Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
File:                     5dasEgU_FIaz3nfxyHC1a538ORM.mft (raw, json)
Hash identifier:          MdrDL3w2YdyPzZQwcD3LFZPoBQBYo8fli5QydFUTjVE=
Subject key identifier:   B5:1E:F5:50:83:AE:40:FB:B7:C5:20:ED:F7:87:62:BB:5B:8B:39:8B
Authority key identifier: E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
Certificate issuer:       /CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
Certificate serial:       018F51369C2B809ACCBFECF72BF9CA3BFE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
Manifest number:          1159
Signing time:             Tue 07 May 2024 04:01:24 +0000
Manifest this update:     Tue 07 May 2024 04:01:24 +0000
Manifest next update:     Wed 08 May 2024 04:01:24 +0000
Files and hashes:         1: 5dasEgU_FIaz3nfxyHC1a538ORM.crl (hash: pJIrim0beoHL9K/GkPAdbdVeuEGf19ULRhZ4MgyEQxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:9c:2b:80:9a:cc:bf:ec:f7:2b:f9:ca:3b:fe:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
        Validity
            Not Before: May  7 04:01:24 2024 GMT
            Not After : May  8 04:01:24 2024 GMT
        Subject: CN=b51ef55083ae40fbb7c520edf78762bb5b8b398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:a5:85:92:85:a0:f8:79:21:aa:76:2a:66:
                    b3:f3:e0:2e:35:5e:ca:53:50:27:f4:09:2e:0f:40:
                    29:40:74:75:c5:98:4b:e5:c8:e0:33:ce:3a:43:47:
                    50:5f:81:e3:8c:e1:9e:1f:0c:2d:8a:f0:76:a3:55:
                    03:c1:94:e5:3d:1d:6d:35:87:5d:29:40:2b:77:ac:
                    58:1b:c4:11:0d:bb:03:a7:d1:69:2b:a9:4c:5c:e3:
                    f3:b6:88:65:12:79:5a:cb:44:4c:c4:93:7d:04:23:
                    14:77:3e:ca:0a:68:e5:ec:9f:ea:7a:b3:97:ad:07:
                    3b:b6:7f:2b:96:af:1f:7b:10:1c:f1:1f:5a:c7:76:
                    90:63:52:cd:45:49:1b:51:a2:45:68:89:39:76:a4:
                    5e:88:fe:1e:5e:16:6f:18:d7:ea:66:f7:2b:16:60:
                    a9:55:66:3f:09:d4:a6:8e:7f:8c:eb:ca:a2:a1:b1:
                    8b:8d:20:ed:d0:f2:f4:da:c7:d8:fe:de:8b:a5:5f:
                    bb:92:1c:e5:f1:88:6e:2a:f6:59:bd:1d:7e:86:a4:
                    50:cf:b9:d5:8d:c6:a1:48:9c:cc:e4:4a:4c:2f:17:
                    1e:b3:1f:5d:94:4e:bc:65:5b:a5:f1:a5:f7:88:b2:
                    1b:0c:71:50:f8:cc:60:40:8c:5c:ac:53:9b:44:30:
                    ff:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:F5:50:83:AE:40:FB:B7:C5:20:ED:F7:87:62:BB:5B:8B:39:8B
            X509v3 Authority Key Identifier:
                keyid:E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:10:65:98:d5:47:dc:e0:6b:a6:6e:26:12:aa:27:68:ed:45:
         08:02:1d:1d:61:da:96:30:24:02:02:1d:0e:a1:4d:00:8a:c3:
         80:76:15:08:a8:5e:4c:7c:fa:93:53:ed:de:a4:91:6e:71:a2:
         b9:ed:d8:66:a2:7c:78:c6:56:af:b1:63:9f:e6:a6:5a:bf:d4:
         10:9c:97:c1:fc:4d:44:e2:df:28:b4:25:b4:83:dd:3e:4f:81:
         bc:26:81:50:0c:be:31:21:88:de:df:13:35:36:58:45:9c:3b:
         1d:c7:33:ab:96:45:6e:d3:f6:f1:c0:be:99:99:cd:85:d2:36:
         22:84:1d:21:04:0b:e7:b3:54:81:47:0b:cd:f9:99:cf:12:7a:
         a6:5d:c3:d4:ed:15:65:cd:6a:54:8f:e5:cd:6a:f9:17:9c:5d:
         34:90:b6:97:ad:d5:37:36:98:ff:c9:24:f0:b8:8f:5f:5a:56:
         da:88:e3:34:5f:05:3f:09:f8:a4:2e:51:56:3c:08:87:38:ed:
         b9:31:ba:74:37:5d:51:c6:ef:6f:33:71:73:d9:06:ee:9d:3f:
         0e:a5:57:6c:4c:29:e8:04:06:9e:7b:f8:f0:08:ca:a5:ff:ef:
         b5:0b:2c:23:3e:12:82:d5:c7:9c:58:c1:b5:04:de:37:52:1a:
         30:a1:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:48:07 2024 by rpki-client on console-fra.rpki-client.org