Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File:                     H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier:          5qZh9KpoKyjsvHvAXm+5zgl2UuIWfYk6tMleMfGDyaU=
Subject key identifier:   E5:11:07:7E:CE:C5:86:A5:E5:B6:43:DC:FE:88:5D:6D:25:4E:74:EF
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer:       /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial:       018F497F3B0C292044DC48DA97AFA055FC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number:          0861
Signing time:             Sun 05 May 2024 16:03:45 +0000
Manifest this update:     Sun 05 May 2024 16:03:45 +0000
Manifest next update:     Mon 06 May 2024 16:03:45 +0000
Files and hashes:         1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: 8LknyfkLcyu3GSrDZgwoaWx+HocoLuopkCCn0M5hQPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:3b:0c:29:20:44:dc:48:da:97:af:a0:55:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
        Validity
            Not Before: May  5 16:03:45 2024 GMT
            Not After : May  6 16:03:45 2024 GMT
        Subject: CN=e511077ecec586a5e5b643dcfe885d6d254e74ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:eb:81:72:16:94:f7:8f:45:92:65:9c:26:
                    19:2f:70:f9:cb:56:09:91:10:eb:61:cc:92:77:9c:
                    02:3b:68:1f:bb:4c:58:ff:68:9a:87:6d:05:a7:05:
                    d3:5c:d5:00:ac:ed:5a:a1:45:b0:29:e1:ae:12:9b:
                    d7:44:b6:b1:df:23:73:e8:21:5a:19:14:f4:a0:06:
                    0f:14:67:e8:cc:e7:e8:02:4b:61:d0:3a:9b:1d:9b:
                    2f:a1:21:91:83:65:71:3d:ba:f3:b8:c8:a1:38:6e:
                    45:be:a3:b7:60:41:44:28:a1:91:7f:68:f8:1c:1c:
                    f8:eb:6c:d2:f1:1f:8e:cd:ab:78:24:12:a3:c3:b5:
                    6b:fc:19:0b:7e:90:ba:a8:61:f7:65:b1:ac:c3:c5:
                    01:c7:b1:1c:3f:fa:c5:19:a0:dc:5a:51:df:94:2d:
                    df:ae:6a:4e:65:87:fc:92:0f:b4:f6:31:4b:73:e2:
                    d8:69:1d:9c:44:bd:ce:a5:b2:e0:53:08:64:3e:cb:
                    dd:6e:74:ec:43:28:f9:ad:5f:c7:eb:f0:ff:3b:5b:
                    57:a1:de:42:b6:ed:0e:6b:ca:1d:90:a3:d6:1e:6d:
                    2c:bb:b7:2a:17:f0:f5:af:d7:30:2c:be:27:68:c1:
                    fb:9e:70:81:f2:9c:2f:9d:0f:a2:91:a4:a1:2f:1c:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:11:07:7E:CE:C5:86:A5:E5:B6:43:DC:FE:88:5D:6D:25:4E:74:EF
            X509v3 Authority Key Identifier:
                keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:16:ba:b8:d4:a5:3c:a9:13:43:8c:bd:54:fe:eb:8f:ed:
         a7:cf:75:81:7d:9c:fc:30:b8:5a:70:f2:9e:c1:39:8d:6a:94:
         3f:75:68:f6:44:b4:03:de:c2:2c:b6:53:81:d7:53:a8:d8:ab:
         18:fe:9d:08:c8:74:fc:ea:c1:ed:cc:d6:bd:04:c8:b7:35:ba:
         73:41:8c:a2:6a:8e:29:d3:31:98:ef:73:f3:04:bc:06:2f:d9:
         f0:1e:77:c4:a9:08:07:10:53:70:2f:5d:3b:2c:70:b0:0d:c7:
         d4:36:c0:ac:90:1f:f6:08:6c:34:42:d9:b9:8f:3d:97:ba:a5:
         2c:91:19:54:95:64:8a:ed:c6:7a:76:f0:cf:35:15:bd:13:d3:
         e5:e1:e7:fd:54:8e:96:26:9e:e0:ac:9c:8a:06:a8:e9:5a:cd:
         d4:14:af:f2:da:9a:3e:98:a9:5a:45:ea:17:a9:75:9f:70:8c:
         65:ad:2d:7d:41:4b:7a:21:a6:5b:c1:9c:3e:71:78:62:e3:70:
         4e:12:f5:04:68:76:e3:2a:55:23:77:02:29:35:79:2f:76:58:
         44:4d:26:03:65:0e:7a:a0:0d:1c:40:10:dd:a7:26:48:8d:d7:
         06:9e:5e:77:a6:94:84:55:74:c4:72:f9:0d:70:61:b6:f1:b5:
         78:35:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 17:45:06 2024 by rpki-client on console-fra.rpki-client.org