Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          kyiRxCWodgVAyuCMDrhjfBGDW6ZnxzROedUKIHOvfWk=
Subject key identifier:   8C:DF:50:E0:42:1C:1B:D6:C6:1D:6D:E6:EE:A1:0C:33:06:75:1F:1B
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       018F5437A2EF072850263F253D9F7C400AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          115C
Signing time:             Tue 07 May 2024 18:01:23 +0000
Manifest this update:     Tue 07 May 2024 18:01:23 +0000
Manifest next update:     Wed 08 May 2024 18:01:23 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: 9gp+q6jKgCWaZQFhmN18HE2qHO5XPMUlgZhxRzXZ1TU=)
                          2: BZoH1_MGfs62LzRMTExfqyAJjBo.roa (hash: +8k+okRmC+N3bG1eFNSapYERk1Ocfq1EBRJmM1qQSQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:a2:ef:07:28:50:26:3f:25:3d:9f:7c:40:0a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: May  7 18:01:23 2024 GMT
            Not After : May  8 18:01:23 2024 GMT
        Subject: CN=8cdf50e0421c1bd6c61d6de6eea10c3306751f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:fc:3a:1b:da:4b:d1:57:4f:1a:10:d6:e6:
                    05:85:d5:67:bd:d8:b1:4b:55:53:f5:ac:8b:2e:60:
                    2f:b3:92:f9:fa:85:e1:42:cd:cb:d3:21:78:d5:02:
                    e5:b1:07:cb:22:82:22:39:61:57:2c:01:1a:fc:ef:
                    ff:d0:eb:ce:c6:08:2f:56:7f:f8:22:3f:e7:d6:61:
                    39:3e:df:f6:69:06:2b:a5:23:eb:a0:6d:ca:6f:c2:
                    eb:77:7d:1e:bb:73:23:44:f5:6f:4d:aa:bc:ea:ce:
                    50:e5:05:7d:6f:3d:67:09:fa:5a:68:24:91:a2:61:
                    11:2c:f8:53:4f:db:9c:3b:8c:6c:1d:19:de:a8:f7:
                    ac:91:bd:a2:b5:1c:eb:8d:40:44:f4:c9:8f:eb:2d:
                    c0:7c:60:1c:fd:e9:2e:cb:e1:f8:e8:cf:80:d0:03:
                    b8:6f:51:6e:c7:46:f7:1f:d7:02:76:08:3f:ef:67:
                    21:78:59:91:b8:07:8c:0e:9b:61:64:c6:16:ec:d8:
                    be:f7:e8:9f:94:01:82:4f:4f:05:7b:fc:b8:63:cd:
                    6c:5a:94:12:2f:e7:3e:0b:bd:28:8a:64:1e:c2:88:
                    e0:a0:0c:bd:f2:5d:45:1f:e2:f9:c7:8e:5f:83:27:
                    da:be:ed:00:11:bd:84:87:38:c6:d7:c3:23:73:e1:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DF:50:E0:42:1C:1B:D6:C6:1D:6D:E6:EE:A1:0C:33:06:75:1F:1B
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:14:7b:d5:50:f4:85:14:15:19:1a:f8:b3:26:31:29:dd:8a:
         54:9e:89:e9:52:17:98:07:b6:b8:c4:d6:90:e6:88:7d:ba:8f:
         97:93:56:c6:59:6e:b5:41:f9:2b:b6:51:3b:e5:fd:29:99:c6:
         9e:d6:64:00:ca:b7:7a:38:17:55:53:7e:13:84:aa:34:68:81:
         2b:db:05:a7:77:04:86:97:fd:62:ce:b6:6f:49:d9:ee:a2:d4:
         74:f1:0c:11:38:e2:43:a8:e1:6c:63:a1:7c:c1:1b:3f:07:62:
         69:d0:0f:a6:d5:42:d1:57:17:4a:4b:c2:99:73:e1:a9:c6:dc:
         5e:73:88:b6:95:5c:a3:2d:e3:9f:59:58:35:9f:e8:48:62:5a:
         ae:f4:f2:11:7c:26:f0:c2:16:8b:06:e8:19:57:47:93:32:30:
         4b:73:a5:7e:ed:46:63:09:68:57:73:4d:a1:88:e0:f3:61:e7:
         56:21:ae:28:1c:7c:e9:79:ca:1a:6f:7c:dd:bc:bc:23:16:6d:
         a2:1d:a6:c1:f1:63:e2:ee:9c:d4:ba:8c:fe:c1:81:a8:72:03:
         ce:f7:20:ee:82:6e:5c:d4:6d:5d:ee:b2:24:82:d2:60:8f:fc:
         45:69:34:a5:f5:e9:9b:e3:a0:28:73:3c:13:8f:2a:80:74:52:
         40:89:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:00:10 2024 by rpki-client on console-fra.rpki-client.org