba:9f:b3:4a:fa:cd:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7A:69:10:1C:1F:BC:A7:A5:7C:46:37:DE:29:4F:61:05:D4:C7:3D
            X509v3 Authority Key Identifier:
                keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:f5:3f:6f:0d:ff:e5:17:9f:2c:7f:8a:fc:01:32:37:2c:
         f6:b4:20:19:c1:6a:b4:17:4c:bb:43:48:44:c9:e3:33:38:e3:
         bd:b9:5c:30:2d:7d:0c:b2:cb:aa:89:e5:79:8c:a5:52:02:af:
         89:98:59:18:1a:23:d4:07:51:a1:d6:b9:d2:62:fb:53:6c:cd:
         57:38:49:91:e7:a5:5f:bc:e9:de:6e:48:69:bf:bb:4c:9f:e0:
         b6:3f:86:18:dd:30:9e:3f:b8:e6:92:04:3d:e1:9f:48:28:23:
         28:28:95:23:53:0b:82:60:a5:3f:95:df:f3:fc:8c:df:8c:f2:
         e3:3f:61:8e:a0:2a:52:33:f8:16:69:52:ef:e1:7c:5a:98:bf:
         a4:ac:43:e8:2d:e1:13:77:d9:ec:48:b8:b9:06:2e:45:20:4f:
         fa:23:56:0f:52:56:84:e8:3e:ac:0a:32:9c:3a:0a:91:31:b5:
         fd:9d:31:ee:82:07:0b:13:2e:ad:b9:cb:38:4e:bb:2c:40:65:
         88:02:e7:49:37:34:c1:49:ae:e8:cd:28:bb:5c:e5:49:88:48:
         b8:12:35:74:c0:01:88:5c:22:34:0a:6b:0b:b1:91:b1:07:b1:
         56:37:0f:75:19:9e:43:ec:2a:c3:c8:f4:59:65:f6:a0:4c:f0:
         b0:9d:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:53:26 2024 by rpki-client on console-fra.rpki-client.org