Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e8195f-dd53-4ea6-b12c-17004d0b0d81/1/5_iT2gtc49HBBwVcHvPbuGMMBNs.mft
File:                     5_iT2gtc49HBBwVcHvPbuGMMBNs.mft (raw, json)
Hash identifier:          BDk3iX3tJlY48MKoOb4SRiQVf7Wqcb2Leuvn5C/uAQs=
Subject key identifier:   D2:10:DD:86:4F:90:56:18:26:F3:C9:C5:D8:EB:B2:1A:EF:90:2F:F5
Authority key identifier: E7:F8:93:DA:0B:5C:E3:D1:C1:07:05:5C:1E:F3:DB:B8:63:0C:04:DB
Certificate issuer:       /CN=e7f893da0b5ce3d1c107055c1ef3dbb8630c04db
Certificate serial:       018F45A1A666759EF11DA0FA9B20CB825D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iT2gtc49HBBwVcHvPbuGMMBNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e8195f-dd53-4ea6-b12c-17004d0b0d81/1/5_iT2gtc49HBBwVcHvPbuGMMBNs.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 22:02:52 +0000
Manifest this update:     Sat 04 May 2024 22:02:52 +0000
Manifest next update:     Sun 05 May 2024 22:02:52 +0000
Files and hashes:         1: 5_iT2gtc49HBBwVcHvPbuGMMBNs.crl (hash: YZO/CV5adRx77L+W+VnFadXiyNKA32BptfVbW76tUOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e8195f-dd53-4ea6-b12c-17004d0b0d81/1/5_iT2gtc49HBBwVcHvPbuGMMBNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e8195f-dd53-4ea6-b12c-17004d0b0d81/1/5_iT2gtc49HBBwVcHvPbuGMMBNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_iT2gtc49HBBwVcHvPbuGMMBNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:a6:66:75:9e:f1:1d:a0:fa:9b:20:cb:82:5d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f893da0b5ce3d1c107055c1ef3dbb8630c04db
        Validity
            Not Before: May  4 22:02:52 2024 GMT
            Not After : May  5 22:02:52 2024 GMT
        Subject: CN=d210dd864f90561826f3c9c5d8ebb21aef902ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:c6:e3:bb:9d:50:cc:bc:2c:3c:9f:15:bb:
                    67:9a:f6:8d:5b:16:80:b7:73:17:ac:59:50:68:5a:
                    94:28:a1:3f:2f:0d:89:c1:33:38:8a:ee:3c:c0:36:
                    30:e4:35:c3:96:ae:79:ac:bb:45:ec:96:f0:4d:ab:
                    07:08:da:4a:83:1d:53:05:c6:ca:99:b7:3a:07:f4:
                    b2:cd:1a:23:62:b3:51:c8:90:67:ce:c3:5a:32:a4:
                    8a:fa:de:20:43:b6:e8:eb:18:27:0d:6d:31:da:bc:
                    2c:e4:64:39:78:fe:d6:4c:ca:fd:62:10:0d:ed:50:
                    2a:de:99:d7:5c:9f:1d:af:d3:24:3b:76:75:e0:cc:
                    be:fb:b9:3e:8f:1d:81:15:c2:b5:15:8d:61:41:46:
                    bb:10:57:88:aa:f8:48:22:1e:27:33:8e:17:4b:6e:
                    82:7d:4e:2e:88:aa:72:cb:26:0c:d6:03:07:b6:18:
                    4d:cb:21:4f:d2:53:53:6d:23:9a:12:05:e4:54:0e:
                    2a:51:fb:6b:0f:30:84:17:55:3e:f8:0f:3a:20:b8:
                    8b:5a:84:92:0c:d2:fa:1b:00:33:ee:51:80:3f:42:
                    e7:1e:2a:68:4d:c2:9b:6d:71:6e:c9:e5:94:98:4b:
                    e6:39:24:52:7b:07:94:2c:e7:08:cf:af:3a:98:f7:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:10:DD:86:4F:90:56:18:26:F3:C9:C5:D8:EB:B2:1A:EF:90:2F:F5
            X509v3 Authority Key Identifier:
                keyid:E7:F8:93:DA:0B:5C:E3:D1:C1:07:05:5C:1E:F3:DB:B8:63:0C:04:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iT2gtc49HBBwVcHvPbuGMMBNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e8195f-dd53-4ea6-b12c-17004d0b0d81/1/5_iT2gtc49HBBwVcHvPbuGMMBNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e8195f-dd53-4ea6-b12c-17004d0b0d81/1/5_iT2gtc49HBBwVcHvPbuGMMBNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2b:12:9e:bd:a1:f2:eb:d5:e3:e3:fb:6e:bd:47:30:34:08:
         d4:93:7f:6b:2e:60:0e:70:a7:98:d6:b3:53:d6:22:d2:ad:3e:
         95:6b:ea:d0:65:4f:1a:ec:3f:91:eb:5e:69:8c:42:88:1e:9a:
         4a:28:92:41:31:43:24:9b:43:0a:c8:57:36:58:b7:e0:a5:b3:
         42:34:4f:11:a5:d2:b6:a5:d6:31:8b:40:1a:47:17:4d:c2:68:
         d5:5f:00:62:b7:82:a9:c1:02:b8:e3:2a:6d:5a:9e:7d:bf:a8:
         a2:37:91:eb:97:1a:e3:e1:19:b2:a5:a2:a4:0a:18:2b:33:f0:
         d7:30:c2:f5:81:16:9c:9f:ef:f9:d9:dd:be:fe:a9:8b:0f:ab:
         e6:99:f1:60:d1:45:34:fb:bc:ce:58:36:53:fc:fc:b0:20:2c:
         c3:d5:8d:46:d8:be:bc:c9:50:f0:2f:c4:61:29:e0:4b:bf:c0:
         70:21:a9:b9:12:07:6d:6b:1e:e4:0d:bc:0f:fa:be:11:71:83:
         0b:b3:7b:0b:12:65:00:0e:7c:7e:6c:cd:0c:05:39:b7:84:2b:
         86:50:0f:74:60:8f:08:fb:13:d2:ac:8d:bd:2e:1a:0d:70:11:
         af:32:aa:06:2a:bb:c9:ab:15:c8:99:a1:58:8d:31:8d:6e:14:
         c6:34:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:33:07 2024 by rpki-client on console-fra.rpki-client.org