Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File:                     5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier:          o4W2eYLLOh/VEykgWg55aKOXoOUimHMG/43vcqnEAv4=
Subject key identifier:   AE:9B:01:4E:9F:A7:DD:9C:C1:73:83:E8:AC:84:02:98:5A:A8:47:49
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer:       /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial:       018F874A4BD3E0363846E19E112CC88AABEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number:          03AA
Signing time:             Fri 17 May 2024 16:02:24 +0000
Manifest this update:     Fri 17 May 2024 16:02:24 +0000
Manifest next update:     Sat 18 May 2024 16:02:24 +0000
Files and hashes:         1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: 5NYyJuVGf86jc82ysiA1Pdo4Z/ZHhIRAkKAR2C1s06o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4b:d3:e0:36:38:46:e1:9e:11:2c:c8:8a:ab:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
        Validity
            Not Before: May 17 16:02:24 2024 GMT
            Not After : May 18 16:02:24 2024 GMT
        Subject: CN=ae9b014e9fa7dd9cc17383e8ac8402985aa84749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:e8:da:57:75:d8:96:09:20:23:b3:2c:7b:
                    43:23:b4:ff:cc:71:2d:cf:52:35:51:59:38:3f:df:
                    91:4c:60:01:38:92:10:0c:ad:fc:a9:80:ee:e5:bc:
                    57:99:6a:f4:d8:53:c2:58:7e:60:aa:a6:d9:05:cf:
                    b2:a7:6e:b1:72:09:ef:0c:52:a2:ac:1b:c3:83:aa:
                    43:7f:7b:fb:a5:6f:aa:c2:b4:17:27:9e:72:5f:ce:
                    9f:74:21:f0:17:96:a7:4b:66:eb:e0:a0:e0:77:63:
                    e4:20:59:2e:b3:db:e1:e8:12:1b:ec:33:f2:6f:3c:
                    e9:88:f3:22:0f:15:8d:84:91:b6:29:11:20:03:c8:
                    a4:26:3d:da:33:8d:dd:12:71:78:33:8f:74:1d:a8:
                    83:f3:82:37:1d:f4:ea:ed:42:9c:c2:56:82:15:8e:
                    c9:62:51:46:82:e4:ce:27:63:7b:2e:04:66:93:16:
                    3c:a8:e1:0c:e1:f5:4b:50:ed:04:4e:cc:50:f8:30:
                    fb:b4:fa:ee:f2:99:21:62:69:86:09:ff:26:ea:3e:
                    7e:f3:fa:52:e3:b8:e2:3a:44:55:40:de:70:ed:56:
                    be:ff:90:f9:c1:1c:e4:46:ad:1d:f1:e4:75:36:99:
                    a3:01:b7:ce:57:44:79:5d:46:6a:61:bd:d7:1b:d5:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9B:01:4E:9F:A7:DD:9C:C1:73:83:E8:AC:84:02:98:5A:A8:47:49
            X509v3 Authority Key Identifier:
                keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:5f:6e:5e:9b:f0:17:1a:6d:ba:33:ba:65:5b:d4:81:14:
         22:fa:da:aa:74:c1:bd:3b:21:62:f5:59:8d:45:51:7b:0d:e2:
         a6:99:c4:6a:c7:8f:e2:20:c3:45:28:06:65:3c:48:77:4b:94:
         72:3d:4b:fc:7d:34:c0:2c:85:11:4e:94:e2:60:9f:00:5c:e3:
         de:72:d7:6d:75:15:d3:f8:7c:24:d9:7d:bf:8b:39:04:3b:2c:
         70:a1:88:5b:23:e7:0e:1f:1b:68:34:77:26:79:c3:60:e1:6f:
         cc:31:df:93:0a:f2:6b:cc:24:27:2f:f5:1f:82:5e:3f:cf:1f:
         85:68:22:7f:b6:39:b1:96:0a:ac:80:6a:a1:4f:ca:aa:24:3d:
         93:97:37:0c:a1:18:d0:34:f8:8e:33:b3:d0:e8:52:40:6b:e0:
         08:bb:78:08:05:55:8c:d1:79:59:48:df:16:d5:1e:f6:7c:92:
         8f:bb:04:01:dc:67:1f:f5:f7:b8:e2:c7:18:b2:9f:f0:e6:a1:
         a1:57:7b:87:2a:25:c2:d7:99:95:f5:f4:12:d7:5f:73:21:42:
         37:74:a7:9a:49:3b:5a:2a:84:c1:b7:ce:f4:df:32:3a:11:24:
         36:16:0e:84:27:49:a4:e7:3f:4c:fc:fd:83:69:a3:33:f4:14:
         d5:9f:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:58 2024 by rpki-client on console-fra.rpki-client.org