Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File:                     irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier:          rLbxMReovTTkKEj22DY+y/g746kv68BoQzqtkADefbw=
Subject key identifier:   AF:57:BE:51:ED:85:3F:FE:4E:9D:2C:9A:A6:3A:9F:9A:7E:AE:6A:37
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer:       /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial:       018F8824399D1465274B33569F3DF461D6C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number:          05CD
Signing time:             Fri 17 May 2024 20:00:26 +0000
Manifest this update:     Fri 17 May 2024 20:00:26 +0000
Manifest next update:     Sat 18 May 2024 20:00:26 +0000
Files and hashes:         1: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: Nv4X35+o8E4OtBMbgRzXOXkwQcKn6l5eGEROUCVSKyQ=)
                          2: u_HMQ110mEIgW98XY2xxKgcn2F8.roa (hash: rVd9CQS9AnB0Y0GNjyo7ra3KXj8yc9UFxTEss6a/0zQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:39:9d:14:65:27:4b:33:56:9f:3d:f4:61:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
        Validity
            Not Before: May 17 20:00:26 2024 GMT
            Not After : May 18 20:00:26 2024 GMT
        Subject: CN=af57be51ed853ffe4e9d2c9aa63a9f9a7eae6a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:44:76:4a:1d:33:e0:21:f5:c3:51:04:f9:
                    ca:28:20:ac:df:da:00:10:da:5e:1c:43:10:05:84:
                    4a:d9:17:87:69:77:e5:81:68:0a:25:ae:c3:39:46:
                    36:76:7f:4c:64:af:3c:dc:76:cf:b3:ea:7a:d0:8c:
                    77:da:6e:2a:fc:75:47:d8:44:4a:aa:48:8a:5f:69:
                    7c:d6:b9:1d:a0:41:a7:9d:37:d0:6e:93:b5:30:aa:
                    af:9d:47:cc:a5:bb:68:bc:8c:28:7d:a5:8b:75:6f:
                    8c:b4:5e:09:a9:2b:25:ad:fd:54:0b:56:ca:7a:70:
                    98:16:b7:f6:96:b4:b2:4a:0b:bc:8c:eb:c3:ca:9c:
                    e0:dc:13:1f:0e:d6:3e:27:17:69:bd:2a:41:91:40:
                    ba:a5:04:35:f5:b8:0b:5f:34:9a:0e:53:2a:3e:5e:
                    1a:67:b7:10:df:f1:49:13:83:c9:83:c4:ca:94:85:
                    61:d3:dc:f1:5b:30:2d:35:0e:4b:7a:b7:d1:ef:cd:
                    d5:2e:6a:74:f3:ce:fe:a9:03:f8:4f:af:f8:db:20:
                    bf:09:12:8e:d0:cf:d5:2f:5a:6f:92:6e:fa:a0:76:
                    a6:63:df:f8:d9:ac:2f:bb:e2:16:75:fc:b5:dd:37:
                    25:61:1b:37:04:5b:c7:c1:cb:a1:e1:41:08:c8:df:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:BE:51:ED:85:3F:FE:4E:9D:2C:9A:A6:3A:9F:9A:7E:AE:6A:37
            X509v3 Authority Key Identifier:
                keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:60:cb:1c:6d:f9:02:18:51:e9:d7:9b:61:1c:08:67:fa:
         04:38:2d:0d:fe:cd:be:d6:7a:7e:96:e5:b9:ce:95:8a:c1:0d:
         fd:17:54:b7:1e:2a:e5:e0:56:0b:10:9b:d9:8b:a4:40:de:08:
         d1:28:57:ce:92:77:42:6b:6d:78:a2:5c:32:94:51:79:8e:bb:
         99:2c:c4:76:ff:a3:4b:8b:13:71:84:9c:80:83:de:78:0f:80:
         fc:0f:ac:59:3c:42:f1:b0:b6:7c:41:00:82:9f:dd:df:3c:3d:
         4e:de:23:3c:36:94:dc:cc:fd:07:e1:47:16:65:23:1e:3e:b3:
         bd:61:e8:4f:4a:d5:6a:3e:9c:3f:79:6d:f9:06:4e:d1:4c:9a:
         8f:a2:a3:3f:21:1e:55:39:f5:2e:8b:09:28:82:ca:0b:29:ed:
         36:51:0e:cf:34:92:bf:30:1c:bc:40:32:61:fe:71:88:f4:b5:
         be:08:5b:5a:6d:b2:d7:8d:d1:26:de:48:5b:ec:e0:84:3b:92:
         b9:b5:99:2c:1b:b1:d0:eb:78:da:d1:c8:4e:d3:99:b1:8d:c8:
         2f:3f:8d:23:a5:07:a9:1b:b6:a7:0d:48:e3:01:6d:24:05:77:
         56:93:12:d1:ec:ed:b0:ee:d7:c1:28:fd:f7:fa:5b:dd:0e:49:
         ca:53:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:10 2024 by rpki-client on console-fra.rpki-client.org