Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File:                     5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier:          b/+D3ydFgBzZ5xIxOGS89RdpJdVf1qGq+DCrWGS5R7M=
Subject key identifier:   41:3B:E0:E2:AA:3A:54:42:7C:32:70:0F:FA:26:09:B6:77:BD:F5:A5
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer:       /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial:       01936AB4950BBAF83D097A9A6BAF057B0298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 23:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:39 +0000
Files and hashes:         1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: Foq+wnVVtYn8FlDy1Cj+9ZBa4NIVBbY9ynMkgam081A=)
                          2: mZ6hJgbUb8gTHlQHg4uMBStNESY.roa (hash: HEEFuZEKH/3SiqUmz/X2sZJRWajKp7ENWAnz9LVH0uU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:95:0b:ba:f8:3d:09:7a:9a:6b:af:05:7b:02:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
        Validity
            Not Before: Nov 26 23:00:39 2024 GMT
            Not After : Nov 27 23:00:39 2024 GMT
        Subject: CN=413be0e2aa3a54427c32700ffa2609b677bdf5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:16:92:42:a3:9e:f1:81:96:b7:e7:17:16:
                    22:aa:74:8b:49:5a:4d:9e:c9:a6:bc:76:5f:0b:e9:
                    52:a0:b5:10:80:58:c1:a0:83:66:4a:9b:3c:fb:e4:
                    b7:58:a3:5d:43:8c:bc:7a:b9:7c:aa:37:28:c6:8c:
                    13:df:90:f9:e5:c4:00:c6:2b:94:00:d7:d3:7c:23:
                    74:32:fe:2b:bd:7b:3e:de:de:af:f8:81:f5:3d:c0:
                    67:6b:43:82:c5:92:a0:c3:94:df:83:e7:73:a4:96:
                    e9:c6:34:6e:4e:d2:a8:58:8c:ef:74:be:d7:df:dc:
                    9b:11:47:da:f5:11:e7:ef:99:18:d0:af:f1:9a:cb:
                    c3:ac:85:d5:5c:8b:22:ed:1c:55:10:35:e9:15:fd:
                    e8:b3:88:a5:ba:26:64:88:b1:1b:2a:b2:63:79:a3:
                    2d:55:32:65:b9:0d:73:36:9e:31:21:4f:a4:41:a2:
                    c7:e9:f4:eb:7e:22:9b:54:3c:ce:0b:ee:fb:d9:fa:
                    28:00:18:32:59:7f:5b:ce:60:21:cd:35:7f:20:1d:
                    70:32:15:80:79:ec:c4:74:63:c0:d4:1c:45:e5:77:
                    cf:51:9c:54:38:6c:c3:93:67:dc:18:71:36:c4:cc:
                    db:6e:d7:a4:fb:fd:c9:f6:b7:44:2f:5d:6b:ca:72:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3B:E0:E2:AA:3A:54:42:7C:32:70:0F:FA:26:09:B6:77:BD:F5:A5
            X509v3 Authority Key Identifier:
                keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:c6:c5:98:d8:3f:8f:66:56:17:d2:23:91:11:35:8f:f1:
         43:d3:e3:fa:ef:59:ce:44:70:a3:19:19:8e:3b:f6:f2:75:06:
         65:9b:ad:09:f6:38:72:e9:e8:c9:a8:ca:3e:d2:5a:d2:03:9e:
         57:82:1e:64:4d:c2:39:82:21:c3:8d:4b:f6:3d:c5:63:38:05:
         d1:17:08:02:89:fe:62:ef:69:53:b3:cf:9d:78:52:1a:3c:17:
         91:b6:df:77:59:f1:ef:fe:bf:1d:7b:c5:10:c5:14:a7:5a:ce:
         37:03:7b:7f:f2:27:ea:fa:81:3c:a8:8c:ba:31:67:8e:e0:8e:
         a1:0a:6d:f3:ae:40:6d:d7:35:d7:b9:9a:db:9f:63:c2:d1:41:
         c9:2a:5a:cc:e2:78:21:8a:fb:1d:d4:ec:80:f7:9c:5c:d2:72:
         4b:1b:e9:df:1a:69:0c:c4:49:4b:08:27:60:01:6a:17:65:b3:
         46:7d:12:94:5c:27:6b:a2:74:55:7e:6a:d7:0e:72:9a:e1:d2:
         53:ad:d5:a8:6b:ea:45:35:57:c6:88:25:e9:2c:d2:50:92:00:
         6b:ff:22:5b:87:37:83:55:89:91:1a:b5:08:5f:dd:aa:3e:3f:
         37:bd:e6:d5:65:75:29:0a:90:65:b4:0f:7b:76:c4:00:81:5e:
         3a:cf:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:59 2024 by rpki-client on console-fra.rpki-client.org