Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
File:                     5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json)
Hash identifier:          0euKwUV12/FrDX6MHaokPgg7Fc7ZAD/r+MDdxCL2oOQ=
Subject key identifier:   1C:23:40:81:FF:3C:A0:9E:4A:27:D1:13:FC:3A:08:16:E6:03:BD:65
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Certificate issuer:       /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial:       018F57019F9E75E2CE3FC376047765069732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
Manifest number:          0CBA
Signing time:             Wed 08 May 2024 07:01:15 +0000
Manifest this update:     Wed 08 May 2024 07:01:15 +0000
Manifest next update:     Thu 09 May 2024 07:01:15 +0000
Files and hashes:         1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: CImw3ehp2muEE9E/4EVub1DmZJPSdsaln08WhiBZwb0=)
                          2: wStZK4JZWodTa8QJ27lZey8VOZk.roa (hash: M5R4ouVoFcf9NfDVJpf1ocBgYj+iPRvbg122A3j7Pos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:01:9f:9e:75:e2:ce:3f:c3:76:04:77:65:06:97:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
        Validity
            Not Before: May  8 07:01:15 2024 GMT
            Not After : May  9 07:01:15 2024 GMT
        Subject: CN=1c234081ff3ca09e4a27d113fc3a0816e603bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:7c:e6:ba:e8:69:69:47:09:f0:49:a1:0e:
                    2b:27:2f:2f:e8:02:44:cf:a2:d2:fc:24:11:a8:83:
                    93:bc:31:d8:94:df:92:f5:5e:34:aa:d0:20:56:67:
                    fc:5c:b4:39:45:1b:7d:48:66:de:bc:4c:8e:af:f3:
                    13:0d:5e:28:8d:8f:8c:32:c8:79:45:8f:f2:5a:76:
                    cc:47:99:87:a4:63:bf:ed:2f:55:fc:4f:1d:25:69:
                    47:be:b6:8e:e6:4d:88:bb:eb:46:ed:16:f4:cf:52:
                    e0:56:62:a9:4a:f3:98:cf:2a:ec:9e:fd:c1:23:c9:
                    9c:4b:80:d8:23:99:b6:43:0e:9e:ef:c4:ad:12:43:
                    fb:a3:5a:06:3d:a9:91:aa:97:c0:b7:d5:56:74:f6:
                    c4:1e:42:88:d2:6a:8d:9e:7f:c5:55:7d:fd:c6:d7:
                    3a:e2:7a:78:45:72:99:29:1f:15:53:4c:b8:d4:7b:
                    c4:29:42:16:b3:3f:1d:40:47:1f:a7:07:03:25:62:
                    c0:66:b6:e3:f3:9f:e7:fc:0d:f4:52:1a:e1:b8:ab:
                    09:32:fc:ab:ec:23:ef:01:41:5d:96:4c:8e:40:89:
                    c6:0b:06:56:b7:b1:62:cc:22:bf:d1:ce:a5:2b:8a:
                    f1:b6:0a:28:33:2d:eb:61:1e:ab:e8:72:1c:af:ff:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:23:40:81:FF:3C:A0:9E:4A:27:D1:13:FC:3A:08:16:E6:03:BD:65
            X509v3 Authority Key Identifier:
                keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:68:25:7d:5e:20:64:72:61:fb:d9:ba:4a:1a:0c:9c:4c:
         54:36:32:51:27:42:55:15:b7:92:a6:d6:fc:09:ff:0e:17:e6:
         7e:01:ab:49:6c:2d:d9:a6:50:f6:b5:a6:b6:92:76:83:0b:f2:
         b4:51:49:a0:a1:ef:55:dc:ad:85:e5:74:91:2a:73:ea:1d:0a:
         50:d3:62:c7:df:6a:17:4d:41:1e:e1:f4:9a:32:04:47:0d:f9:
         5c:60:62:57:46:58:fc:a4:4b:b9:86:56:69:7b:1a:02:fc:d3:
         d2:c8:4b:4f:36:cc:46:c5:6a:03:cb:61:db:96:74:aa:97:6a:
         2e:8d:ba:b6:fc:2a:5f:44:71:d1:d3:77:71:f1:a5:85:5e:54:
         44:92:2e:d7:c4:36:d5:9c:32:32:f7:dd:18:ab:d2:d7:5c:4e:
         70:af:63:7c:91:ff:8e:d2:f0:75:32:8c:3d:5c:af:75:8a:86:
         3d:59:a9:fa:1d:74:5a:c8:c6:9b:36:45:7f:5e:62:70:f1:94:
         e2:f0:2d:8b:65:6b:8a:81:60:65:ae:00:f1:e9:f2:c6:0c:07:
         e7:c5:e8:a8:77:ec:fb:a9:70:5e:3c:4e:aa:ad:2c:72:d2:6f:
         8c:f5:02:16:d4:ef:ab:41:02:9c:b2:a3:71:1d:73:68:af:00:
         29:af:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:37:39 2024 by rpki-client on console-ams.rpki-client.org