Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          +57XWb8XtfUOVH/4xK5pEGwG09BPdae1jEyOin+u8JU=
Subject key identifier:   C7:F3:6F:64:50:FD:12:09:E4:63:44:90:FA:61:AD:FA:BC:7A:50:6E
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       019357D24E20E4867AF467EF96980BF077B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          04CD
Signing time:             Sat 23 Nov 2024 07:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:20 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: zrgP7fhJGEx+ioYXlq4MDrM8LEId9wiIh6hsSqt5Wl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:4e:20:e4:86:7a:f4:67:ef:96:98:0b:f0:77:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: Nov 23 07:00:20 2024 GMT
            Not After : Nov 24 07:00:20 2024 GMT
        Subject: CN=c7f36f6450fd1209e4634490fa61adfabc7a506e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:97:df:f9:30:0e:f6:eb:46:72:95:ce:a5:
                    82:32:29:c5:07:11:81:aa:45:eb:c7:b4:9f:61:6b:
                    b0:7d:d3:e9:65:91:8b:50:bb:77:38:a8:35:3f:aa:
                    7c:11:cc:2b:b3:1e:e3:4c:19:cd:30:e3:b3:03:0d:
                    15:c7:73:df:41:95:ac:b5:49:c4:5b:49:e8:16:14:
                    ee:69:5f:70:bf:2a:e1:8c:24:60:7f:86:bb:08:0b:
                    02:82:9d:cd:ad:32:06:2d:2b:19:20:62:8e:f5:b4:
                    69:ed:af:38:9d:5c:82:e8:d1:9f:ad:e3:bb:0d:a1:
                    01:7a:2d:57:52:ae:f0:6d:96:99:eb:44:c5:1a:cf:
                    8e:62:4d:48:a9:9b:c8:7a:03:e6:ce:bd:29:8e:5d:
                    48:19:cd:92:3a:ba:e2:24:56:b1:d3:cc:06:4f:ae:
                    48:d2:ad:47:45:8c:cf:7a:ec:58:a3:91:6e:8c:47:
                    89:ee:a5:d6:51:61:30:80:92:04:37:0f:71:87:02:
                    70:e4:0d:5e:24:39:ef:0d:c0:bb:bd:ab:48:08:5c:
                    5c:76:d2:c8:40:3e:3c:dc:af:37:47:f0:2b:af:23:
                    d6:d8:65:a2:31:79:ac:72:7f:43:0c:39:47:57:1d:
                    df:ac:ae:7f:7f:1d:b2:f8:5c:da:de:48:6c:93:b6:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:6F:64:50:FD:12:09:E4:63:44:90:FA:61:AD:FA:BC:7A:50:6E
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:59:a2:b6:ed:ba:c9:04:ae:bb:ed:fe:42:d5:5a:87:69:d8:
         9c:78:5f:d9:69:f8:7d:8e:1b:f2:98:a7:d8:57:32:4b:49:8f:
         3e:fe:a1:e3:ca:c8:6a:ba:e2:6e:ad:29:42:fc:38:86:50:2f:
         07:b5:e8:60:86:84:90:16:00:67:b3:80:9c:e0:72:e3:cd:c4:
         4f:ca:df:0b:ac:c6:16:9b:e6:69:28:5d:f5:bc:76:2f:52:48:
         2d:a8:c1:3f:d0:bc:4c:aa:1f:19:ff:92:4e:0c:fa:68:a6:99:
         f4:f6:a7:d0:c0:bc:8f:4b:bc:27:b5:17:11:75:ab:d5:c7:37:
         d2:50:7c:de:87:d5:0a:f4:b1:f0:8a:e6:6e:94:fc:16:12:4c:
         c5:a4:91:51:3f:85:21:69:ca:1e:2d:1a:02:a8:d5:5a:b5:5c:
         dd:cb:cf:13:17:b1:33:dd:95:5f:8a:a0:31:ca:fe:f9:39:8d:
         fa:37:0d:01:57:a8:0b:d7:1d:04:ae:bd:af:82:98:d9:ab:a8:
         6d:86:a9:98:57:e5:30:5a:2d:63:9c:31:16:ad:01:a7:76:2d:
         45:2b:83:cb:9f:38:a6:e8:10:d0:9b:a4:8d:11:72:83:6b:30:
         57:49:ea:92:3f:a3:cf:ad:a8:45:88:1d:c1:f4:ff:23:2c:01:
         ca:b1:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:51 2024 by rpki-client on console-ams.rpki-client.org