Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File:                     F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier:          29YhOoslNRfwDi9IA4eYMitJ3J74GWGyUKqtacniBHg=
Subject key identifier:   DB:30:04:79:60:24:CC:DE:6C:8E:E5:54:6E:B9:FE:D4:B7:38:41:05
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer:       /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial:       0193579BC61456826B85F1E8BD323FBB87D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number:          0410
Signing time:             Sat 23 Nov 2024 06:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:46 +0000
Files and hashes:         1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: P+W1nQkjw238++uPs0WWkk+rxw1tB/0y0CdEMk8d3JM=)
                          2: z_9A5BJtHieb1hmDzAdPohzbjN4.roa (hash: 1sqE+vpsb609pxUHpQpZu26wQuhh91usG6g+FRRr5l4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:c6:14:56:82:6b:85:f1:e8:bd:32:3f:bb:87:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
        Validity
            Not Before: Nov 23 06:00:46 2024 GMT
            Not After : Nov 24 06:00:46 2024 GMT
        Subject: CN=db3004796024ccde6c8ee5546eb9fed4b7384105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:2a:02:a4:42:61:2b:9e:56:cc:ab:1f:a6:
                    7b:76:2b:15:82:4c:00:ab:fe:c0:0a:24:92:2b:12:
                    00:b1:6f:b0:97:fe:94:dc:a3:83:8e:f6:bf:fd:12:
                    42:ec:09:8f:c2:0e:91:f7:b3:db:cc:f2:b2:24:09:
                    0a:12:c1:0f:a3:9a:54:ad:8b:8e:d1:92:8f:25:48:
                    7e:1e:bb:14:75:a8:51:79:37:48:02:36:19:46:a1:
                    84:c9:6c:f7:40:4e:d0:5d:2a:76:cf:d9:2d:94:e0:
                    d9:50:5e:87:dd:ad:56:4d:ee:19:08:f4:16:ae:46:
                    c8:b4:a5:a5:e5:e6:70:d4:04:3d:eb:04:21:23:7e:
                    02:17:81:89:9e:9f:a7:ce:a1:a8:30:fd:b8:17:06:
                    da:2f:77:fb:7a:fa:51:13:d7:db:6e:a6:78:ce:f6:
                    47:3c:a2:62:37:ab:5b:c1:e5:ef:1c:3f:a6:00:5c:
                    87:8d:58:2b:23:16:fc:23:df:40:53:92:3b:82:66:
                    8c:f4:69:be:ed:41:10:d8:07:51:de:a4:b7:09:2b:
                    c7:e7:60:98:87:aa:9b:02:69:77:7c:b4:34:ee:7d:
                    d5:dd:6e:fb:98:5e:79:c9:61:0c:47:1f:d8:e5:38:
                    d7:6d:7b:e5:41:c5:7d:c7:0c:60:08:80:eb:35:55:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:04:79:60:24:CC:DE:6C:8E:E5:54:6E:B9:FE:D4:B7:38:41:05
            X509v3 Authority Key Identifier:
                keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:71:76:4a:38:14:ac:e5:ce:76:45:55:f3:26:1c:96:cd:
         a7:e2:bd:6a:a7:07:35:c1:64:e3:cc:03:87:f4:6f:a8:48:fe:
         08:72:21:0e:c8:e7:77:da:20:b0:2a:86:fe:3d:f4:c8:79:85:
         77:6a:ed:10:49:16:6b:aa:fb:36:8d:c9:ca:41:43:89:65:2a:
         7d:68:19:a4:88:f1:7a:4e:96:f4:ac:59:76:63:92:94:53:96:
         bb:bb:ec:f8:1b:ea:b0:ca:03:9c:bb:03:9c:3c:a9:66:a4:d2:
         e0:54:be:73:f4:8c:f9:85:3b:3f:fe:4d:6d:99:76:9c:b2:53:
         90:a7:61:9c:fd:29:78:6e:fb:37:4a:aa:fd:df:61:d7:f5:34:
         e5:9d:6a:7b:46:ee:91:51:2d:75:02:b2:60:06:38:1c:2f:02:
         d7:78:1c:0b:cb:03:bd:af:48:95:45:46:85:db:86:f9:99:98:
         4c:38:c7:c7:b0:00:55:ec:60:0c:35:56:3f:6e:7f:37:ad:e7:
         69:38:70:88:e5:7f:7f:53:5a:5d:8a:dc:d6:54:59:79:69:74:
         b0:dd:28:b5:73:12:22:fc:30:2b:bf:78:d8:d2:59:19:42:78:
         fe:63:c9:af:c3:aa:66:9d:27:69:9e:0b:b1:e5:8d:01:78:55:
         7b:e7:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:48 2024 by rpki-client on console-ams.rpki-client.org