Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File:                     5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier:          K0ou1dYONexsMuvjf6bDk677u9uKresNWUDMDAzANeg=
Subject key identifier:   D3:E8:1A:AB:68:38:20:EE:70:0C:E7:EC:35:08:FD:FC:48:B4:31:BD
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer:       /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial:       0193579B7803DE79E624F4A2A8416AF5D87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 06:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:26 +0000
Files and hashes:         1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: LRs7T7TReD7wI4A2bd3SD51/U8fnNmkoGOwkeYI4TOA=)
                          2: 5eaDPx6zIyMihP5R14XtvgfM3mU.roa (hash: rM/8U/hlNl1XdaJyixb3BbY0Wg8EdMn6MltO9oJQYUU=)
                          3: yu65muM6_RCGPbPbBynXvNsGbso.roa (hash: 3JV4xhR0i3kpjRpwlinTmGLxakH0U0DdMDoYqGVT4qc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:78:03:de:79:e6:24:f4:a2:a8:41:6a:f5:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
        Validity
            Not Before: Nov 23 06:00:26 2024 GMT
            Not After : Nov 24 06:00:26 2024 GMT
        Subject: CN=d3e81aab683820ee700ce7ec3508fdfc48b431bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:e9:e1:01:95:52:8c:94:7a:15:fe:c4:eb:
                    94:6c:98:2e:d1:43:7e:01:97:9e:7c:2e:3e:45:7d:
                    5e:5b:61:0c:f5:a6:05:50:dd:f7:fa:7c:08:42:7c:
                    38:2f:46:9a:a5:ac:7e:2c:76:4f:8b:24:98:7b:6a:
                    2f:1b:31:98:d9:da:c8:e6:62:8e:69:89:0d:04:bd:
                    7d:ff:d1:f2:5e:5d:5c:06:b7:74:1a:3b:9d:be:f8:
                    10:fb:b1:c3:0b:40:83:b8:89:e9:b6:f8:6b:e6:cf:
                    48:02:b2:08:e2:e3:7b:5e:f5:e1:43:c1:80:7a:02:
                    84:f4:35:c8:fd:3d:01:21:f6:bf:15:b0:54:95:12:
                    7c:30:9c:23:16:97:d2:c4:8d:b2:30:67:f7:09:79:
                    ca:cd:93:d4:74:58:f6:a2:d5:1f:7f:43:04:ce:4f:
                    c9:03:f9:c6:de:dd:8e:15:db:ab:24:d2:90:d7:7d:
                    f1:61:2b:1a:44:1c:f8:ac:0e:ae:77:ed:61:21:e6:
                    01:55:47:84:41:98:e4:ce:51:c7:90:d4:e3:7d:65:
                    3f:7e:ec:25:f8:34:47:17:5a:65:39:d1:bc:6d:3f:
                    41:b0:e9:82:ce:58:2e:22:1f:3c:8e:95:65:e0:33:
                    20:1f:75:be:b8:80:27:9d:47:2f:91:2e:e9:0b:bf:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E8:1A:AB:68:38:20:EE:70:0C:E7:EC:35:08:FD:FC:48:B4:31:BD
            X509v3 Authority Key Identifier:
                keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:22:72:e5:f8:da:78:ae:5a:f1:80:a8:e9:33:a1:76:1f:47:
         81:05:3b:f1:c8:3f:fb:d0:fb:3a:ff:3c:35:28:a0:db:18:0d:
         a1:89:f9:0d:8a:4c:ce:eb:04:de:2a:7e:50:b7:34:85:b1:c8:
         48:20:88:cb:ea:12:a6:31:0a:fa:bc:03:dc:e7:c9:dc:9c:98:
         21:75:2c:e3:c4:27:eb:76:56:a0:c2:56:ae:2d:68:51:eb:9e:
         a9:7e:bf:c4:23:85:b0:49:24:03:5e:60:f6:92:f0:2c:a1:de:
         c4:ef:70:c2:61:0e:15:cf:f5:c0:fc:c5:d5:0e:bf:a7:5b:40:
         d9:13:aa:45:ee:44:75:8b:1a:f8:dd:aa:27:06:cd:e5:5a:2d:
         0d:a6:62:fa:bf:1b:b0:dc:46:63:d3:09:30:39:03:24:51:51:
         ff:ed:e4:e7:b0:e9:34:25:ec:29:7c:54:dc:dd:fb:d3:90:f0:
         f6:7c:9c:68:36:72:77:7d:04:cb:85:f9:9b:8f:82:2d:7e:36:
         d3:f3:95:c2:c5:e3:b4:c0:75:8b:89:ea:3a:2e:74:8a:f8:18:
         e2:c2:75:b4:38:cb:ba:ed:c6:33:5e:f7:fd:7a:c4:99:4d:4a:
         6d:15:cc:ca:db:39:0f:66:e9:82:0d:8f:e5:32:a0:8e:df:c8:
         13:e2:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:54 2024 by rpki-client on console-ams.rpki-client.org