Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          fknxXwG4Z/cUIo7AhcI9SuT+1OC40yC+jRS/5ui1Xg8=
Subject key identifier:   8D:54:A3:66:13:30:CC:69:30:C6:1F:DC:DC:C0:0E:30:78:09:13:3A
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       018F4B6D08AA77A8024426FAEB42D0EE220C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          03F9
Signing time:             Mon 06 May 2024 01:03:07 +0000
Manifest this update:     Mon 06 May 2024 01:03:07 +0000
Manifest next update:     Tue 07 May 2024 01:03:07 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: jK5tuqEnGiTMToCvlilqA0CXpNOHWc/MaLxNDFedZQY=)
                          2: LIJdhBw98UAfu409Zwh84mS4RZ4.roa (hash: dOGbpcXHQisJAs++ycAYBST9gy9b4Y/FJtkS7534yjM=)
                          3: urHjBmM5Yy2hHrpmYv2-u6xq51Q.roa (hash: bRUCyaJXoFM9/bv6n9BHxbF0mrBEy9VmCYdXKj0LjBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:08:aa:77:a8:02:44:26:fa:eb:42:d0:ee:22:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: May  6 01:03:07 2024 GMT
            Not After : May  7 01:03:07 2024 GMT
        Subject: CN=8d54a3661330cc6930c61fdcdcc00e307809133a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:95:d9:2e:87:04:fa:fe:5c:34:d7:7a:c2:
                    6f:94:7a:63:40:54:c7:6b:4d:8e:13:00:45:09:7d:
                    e7:06:d0:38:86:fa:0f:cb:cd:fd:0a:44:ce:c4:42:
                    13:72:c4:21:77:ef:18:81:5c:bc:90:d8:0b:d1:07:
                    7e:80:7b:5b:38:01:9c:ea:65:88:08:b7:34:70:c6:
                    9d:b7:73:b3:1a:12:83:b0:90:30:4b:2f:d1:a9:eb:
                    7b:84:94:eb:a0:ea:cc:70:9b:66:a8:9f:93:6e:89:
                    1b:0e:33:b6:12:73:b5:e3:fb:e0:9a:7c:b2:76:75:
                    15:01:4e:76:9d:6d:7a:a2:66:41:d8:2c:89:93:51:
                    ba:f8:74:d3:e8:47:60:c7:50:e7:6b:af:81:47:60:
                    ac:07:2b:b4:6c:b3:87:52:c2:68:14:ea:dd:dc:cf:
                    ff:4c:ee:d0:3a:cb:2c:45:99:ee:84:8d:81:d9:05:
                    96:29:54:aa:19:7a:43:60:8c:33:8c:97:6c:4e:65:
                    a1:57:a0:b2:a5:89:56:ae:f3:4b:86:10:c4:0a:78:
                    75:c3:8c:8a:5c:1f:e8:e3:96:85:f4:bb:90:a0:38:
                    07:90:a4:5e:a0:13:41:81:19:50:de:62:20:a5:38:
                    20:09:04:76:5a:e0:8a:85:de:55:1c:bf:ef:a9:f1:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:54:A3:66:13:30:CC:69:30:C6:1F:DC:DC:C0:0E:30:78:09:13:3A
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:68:49:0e:85:9a:33:65:c6:43:26:57:4f:ba:6c:49:6f:b1:
         5e:c4:5e:d0:71:1b:7e:06:dc:64:e8:63:9b:2d:f0:a4:b4:ff:
         19:13:b2:38:ad:08:d9:22:d8:b7:ac:36:a5:af:ed:79:c7:01:
         d2:3a:e5:c6:f6:98:39:8b:37:15:3f:aa:a8:10:d7:53:56:80:
         16:7e:9f:3e:2b:89:07:8f:36:b8:6d:2f:17:fa:7c:57:dc:e5:
         ce:68:f3:61:1b:6a:a3:71:f1:12:8e:a3:f2:27:bd:42:b3:5c:
         b7:e3:d2:44:71:87:6c:7d:d7:85:65:a9:fb:a7:44:be:82:bc:
         76:34:5d:01:ec:c6:9d:98:15:ca:84:ff:5b:b0:13:dd:7b:da:
         f5:10:c1:2b:ec:21:f8:e7:63:5f:4b:32:7d:82:20:52:2b:64:
         16:56:0e:f0:83:e9:f8:b2:e6:d6:c5:22:c5:ab:6d:1c:4f:31:
         41:53:c7:74:09:37:02:98:cd:21:a4:5e:00:4e:c7:fb:00:61:
         29:d6:59:9d:7f:3f:49:75:1a:9a:2c:09:50:b5:a6:bf:2c:31:
         eb:c7:17:53:f0:40:d9:bb:0b:6b:be:a0:65:52:c6:09:fc:f7:
         65:57:a7:02:7d:21:0f:e2:c5:fe:d9:b4:a4:0c:37:38:a6:19:
         8c:a1:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:14:22 2024 by rpki-client on console-ams.rpki-client.org