Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          QX1WMrFWjYQVDFaNtR6OZICoSfkEjxY70kP7mv16lBs=
Subject key identifier:   98:58:C5:7D:47:C0:65:F3:3D:0D:4D:03:37:9A:F5:80:8A:FC:2A:B8
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       018F4268AC6D5A2D1B19B8681D3FCE4B4887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          10E4
Signing time:             Sat 04 May 2024 07:01:47 +0000
Manifest this update:     Sat 04 May 2024 07:01:47 +0000
Manifest next update:     Sun 05 May 2024 07:01:47 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: onfIdhGWYkxXVpU7KRzA9EXk4gm7xBo7UiQusBEJWac=)
                          2: IscRX77BIU-TIBJvu7LhTXcbbK8.roa (hash: aS9FdAKbF7K/Ln1C8cgMLMcYXEX+xvxrZNddd3l0oxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:ac:6d:5a:2d:1b:19:b8:68:1d:3f:ce:4b:48:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: May  4 07:01:47 2024 GMT
            Not After : May  5 07:01:47 2024 GMT
        Subject: CN=9858c57d47c065f33d0d4d03379af5808afc2ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:ec:98:7c:09:33:a7:52:b4:cb:53:b4:f3:
                    c7:da:29:e2:f2:2a:16:11:d6:f5:cd:e0:2f:87:e1:
                    c6:0d:3f:e4:12:37:a3:5f:8e:70:83:b4:88:aa:0c:
                    7a:5d:94:9f:27:fd:70:84:57:05:e0:f8:88:6c:8c:
                    77:02:11:33:76:a7:4e:dd:04:50:48:1c:be:8e:b2:
                    01:1d:02:bd:b4:70:11:29:1e:80:c9:ce:85:c3:f4:
                    d7:45:a5:ea:58:47:55:68:a0:98:ac:2a:dd:a4:72:
                    f2:aa:1f:f7:01:6f:b8:fb:e6:59:af:b9:61:f9:47:
                    29:72:59:32:90:ca:b7:a2:a0:7c:5b:63:5d:64:95:
                    f7:94:4e:10:02:b2:99:07:0e:d0:cc:c1:4e:4d:14:
                    23:d5:69:15:33:4b:1c:47:26:70:ae:a9:c1:0f:0a:
                    c7:58:b9:95:f5:52:f8:25:e9:7d:6c:e0:4d:11:cf:
                    75:6e:9f:7a:9f:e5:a0:b3:21:1f:79:82:a8:33:1b:
                    a0:fc:99:bf:ab:24:02:fb:8c:02:af:cc:41:90:f1:
                    7b:01:7e:52:8f:a8:6a:5d:a1:33:0d:bd:7b:a6:cb:
                    f1:60:93:7e:18:e6:ac:4f:23:fe:a1:26:6f:c2:e7:
                    4b:87:e0:53:79:e0:3c:0b:21:7a:8e:ac:ae:f8:a8:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:C5:7D:47:C0:65:F3:3D:0D:4D:03:37:9A:F5:80:8A:FC:2A:B8
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:94:8a:e1:93:ed:31:af:d4:38:63:d9:fa:e9:94:0d:b5:
         48:91:32:7d:17:f1:71:e9:da:dc:f6:ca:a6:f1:cf:ab:73:3d:
         ed:74:d6:1c:f0:9f:fa:cb:85:c0:bd:79:b2:e7:33:3c:11:7f:
         26:a2:d0:45:d4:77:3c:a9:cd:c0:d5:b7:25:7f:e4:07:a0:b9:
         5f:ce:e9:1c:da:1b:2c:74:54:ae:8f:f4:1d:14:6a:5b:0a:a1:
         8a:74:0d:ec:94:ba:4e:97:c7:c8:16:72:5a:60:f6:18:1a:2c:
         b9:8c:d6:15:45:aa:8b:cc:36:e2:f8:b4:8b:7b:2b:2a:40:80:
         3f:eb:cc:ae:f4:f0:00:14:d3:01:37:52:e2:ac:ee:d8:d2:bf:
         6a:4e:ed:3b:c7:ea:c3:03:47:91:1c:73:08:42:6b:8e:49:58:
         07:4a:4c:3b:8a:9c:5f:52:18:21:74:9e:18:ef:58:76:48:90:
         ac:c1:0b:b6:d4:7d:cf:47:12:89:3f:64:2d:f6:8b:b8:e4:33:
         91:76:b1:a2:e4:f9:d4:c8:a3:c1:94:f2:bf:d5:de:81:01:3d:
         17:34:4f:5c:ba:df:11:ac:3b:47:da:40:b7:40:23:da:30:75:
         ff:04:25:de:b6:97:e5:ef:04:de:b2:30:22:f1:f9:ea:91:d0:
         30:1f:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:53:58 2024 by rpki-client on console-fra.rpki-client.org