Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File:                     KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier:          mFSAgJkeTSodCPBmHoqhDYkaXqOB53mpExSMEYCKPac=
Subject key identifier:   77:2B:C6:68:AA:1C:37:B8:44:D6:0F:CC:15:73:6F:66:38:E1:9F:BD
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer:       /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial:       018F87B650396A6D7C265E62481BB085E5A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number:          0775
Signing time:             Fri 17 May 2024 18:00:23 +0000
Manifest this update:     Fri 17 May 2024 18:00:23 +0000
Manifest next update:     Sat 18 May 2024 18:00:23 +0000
Files and hashes:         1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: 7VRHTEZn8F7E+wFuNL2/lJQvk9A7BPb1vk1jAlF+WEA=)
                          2: YPQU-3qwY6DOW_4HT7svDHCbZMA.roa (hash: G/hTKQ5Kk/0ApVunFkNQwIid1LB2D3Zy5iMYI0GC/QQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:50:39:6a:6d:7c:26:5e:62:48:1b:b0:85:e5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
        Validity
            Not Before: May 17 18:00:23 2024 GMT
            Not After : May 18 18:00:23 2024 GMT
        Subject: CN=772bc668aa1c37b844d60fcc15736f6638e19fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0c:12:55:d7:93:d3:3d:8c:4e:46:4a:29:fa:
                    cc:24:95:03:43:de:0c:bb:d0:38:15:ec:28:45:28:
                    c0:ee:0c:0f:06:e8:f3:61:d8:90:1c:72:b5:0b:e3:
                    de:e8:60:20:ef:0c:1b:42:ea:22:68:94:05:de:cc:
                    a9:de:ac:09:fc:96:43:b5:6d:5a:55:0c:a5:c4:5b:
                    bc:90:0a:1b:b6:ee:10:ef:aa:e8:5f:c8:97:0a:54:
                    8d:51:e0:ca:82:58:36:ab:eb:7c:ab:be:0d:e4:a0:
                    01:6c:d6:79:24:db:5d:75:de:2c:45:b9:62:58:cd:
                    31:63:46:4c:0a:9c:f1:02:84:56:f9:71:d0:35:45:
                    e9:84:f5:3d:fe:58:59:3a:e1:df:60:fc:27:7f:93:
                    6c:df:a3:78:79:f5:4b:f0:9d:05:a5:d1:6c:40:69:
                    d8:d7:21:83:8e:2f:b8:ce:90:cd:f5:2d:53:29:f9:
                    44:7d:57:ed:35:39:0e:55:13:d7:38:53:29:94:24:
                    f0:ac:40:83:1b:9a:58:25:16:b0:35:e4:e9:3d:5a:
                    5f:58:bf:a4:9b:88:dd:39:56:07:84:03:a6:16:d8:
                    18:9e:77:d4:5a:40:a3:c6:1c:5f:ed:31:16:21:c5:
                    19:1c:e9:03:72:01:75:bc:e0:b0:87:2d:73:25:84:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2B:C6:68:AA:1C:37:B8:44:D6:0F:CC:15:73:6F:66:38:E1:9F:BD
            X509v3 Authority Key Identifier:
                keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ec:49:6d:e4:5c:2a:06:d6:21:1e:38:cb:0f:ac:7d:f1:90:
         20:42:5c:56:4b:1f:a2:b2:67:8b:c1:84:f2:16:3f:90:90:61:
         40:5f:49:e5:aa:ca:57:97:3f:39:16:4a:02:0d:9b:7f:95:a5:
         ec:e2:51:91:16:b6:32:6b:2e:9c:a1:73:7c:53:11:7d:97:0b:
         86:b7:f8:4b:a6:91:db:85:bc:1f:7d:12:51:4c:bf:04:17:cf:
         3a:45:67:11:6f:b4:7d:f5:78:73:12:24:d3:21:11:cf:e6:d6:
         cd:a2:8c:83:3f:81:93:a6:93:cd:53:de:ef:d9:cd:f9:39:ee:
         19:04:eb:aa:4c:22:a2:23:e1:e0:5c:21:d6:1d:40:33:75:cb:
         e1:f9:11:83:94:0c:e1:91:44:2d:da:34:f9:93:cd:1c:2f:e7:
         02:a0:6c:11:b8:e2:9c:04:30:7a:3f:94:61:5c:2a:05:a3:f7:
         84:83:10:c6:59:7a:08:2b:bb:91:34:1e:51:4a:86:ff:65:f5:
         12:16:b1:d0:8c:4b:2b:63:9b:a6:81:2f:56:dd:62:17:d0:d5:
         84:b2:00:cb:44:6c:b6:02:ab:a6:28:22:6e:c1:fa:18:11:75:
         08:59:bd:dd:91:47:af:aa:fc:a8:be:e9:e7:0a:f6:b4:e8:35:
         ae:f2:ea:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:53 2024 by rpki-client on console-fra.rpki-client.org