Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          ahcIDDXOf10g69Qtiqo/E73tG7yJBtbWZomtsst9Wcs=
Subject key identifier:   55:74:49:E3:8A:1D:35:23:38:AA:3B:3E:0E:37:C2:34:5A:AF:41:EA
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       018F3C9D4D791DD335F857A882916141F481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          10E0
Signing time:             Fri 03 May 2024 04:01:32 +0000
Manifest this update:     Fri 03 May 2024 04:01:32 +0000
Manifest next update:     Sat 04 May 2024 04:01:32 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: Jb7FmtnwnuPCDRfwfL2blSxdrMe9uAIf72YVYNNIBK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:4d:79:1d:d3:35:f8:57:a8:82:91:61:41:f4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: May  3 04:01:32 2024 GMT
            Not After : May  4 04:01:32 2024 GMT
        Subject: CN=557449e38a1d352338aa3b3e0e37c2345aaf41ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:52:cc:8b:43:06:99:01:5a:e7:59:c9:a0:
                    7a:4b:d0:92:07:79:b9:39:49:39:0d:83:2f:fa:bb:
                    c6:a3:6b:26:35:f1:47:82:d4:6a:a7:24:55:27:fb:
                    5e:2f:e0:de:24:a1:30:8e:3a:be:b8:33:c7:bf:4d:
                    02:fd:d8:10:49:01:f1:8a:76:1b:97:d9:f3:ae:0d:
                    c3:83:aa:86:1e:29:ff:27:5a:f7:d1:65:7d:ea:88:
                    97:08:2e:9c:2a:c9:15:1f:ce:1b:16:b1:22:b3:7a:
                    0a:2f:89:bb:e2:d4:8c:51:46:d9:01:d4:b8:9e:9b:
                    68:b4:54:51:0c:dc:6a:d3:85:06:9d:5d:0e:c7:84:
                    02:8c:4e:42:b2:e9:58:da:c9:d1:56:ab:8c:3a:6f:
                    21:4d:1d:db:45:f1:9d:ca:a7:c9:df:f1:ca:83:95:
                    f1:ca:c5:34:05:6a:e4:63:3c:8a:e4:1a:23:74:91:
                    7b:87:10:23:50:b6:cf:18:59:f2:5a:ad:b2:9f:7a:
                    8c:36:37:8a:3b:60:f5:dc:3f:f2:03:2c:81:c2:e2:
                    26:01:7e:35:dd:cb:55:d4:b7:1d:2f:d4:61:24:9d:
                    61:cb:cc:14:c8:be:a9:fc:78:e2:88:5d:24:ba:84:
                    54:39:1b:8f:e5:53:c7:2a:a8:31:e2:7a:f0:8c:34:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:74:49:E3:8A:1D:35:23:38:AA:3B:3E:0E:37:C2:34:5A:AF:41:EA
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:61:62:eb:44:1e:29:0e:f0:cd:e7:56:a7:c5:05:2d:c8:
         38:93:65:57:5b:ef:b0:e6:89:ca:61:0b:4c:be:fc:6b:d4:35:
         dd:53:af:ad:b6:7a:8a:64:a7:ec:af:d2:87:ae:6e:4d:e9:43:
         fe:1a:39:b2:3b:a7:91:ef:2e:81:c4:7c:b1:8c:32:57:04:10:
         b7:fc:fb:11:02:71:6d:16:bd:c5:0e:5d:3d:c3:a4:2b:df:d0:
         04:b5:72:17:ca:9d:4e:8b:f0:24:c0:fd:2a:91:3d:28:b0:14:
         27:a9:eb:f1:3a:e8:67:da:c5:b1:b0:15:8e:b8:33:6f:47:98:
         f4:97:20:a4:41:81:f2:00:ed:c1:47:73:22:41:72:02:50:69:
         ff:46:82:ed:50:f6:9a:03:21:e6:65:11:ab:65:4e:60:c1:a2:
         f8:9a:97:31:6e:c4:43:c4:90:0d:63:ed:9c:ec:c2:51:6b:d8:
         eb:07:f6:a5:3d:1f:67:51:ac:6f:89:3a:49:4a:1f:84:20:0f:
         20:26:80:0d:5c:34:7d:65:27:2c:d5:36:4c:57:40:44:c5:cd:
         fc:b8:25:2a:2f:e2:91:04:b4:6d:8a:62:09:2c:5f:63:db:d3:
         59:8c:9a:70:b4:5f:44:5b:51:26:ef:8a:aa:be:0d:13:08:01:
         d4:3b:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:45:16 2024 by rpki-client on console-fra.rpki-client.org