Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
File:                     AxGHu2TIff3S-gLy2F1HnsJoPlc.mft (raw, json)
Hash identifier:          5E3A3UPbSXVZIuMH4CfKD1sOpr2wu0OA96E5nRo6Z5I=
Subject key identifier:   7E:11:F5:01:53:A1:77:65:85:29:44:84:1D:7D:51:B2:E6:A4:22:A4
Authority key identifier: 03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
Certificate issuer:       /CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Certificate serial:       018F4E35854168C2537F42BB72C4DA87D14C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
Manifest number:          0AD5
Signing time:             Mon 06 May 2024 14:01:21 +0000
Manifest this update:     Mon 06 May 2024 14:01:21 +0000
Manifest next update:     Tue 07 May 2024 14:01:21 +0000
Files and hashes:         1: AxGHu2TIff3S-gLy2F1HnsJoPlc.crl (hash: 0ppk2CJnKWnYbirCYUDr6mEhfPBzjv9apZ9kfUs9WLE=)
                          2: FOEel_Ug53BPy9TWRRCR6iqRfU4.roa (hash: albAo4f3VxMQ6/h3rLSCLYTmXgJa445vXmsJEV34B9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:85:41:68:c2:53:7f:42:bb:72:c4:da:87:d1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
        Validity
            Not Before: May  6 14:01:21 2024 GMT
            Not After : May  7 14:01:21 2024 GMT
        Subject: CN=7e11f50153a17765852944841d7d51b2e6a422a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:d2:b7:1e:f8:c7:68:28:a5:68:cd:57:db:
                    df:20:c1:e8:b0:4f:8d:ff:51:2a:a8:92:cb:63:5d:
                    98:6f:1f:61:c6:20:8b:27:9b:b2:63:af:08:ec:7e:
                    3d:79:c8:9d:39:62:6f:75:09:0b:bb:68:e9:83:98:
                    ad:60:db:5c:f0:e4:24:81:a6:b1:3b:9a:ec:91:6e:
                    df:14:57:44:6e:57:a6:29:d8:0a:02:46:76:f0:09:
                    cd:22:42:16:61:f5:ba:03:a4:e7:85:d9:95:c2:63:
                    61:70:9e:b1:11:2e:38:3c:fd:48:7f:d6:c7:e2:64:
                    65:83:e5:df:56:03:94:8a:b3:f2:81:9f:60:1d:e1:
                    fe:3e:a3:c8:a8:6e:b1:f2:3f:fb:28:37:96:04:bc:
                    26:ab:c7:c6:29:95:68:8d:92:04:eb:1d:28:66:54:
                    61:a1:25:e4:e1:63:72:cc:c8:e3:2f:28:8a:20:53:
                    dd:24:37:92:72:33:ad:46:3a:39:bc:46:c9:c6:4d:
                    ac:6a:1c:40:6a:0c:b5:05:40:ec:f7:b6:9a:dd:6d:
                    d1:71:87:5d:5b:3d:6e:81:73:27:a3:be:aa:89:8a:
                    3d:d3:e1:1a:71:18:a2:50:4a:05:98:b5:53:2c:51:
                    82:49:d8:b4:c7:07:ee:0a:77:aa:6c:b3:d2:c0:88:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:11:F5:01:53:A1:77:65:85:29:44:84:1D:7D:51:B2:E6:A4:22:A4
            X509v3 Authority Key Identifier:
                keyid:03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:87:8f:d2:7a:ec:95:d6:a7:72:1e:ac:96:77:d1:0d:7d:28:
         88:70:12:03:4b:bd:0c:24:c7:9f:b7:0d:fe:f5:37:bb:3e:97:
         4a:6d:9c:6e:3a:34:f1:f4:44:54:eb:97:ae:9c:4d:19:1c:c4:
         cf:a2:a8:34:d0:98:98:b2:7b:99:3c:dc:b6:26:85:d5:9c:34:
         9b:93:cb:c2:a1:9b:56:a8:f1:6d:6f:9e:79:e4:b7:e6:72:11:
         1a:84:11:7e:07:22:8c:c9:64:3b:05:a5:15:9e:2e:51:cc:42:
         79:d6:bf:eb:08:e0:39:b5:7f:1a:47:42:34:97:dd:a0:32:7d:
         39:11:41:d6:f0:04:d1:fb:d7:f9:54:d5:68:4a:ae:47:74:a8:
         fa:08:2f:1e:53:b9:36:b2:33:59:9a:d2:6e:02:e1:36:6a:75:
         8b:f3:e4:1f:e4:8b:5f:15:37:32:94:25:3f:c2:13:2e:c7:3a:
         90:47:8f:46:20:c6:4e:38:97:79:8f:84:20:bf:ea:54:6f:45:
         86:a3:1c:ba:81:d8:04:92:42:50:ff:56:00:57:5c:b4:00:30:
         56:24:7f:97:29:35:ea:bc:a4:65:e4:55:08:e5:2d:15:a2:9f:
         2f:f9:e7:bf:c2:ff:6b:75:56:2f:d6:19:f2:d1:85:f4:e8:07:
         43:c8:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:23:45 2024 by rpki-client on console-fra.rpki-client.org