Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
File:                     5HwodAhcg6Lj2gsMewXOskkCG1M.mft (raw, json)
Hash identifier:          +cQDMXiEK/2g+9mv2W3ynztIOHt2FLm70fGycYoWbDY=
Subject key identifier:   92:DE:5A:C6:A1:26:FC:DD:B7:78:69:BB:53:FA:C8:A8:0B:0C:A9:DA
Authority key identifier: E4:7C:28:74:08:5C:83:A2:E3:DA:0B:0C:7B:05:CE:B2:49:02:1B:53
Certificate issuer:       /CN=e47c2874085c83a2e3da0b0c7b05ceb249021b53
Certificate serial:       018F3CD3BCF0D3A42FDFC62D6F49F6E755EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
Manifest number:          03B2
Signing time:             Fri 03 May 2024 05:01:00 +0000
Manifest this update:     Fri 03 May 2024 05:01:00 +0000
Manifest next update:     Sat 04 May 2024 05:01:00 +0000
Files and hashes:         1: 5HwodAhcg6Lj2gsMewXOskkCG1M.crl (hash: dyM38RmLZpPn7nAuRSKy2IEVOMq3M1Efl06y2AZ1Mvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d3:bc:f0:d3:a4:2f:df:c6:2d:6f:49:f6:e7:55:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47c2874085c83a2e3da0b0c7b05ceb249021b53
        Validity
            Not Before: May  3 05:01:00 2024 GMT
            Not After : May  4 05:01:00 2024 GMT
        Subject: CN=92de5ac6a126fcddb77869bb53fac8a80b0ca9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:f1:88:b0:ae:11:a8:d7:00:bc:59:a3:2b:
                    2b:a1:05:c1:27:12:a1:a2:70:5c:02:99:77:7c:4a:
                    49:94:ca:ec:c5:a5:17:85:6f:1f:be:09:73:ce:93:
                    02:8e:c2:d1:9f:88:94:16:0e:0b:5b:b9:e1:27:15:
                    f0:71:8d:87:6c:39:cb:b4:12:09:f1:c0:01:cd:58:
                    48:78:45:94:aa:39:67:a8:55:43:a8:e6:2f:4f:70:
                    16:55:68:73:c6:99:f4:57:74:f7:67:f1:21:17:8e:
                    0f:e2:27:c4:69:7b:2e:30:9d:d6:94:95:94:1e:2e:
                    b7:a8:a1:27:15:55:3c:eb:87:51:60:94:97:63:23:
                    72:36:6c:59:b6:91:0b:8e:3a:6a:4e:0b:9b:42:58:
                    95:4d:9e:17:ae:65:d6:c9:d7:97:e6:65:46:60:c0:
                    30:c5:f6:f4:70:c9:b4:75:9f:55:1c:24:d3:73:de:
                    ee:4f:1d:5a:a4:9e:ac:da:b3:49:3b:6b:a4:9c:23:
                    aa:63:69:50:2e:91:24:04:2a:f8:c0:76:e6:ae:a2:
                    2d:f8:ad:d4:21:40:4c:1d:b6:dd:07:18:90:f8:b8:
                    ea:21:f8:e3:38:dd:1c:f8:ba:24:5e:19:d3:4b:aa:
                    70:15:86:da:e6:60:34:76:87:38:13:11:45:b4:d5:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DE:5A:C6:A1:26:FC:DD:B7:78:69:BB:53:FA:C8:A8:0B:0C:A9:DA
            X509v3 Authority Key Identifier:
                keyid:E4:7C:28:74:08:5C:83:A2:E3:DA:0B:0C:7B:05:CE:B2:49:02:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:a8:5d:04:c8:e5:81:2e:2c:78:a8:b5:ea:91:1b:f0:b3:
         aa:93:b9:d2:c0:bc:68:4a:05:f2:55:32:11:76:fd:c2:56:ff:
         68:ab:a4:39:fc:63:8a:e9:0c:8e:5c:51:2e:0c:2f:1b:a3:6a:
         55:bd:f8:38:5e:78:b0:f7:a5:12:e1:26:fa:b4:a8:89:1f:35:
         9b:08:59:76:ab:95:de:91:c1:3d:82:b5:06:f4:04:5e:ee:05:
         63:45:c7:93:be:be:c3:b4:2c:58:2d:f7:0b:e4:16:aa:9c:87:
         89:8f:ef:dd:d8:b9:ea:5f:29:e8:63:a7:65:4b:1b:be:b4:79:
         38:41:82:2c:2d:31:63:a8:57:24:6e:45:f1:82:af:23:b3:43:
         d9:17:06:e6:ad:97:0b:8a:14:14:0f:24:a3:42:49:96:7d:1a:
         1a:2c:94:cc:99:83:88:c4:e1:13:51:e4:16:c8:98:d0:d5:94:
         87:29:77:b7:8d:e6:a8:25:6a:32:31:74:c2:ba:b7:6b:f6:ba:
         37:8a:17:44:5c:da:b7:86:c7:84:07:7c:71:39:38:a7:80:58:
         de:13:69:19:b9:ed:de:47:0d:10:15:9f:00:30:f0:77:52:b2:
         15:6b:0f:31:f6:35:7b:15:94:fe:d6:a5:e6:15:4e:8d:b4:cd:
         b3:ad:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:02:50 2024 by rpki-client on console-fra.rpki-client.org