Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File:                     5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier:          4FsLPfLwcZgeeHt2SHZbwO/LvuWzA+VhReSShSJ0Kkw=
Subject key identifier:   D8:7D:F4:D5:8E:47:84:29:7F:70:31:EA:4D:1D:8C:42:09:9D:37:D3
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer:       /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial:       019072E5D2AEAA708D5F7F2FD76B35F44D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number:          1180
Signing time:             Tue 02 Jul 2024 10:03:02 +0000
Manifest this update:     Tue 02 Jul 2024 10:03:02 +0000
Manifest next update:     Wed 03 Jul 2024 10:03:02 +0000
Files and hashes:         1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: /RpOvbEvX+Xo3PbIuZ71kY4UQQWrvLMYFNqv8DfALKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 10:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e5:d2:ae:aa:70:8d:5f:7f:2f:d7:6b:35:f4:4d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
        Validity
            Not Before: Jul  2 10:03:02 2024 GMT
            Not After : Jul  3 10:03:02 2024 GMT
        Subject: CN=d87df4d58e4784297f7031ea4d1d8c42099d37d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:4a:83:af:e3:5a:63:dd:15:45:61:c8:d0:
                    e8:7a:c4:fd:07:96:87:1c:d8:f6:b3:ec:a5:24:57:
                    61:b3:25:eb:31:0c:06:28:c9:ae:d8:8d:2c:a0:69:
                    7c:e1:1d:9a:cd:99:66:43:19:ae:35:1a:5e:3a:71:
                    c5:43:65:fe:56:61:26:96:96:c3:1d:4b:8f:c0:e6:
                    03:03:d9:9f:43:b1:31:cf:44:fc:00:c9:ca:82:0f:
                    72:ea:49:79:9c:3e:79:38:79:cc:b1:c8:ee:02:23:
                    41:60:4e:18:54:ae:32:fa:da:2b:e0:c6:94:98:dd:
                    99:5b:12:2e:a9:1d:02:56:c8:91:1d:b7:21:05:0a:
                    5e:67:0c:9e:5d:ac:f5:74:11:7d:aa:d4:08:c9:64:
                    70:4d:33:84:c7:6c:be:ab:e0:70:63:70:e7:a3:04:
                    f0:68:96:15:75:a7:61:a8:ff:8d:9c:5a:40:6c:01:
                    25:7a:4c:0a:c0:14:79:24:67:89:fc:f3:bf:af:33:
                    36:5b:ad:8f:6a:70:d1:8d:bd:79:42:ed:1b:d9:90:
                    8a:6f:55:90:1d:31:ac:42:a4:9a:cf:7d:c0:01:19:
                    5c:8b:44:21:c5:9a:99:a3:54:73:9c:63:e0:f2:c8:
                    f3:76:30:d9:bd:6d:94:ff:7c:33:e8:85:17:ed:1b:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7D:F4:D5:8E:47:84:29:7F:70:31:EA:4D:1D:8C:42:09:9D:37:D3
            X509v3 Authority Key Identifier:
                keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:41:c4:c0:2c:eb:16:86:2e:7d:ca:39:69:30:1b:47:43:88:
         02:4f:af:0e:0a:7a:75:d3:31:29:40:d0:b9:af:c8:80:2b:3e:
         d6:a1:10:33:71:5a:ab:04:28:7b:c1:43:ff:69:eb:cc:ee:78:
         7a:69:ca:05:fb:65:65:62:17:15:c5:06:03:73:7e:7e:36:4d:
         86:f2:bd:2c:83:61:a3:6a:97:c7:2a:5c:06:ce:f2:bd:25:e0:
         d3:46:c7:d2:d3:f4:49:af:f9:eb:8a:5e:eb:06:86:35:09:c7:
         7c:01:ae:27:52:df:89:d9:6c:1c:40:57:cf:fd:c2:dd:70:55:
         95:57:c6:4b:38:42:ca:d6:77:eb:85:3e:1e:34:dd:0b:12:b6:
         09:b2:38:5f:e9:4c:6a:e3:8f:62:d1:fe:52:ce:d0:31:17:08:
         c0:06:a6:13:9f:24:0f:2f:da:86:e0:0b:af:af:b7:9a:c1:c5:
         66:cb:f2:c7:9d:dc:d5:79:8d:fa:05:8e:9c:3f:80:6f:4c:c5:
         08:cd:dc:8e:72:12:8a:97:a0:97:a8:6e:42:86:49:13:25:70:
         7e:49:8b:f7:1a:4e:63:70:78:d1:3b:be:65:47:81:03:26:cd:
         b4:24:66:f5:9a:42:c3:29:29:46:a0:71:16:1a:dd:9e:8d:d4:
         53:9c:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:47:27 2024 by rpki-client on console-fra.rpki-client.org