Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File:                     5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier:          CzvCbOd06q9aYOA9VxnXU0JrZlljKQX0Y1f15/mIek0=
Subject key identifier:   9D:76:95:0D:48:B8:9F:BA:B1:04:6C:83:61:CD:BD:E3:83:E7:73:8A
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer:       /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial:       018F4DC79D243329F7417B2919EE029D7DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number:          0FA9
Signing time:             Mon 06 May 2024 12:01:18 +0000
Manifest this update:     Mon 06 May 2024 12:01:18 +0000
Manifest next update:     Tue 07 May 2024 12:01:18 +0000
Files and hashes:         1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: IRtcbY753ETLStL0jua0TVMKhLYGVcX1b8bABZ7wFLE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:9d:24:33:29:f7:41:7b:29:19:ee:02:9d:7d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
        Validity
            Not Before: May  6 12:01:18 2024 GMT
            Not After : May  7 12:01:18 2024 GMT
        Subject: CN=9d76950d48b89fbab1046c8361cdbde383e7738a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:03:f6:1b:f1:ee:6c:b6:b0:39:de:65:21:
                    5e:84:4e:24:8d:34:09:b5:db:e4:85:e8:c1:84:c9:
                    21:9f:7b:f9:c8:33:0e:dd:ef:aa:96:be:31:b8:f5:
                    98:63:47:1f:4c:3c:43:93:17:08:c4:8b:ab:14:1b:
                    1b:cb:2e:89:0e:8f:b0:6f:a9:07:8d:04:95:f6:39:
                    1b:ee:00:b7:8a:60:56:4f:b0:d3:b1:9a:fd:4e:e7:
                    83:de:7f:ef:ff:7b:f9:71:e6:4a:11:50:68:3c:c4:
                    4f:e0:db:eb:a6:1b:c0:e3:b4:a6:87:1e:95:c6:a1:
                    46:52:63:27:90:4a:63:38:26:17:4c:fc:79:77:d8:
                    c4:6d:c5:2f:7d:d9:96:6b:33:ab:a4:a0:1c:8e:15:
                    71:0b:19:8a:7d:1d:5d:db:c6:e9:aa:85:30:83:4b:
                    58:7a:bb:48:5a:77:51:ce:35:7d:0b:94:97:6c:fb:
                    e6:5f:15:17:62:e0:14:a0:b3:80:f5:13:e5:a4:9a:
                    7b:95:42:70:89:29:6e:d2:32:30:f0:ef:0f:b8:9f:
                    7d:fd:ec:a7:f6:53:19:ee:94:b3:39:78:df:1b:28:
                    42:d3:4b:64:73:c5:49:a6:b6:a7:66:01:fe:b5:e1:
                    ca:4f:ab:fc:c4:ee:43:18:4a:ae:6d:39:11:22:e1:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:76:95:0D:48:B8:9F:BA:B1:04:6C:83:61:CD:BD:E3:83:E7:73:8A
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:72:2c:68:09:17:32:2d:c6:72:ed:62:51:e0:b0:4b:53:
         a0:9b:2a:bb:de:59:58:b0:ec:3c:08:d2:0d:70:77:e2:8b:d5:
         e2:f2:6d:a5:78:77:49:ca:6d:b1:5e:7f:a1:3c:1a:b3:ba:47:
         3a:33:dc:78:8e:66:fe:84:b3:5f:d9:69:d7:14:d3:f2:af:12:
         f6:f5:08:30:ce:02:c8:15:ef:cc:85:96:4e:6a:08:d3:59:b0:
         34:8a:f1:12:d4:be:36:50:3b:1c:99:c4:2e:5c:1b:b6:67:48:
         24:00:5c:37:1b:e6:e3:58:49:bc:92:0f:3d:c5:64:56:3b:07:
         d1:43:62:2b:fc:ce:6b:43:d1:cf:33:b9:5b:78:0a:dd:7b:47:
         54:41:26:ff:b8:dd:65:cc:01:fd:05:14:07:fe:d2:c9:37:d3:
         e9:49:ef:34:54:c5:b3:49:e6:75:b4:74:8b:f7:79:f0:50:68:
         76:16:05:ab:4f:05:56:01:1c:67:31:3d:03:cf:c8:89:d4:3b:
         34:41:c3:13:03:1d:29:41:6c:55:fd:8f:71:cd:1d:e5:1b:2e:
         66:fb:ba:dd:6d:f1:52:05:38:ea:d7:56:41:a6:a1:15:c2:14:
         78:bf:71:85:ce:15:43:70:6e:8d:c1:cd:e8:1e:9e:7f:a8:0f:
         ab:48:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:15:27 2024 by rpki-client on console-ams.rpki-client.org