Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
File:                     XmRDFeVulrFTtP_eTXDay6oVzpI.mft (raw, json)
Hash identifier:          EgV8Ct0durpqtILPUJM6mjRIidao4tv+aDnjMbFHdP8=
Subject key identifier:   5E:19:70:03:6D:71:6C:7F:D1:6B:BA:52:2F:2E:A5:BA:9B:D1:04:40
Authority key identifier: 5E:64:43:15:E5:6E:96:B1:53:B4:FF:DE:4D:70:DA:CB:AA:15:CE:92
Certificate issuer:       /CN=5e644315e56e96b153b4ffde4d70dacbaa15ce92
Certificate serial:       018F88C8C57917A6B1AB485DE052D5318C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
Manifest number:          E9
Signing time:             Fri 17 May 2024 23:00:10 +0000
Manifest this update:     Fri 17 May 2024 23:00:10 +0000
Manifest next update:     Sat 18 May 2024 23:00:10 +0000
Files and hashes:         1: XmRDFeVulrFTtP_eTXDay6oVzpI.crl (hash: J2eiOJuDIvR1hpD3tejYt1rSv2Z7L5KMBQeOyuMNWQM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:c5:79:17:a6:b1:ab:48:5d:e0:52:d5:31:8c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e644315e56e96b153b4ffde4d70dacbaa15ce92
        Validity
            Not Before: May 17 23:00:10 2024 GMT
            Not After : May 18 23:00:10 2024 GMT
        Subject: CN=5e1970036d716c7fd16bba522f2ea5ba9bd10440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:de:50:22:34:ce:19:7d:c6:0d:e1:27:55:
                    57:07:1f:c3:cd:c1:7b:bb:5b:7f:01:97:d5:f6:cc:
                    70:85:a4:5a:f6:80:34:7d:df:5e:af:08:5a:d4:2c:
                    cb:b4:a2:d4:ad:f4:c1:16:f9:4c:a1:8c:5a:35:4f:
                    cf:de:1e:51:99:33:bd:31:db:d0:84:6f:d8:bf:5a:
                    8e:78:ed:23:d8:1e:05:e7:9f:ec:c8:5d:c7:22:5e:
                    62:dc:a6:a5:7d:76:0c:09:41:9a:bd:3b:00:0a:88:
                    ec:45:78:66:3d:2f:e9:d8:a5:f4:64:b3:88:54:73:
                    5b:9f:0c:2f:89:97:57:f6:6e:12:b6:30:ed:22:d6:
                    74:cb:85:48:95:32:10:6f:9a:db:1e:45:9c:50:09:
                    1f:b2:7b:3b:d9:ea:86:55:e5:22:78:f0:6c:25:53:
                    4f:96:5a:1f:ed:a9:e3:29:93:46:92:cd:b3:ed:6e:
                    01:be:6f:a1:b3:d0:95:89:6b:13:68:73:c0:91:f5:
                    96:29:6f:06:36:d1:9d:53:cf:19:b4:c1:aa:93:ca:
                    84:24:9a:5f:bf:f2:f2:c3:81:4d:3b:08:04:8d:48:
                    66:db:da:ff:ac:44:14:26:1d:9a:17:d8:ba:85:0e:
                    a4:41:64:41:b8:ff:b6:f1:b3:59:8c:30:d5:f6:b7:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:70:03:6D:71:6C:7F:D1:6B:BA:52:2F:2E:A5:BA:9B:D1:04:40
            X509v3 Authority Key Identifier:
                keyid:5E:64:43:15:E5:6E:96:B1:53:B4:FF:DE:4D:70:DA:CB:AA:15:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:7e:0a:e0:4c:27:8b:b4:01:06:f5:a7:43:e4:f8:58:7c:
         15:91:0e:84:df:11:84:5e:6b:9e:12:49:fc:e1:a1:74:f3:c2:
         0d:02:77:7c:5d:cf:f6:d2:5b:db:3d:fb:31:66:70:ba:ce:d7:
         f4:a3:f5:4e:cb:d7:47:ba:49:af:af:8c:b3:40:3c:4b:24:24:
         dc:25:22:26:b3:ea:18:cc:ce:9c:88:5d:ff:02:cd:1e:13:2d:
         07:1d:26:48:58:ba:0e:18:a2:6e:fa:d6:24:1b:1f:00:18:6b:
         b6:53:98:7a:89:74:96:4f:b5:ee:4e:5e:62:cc:28:ba:b4:de:
         69:ad:72:06:d7:b2:f3:e7:a0:b4:77:a1:bb:0a:b9:cf:76:82:
         5b:9b:d1:8b:66:ce:ff:07:eb:b9:81:7b:11:3d:3b:22:2f:83:
         63:86:76:69:69:72:8c:a4:b1:e3:1d:c4:1d:bb:a5:d7:91:81:
         15:29:34:56:29:6d:91:9d:48:a3:da:49:3b:b4:80:66:db:77:
         0a:53:e4:7b:aa:10:fb:ac:88:b3:93:99:4e:62:fb:39:44:c0:
         c9:9f:38:9f:d8:35:4a:b8:21:ab:05:04:bb:4e:38:a9:c7:3b:
         55:55:5e:0c:1a:95:b1:fa:cc:4a:a5:b5:3b:40:0f:a9:50:18:
         00:15:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:04 2024 by rpki-client on console-fra.rpki-client.org