Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File:                     5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier:          RvM8V5IUPpLrhnrejc+xkZvNgJH9cbEjGN/R4iggA0E=
Subject key identifier:   72:D0:05:61:58:DA:CA:BB:61:9B:15:45:7E:1E:E9:E2:0A:24:80:C0
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer:       /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial:       01935877C68F0410EB780447BD7F6BA6355D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number:          1300
Signing time:             Sat 23 Nov 2024 10:01:04 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:04 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:04 +0000
Files and hashes:         1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: CvSDNIA/GZLFfACxiKkUDMvoJpY5hfnbA3Qu4rNpZWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:c6:8f:04:10:eb:78:04:47:bd:7f:6b:a6:35:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
        Validity
            Not Before: Nov 23 10:01:04 2024 GMT
            Not After : Nov 24 10:01:04 2024 GMT
        Subject: CN=72d0056158dacabb619b15457e1ee9e20a2480c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:52:ab:cd:a3:92:06:ce:cf:19:e6:38:62:
                    bf:74:52:33:72:68:e7:d5:8c:63:69:87:3c:51:26:
                    92:c7:41:8d:fd:cd:0f:99:f3:1f:e7:1e:15:7b:3e:
                    66:37:a5:90:44:9b:ef:5a:52:0e:7d:e3:4b:29:7c:
                    f9:11:fa:76:92:5e:2d:31:a3:53:e9:90:94:65:65:
                    a2:83:8f:84:6c:ce:45:cb:d5:b9:fe:19:ad:24:ff:
                    07:8c:c6:20:24:56:a2:fd:cc:e8:3d:8d:1e:84:1a:
                    de:a4:aa:c1:83:7d:7d:80:d2:80:94:89:d4:c8:18:
                    69:62:4a:0d:a8:5e:a6:ac:a6:55:77:b9:2e:dd:5c:
                    1d:4f:8f:d4:23:e7:c0:78:fb:58:cd:15:d9:fb:f0:
                    38:e0:e3:87:1c:84:8e:22:7d:3e:d1:8d:38:a9:ad:
                    b2:90:0a:61:a4:6e:2b:b2:4c:80:30:f5:63:ea:fe:
                    59:ac:16:b8:3b:e2:f9:74:d6:fe:7b:5b:07:2e:cc:
                    d3:82:67:a4:7c:b8:79:61:47:dc:fe:a6:1e:22:63:
                    d3:2c:fc:61:2a:ae:3f:67:be:6b:b8:68:e6:ba:65:
                    0d:37:1b:c3:17:b0:8e:e7:8b:b9:32:2a:a8:10:43:
                    e6:34:e9:32:d7:fa:98:a3:d4:66:a4:6d:e6:da:01:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:05:61:58:DA:CA:BB:61:9B:15:45:7E:1E:E9:E2:0A:24:80:C0
            X509v3 Authority Key Identifier:
                keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:7f:0f:fe:2e:e9:00:76:e9:b2:94:9e:c4:2e:70:a8:0b:
         3f:3a:05:33:60:63:b8:1e:91:bd:27:2c:27:b4:78:93:b3:23:
         e8:d0:67:c6:64:9f:5c:20:99:15:b0:1c:a5:b2:cd:3a:bd:65:
         9a:e1:d3:cc:ea:3b:a9:14:72:21:f9:de:ed:45:84:75:86:61:
         7b:99:ee:86:18:45:96:a9:3b:43:ef:aa:d9:ff:34:f7:38:69:
         78:a2:4c:b9:26:c2:cf:aa:92:f7:19:b1:aa:c3:e8:20:21:31:
         7b:90:9d:d2:8d:42:18:f6:8f:dd:9e:02:9e:d5:14:72:84:91:
         05:2d:7c:81:d5:0e:aa:93:3f:6c:52:32:86:8f:66:8e:68:fc:
         1f:6d:92:8e:49:96:77:55:6b:1a:42:fa:3c:df:46:4f:6e:fb:
         e8:dd:34:6e:fb:17:77:27:09:2d:07:67:a0:9e:17:f1:db:0a:
         de:30:1a:58:81:df:6f:37:51:62:f9:15:36:86:d8:d3:f7:5a:
         45:52:16:87:96:10:bb:0c:20:b4:10:bd:17:8f:33:2a:4e:28:
         7d:df:2a:f5:e5:02:e9:07:74:01:93:21:8c:a5:ce:2c:6b:be:
         9f:a0:7f:9e:58:6d:cc:15:42:d7:02:d7:0a:94:10:4d:58:78:
         12:db:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:57 2024 by rpki-client on console-ams.rpki-client.org