Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File:                     _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier:          egCxfDU86xXJ80sxzPZh09j+CeIh8WXhI3BidcvA5Mc=
Subject key identifier:   28:14:55:F9:84:22:F0:84:E8:24:E3:50:89:5A:1B:9E:33:59:4D:0E
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer:       /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial:       018FB233EB994AF8A2D7F6A38CE1FF904569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number:          118C
Signing time:             Sun 26 May 2024 00:01:38 +0000
Manifest this update:     Sun 26 May 2024 00:01:38 +0000
Manifest next update:     Mon 27 May 2024 00:01:38 +0000
Files and hashes:         1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: WraAw57jMn5zxzTaEFSKdkV+UgTvdqYqZpMIqIPgyVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:33:eb:99:4a:f8:a2:d7:f6:a3:8c:e1:ff:90:45:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
        Validity
            Not Before: May 26 00:01:38 2024 GMT
            Not After : May 27 00:01:38 2024 GMT
        Subject: CN=281455f98422f084e824e350895a1b9e33594d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:ca:eb:e4:7e:e6:b1:93:38:f4:09:16:43:
                    71:87:ff:89:eb:9a:5f:89:fc:04:a1:73:82:28:b2:
                    00:94:af:9f:e3:14:1e:7f:fd:98:10:48:7d:7b:da:
                    45:ae:be:32:04:23:f1:a9:92:fb:46:d9:23:76:d3:
                    84:62:80:ac:a4:67:7e:39:f2:59:49:ce:f0:e7:57:
                    7d:d7:04:9f:a5:71:39:03:88:c3:2d:c5:f9:76:bf:
                    c9:a3:02:d5:18:8d:fe:d9:84:60:0f:91:bf:58:5a:
                    df:f4:ba:d5:1b:59:26:04:c3:b4:58:37:d3:ab:f2:
                    7b:83:6c:f8:bd:cd:d2:a6:27:d5:4c:f7:c3:a3:79:
                    d5:aa:9d:0b:3b:19:53:a9:56:0f:2f:ac:43:d0:b7:
                    64:16:7d:04:64:33:cc:3e:14:5c:bf:61:f3:86:ed:
                    22:22:8c:58:5e:e4:a7:a8:48:06:c8:9c:54:3f:44:
                    ab:c5:c8:b7:33:f3:97:c1:19:72:ad:b9:4d:24:bc:
                    d8:53:f4:c7:10:5a:8d:22:6a:eb:0a:e2:7e:69:f3:
                    28:ab:bd:0b:c2:47:93:f2:d8:d6:b2:23:9e:55:bb:
                    6c:2f:42:64:29:57:06:87:fa:b9:39:51:65:73:1f:
                    bd:14:8d:7e:9d:9d:ed:af:3f:13:a9:78:82:43:24:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:14:55:F9:84:22:F0:84:E8:24:E3:50:89:5A:1B:9E:33:59:4D:0E
            X509v3 Authority Key Identifier:
                keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:df:10:e1:3b:2c:c9:50:ab:8d:85:8f:48:aa:26:46:0d:c3:
         79:b7:72:a4:a1:e9:a8:5f:20:f0:64:18:d9:22:ec:9d:70:d2:
         3c:b3:7a:09:ca:eb:b5:66:07:db:91:c7:c4:3c:f6:83:6d:db:
         ba:8b:cf:92:e4:a0:4b:2a:37:ca:31:8c:e6:31:62:0c:24:25:
         f1:5c:71:4c:75:f4:00:39:27:ef:72:f4:6c:1e:97:94:c1:a5:
         98:87:8e:36:2c:81:3e:12:2c:ad:54:0d:b9:d0:f6:88:fd:e2:
         2f:41:b7:70:19:7b:9b:3d:7d:2b:a3:95:b3:42:3e:4b:eb:07:
         65:bb:0d:4b:33:2c:d8:ba:1d:2a:a4:ff:c4:43:a7:0b:f4:60:
         1d:19:37:c5:8b:f4:93:15:8e:4c:c6:db:25:0a:70:58:20:71:
         03:90:61:d9:c4:bd:be:ad:b0:cd:b9:19:af:45:e2:fd:71:51:
         60:aa:97:13:40:dd:ea:fc:36:a4:5d:9e:73:ca:74:bd:a3:ba:
         e0:0e:94:d9:29:37:e2:ad:bb:63:58:c2:bf:20:ab:1a:80:ca:
         4a:62:ce:24:95:ed:35:45:ae:4e:25:3f:1a:8b:e3:85:b8:0d:
         e9:46:5f:be:2a:49:8e:2e:92:41:1f:fc:a2:f6:75:5c:c6:ce:
         10:93:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 09:04:58 2024 by rpki-client on console-ams.rpki-client.org