Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File:                     5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier:          c7KsydiNFuR3NPOwjr4oHB3oD72vHCKz46jpb2nPwfQ=
Subject key identifier:   BB:4B:AF:B7:74:CB:3B:3E:58:83:14:62:E0:D0:2C:35:47:DF:23:FF
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer:       /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial:       018F51A4A70ACB752D8BA4AFF46D40646465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number:          109D
Signing time:             Tue 07 May 2024 06:01:36 +0000
Manifest this update:     Tue 07 May 2024 06:01:36 +0000
Manifest next update:     Wed 08 May 2024 06:01:36 +0000
Files and hashes:         1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: BfjTjxbyb0ySi3Te1H7J0fkiQHTiBenrYp4GtWz9gbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:a4:a7:0a:cb:75:2d:8b:a4:af:f4:6d:40:64:64:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
        Validity
            Not Before: May  7 06:01:36 2024 GMT
            Not After : May  8 06:01:36 2024 GMT
        Subject: CN=bb4bafb774cb3b3e58831462e0d02c3547df23ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:52:47:a1:78:9e:a7:14:15:e0:63:3f:02:3c:
                    e8:42:23:0a:d6:f0:0f:41:42:d2:23:97:a4:a8:fd:
                    94:7a:02:52:99:db:16:a9:5b:39:ed:8a:57:e0:a0:
                    20:0f:1a:ef:8f:85:b0:c9:67:c5:01:07:80:b2:ce:
                    df:ba:f6:f0:b9:d4:b4:f0:f3:3c:39:45:88:26:c3:
                    5f:9d:cc:5f:05:9d:db:93:ad:91:55:25:bf:90:5e:
                    db:bc:89:41:76:33:b9:9d:3c:d7:ed:6a:19:2c:4f:
                    1b:a6:ad:c1:56:20:b4:3b:38:52:6c:49:80:09:5e:
                    a4:e5:70:ee:aa:90:4e:e5:35:3f:0f:1d:a4:16:81:
                    9e:26:41:29:0a:9d:7a:e7:c8:ae:ce:5f:1b:cc:45:
                    3f:d5:49:83:51:0e:bb:80:9f:5c:ab:27:e1:8d:7b:
                    fb:41:ea:8d:df:2d:96:35:cc:7a:65:9d:c4:9e:0f:
                    01:a8:82:47:5d:b4:26:0a:ea:97:13:f2:8f:1f:ad:
                    48:97:9f:91:78:66:5e:6d:23:b9:68:ea:40:0c:58:
                    2d:c0:24:6c:94:56:42:18:83:4e:96:02:a8:fb:fc:
                    b4:ad:53:ff:46:c7:f3:2d:2a:b6:26:92:91:a0:94:
                    27:cd:8e:3f:bb:fb:20:56:1d:b8:17:0b:ab:43:98:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4B:AF:B7:74:CB:3B:3E:58:83:14:62:E0:D0:2C:35:47:DF:23:FF
            X509v3 Authority Key Identifier:
                keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:50:52:fb:d0:1e:70:eb:97:58:16:e2:70:48:16:df:40:
         d1:c0:66:75:53:6f:d0:a3:45:5c:98:d5:ce:88:2a:09:90:6e:
         3b:19:7f:9f:0d:2f:50:ad:06:01:0f:f6:36:03:4b:9f:27:c5:
         b8:d1:29:53:a0:7f:93:27:46:c1:e5:7f:83:e6:dd:48:db:b6:
         64:1f:68:ed:61:7a:60:b7:06:86:2a:41:89:bb:b5:47:f4:ee:
         af:ac:cf:07:3b:28:51:bd:f8:8d:17:83:89:3b:a2:18:45:d6:
         f3:b2:77:33:02:66:02:7c:09:5c:d5:d9:3d:f5:8f:19:66:14:
         e9:8c:bc:69:33:11:71:fc:a4:c1:8a:a2:65:8a:d2:69:2b:01:
         bb:2a:e0:3f:7c:34:71:6c:ea:4c:9f:97:be:1f:b5:4d:76:5b:
         02:79:fb:09:53:43:e0:89:7f:29:52:46:cd:eb:79:e3:dd:92:
         69:3a:13:60:f7:11:57:3e:ef:93:f3:07:e1:41:34:ff:d0:5d:
         1c:77:0b:48:73:ef:77:12:a4:b8:be:7d:f1:e0:00:ff:5a:9b:
         87:b0:8d:e7:e9:ff:3d:61:97:58:b7:bb:b7:80:8b:a2:be:4b:
         41:35:44:1e:2e:9c:7a:4c:dc:ae:f8:0e:55:16:73:20:c2:e0:
         3b:68:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:12:24 2024 by rpki-client on console-fra.rpki-client.org