Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File:                     5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier:          YDemsI7QWlXx4vIZ+4aT1ZEztQRVvNYK4gzH8vVirJg=
Subject key identifier:   96:53:AC:FA:87:22:D7:49:37:6B:F1:58:03:65:09:A1:8B:00:E3:D1
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer:       /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial:       018F51DB63A1E9ABA53CA366CFCDA9840D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number:          07E8
Signing time:             Tue 07 May 2024 07:01:23 +0000
Manifest this update:     Tue 07 May 2024 07:01:23 +0000
Manifest next update:     Wed 08 May 2024 07:01:23 +0000
Files and hashes:         1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: USCwM6UCTd5clXY4+/cR7Fwg3vn2WiFsQIj7ktnR1hg=)
                          2: YQeRJqgRleqW4EwBdTJ9nWFg_7g.roa (hash: O6bJdgqBmKQ2xbFoK7ZE6jFr/Nct5UXmjDzAZPJl6tk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:db:63:a1:e9:ab:a5:3c:a3:66:cf:cd:a9:84:0d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
        Validity
            Not Before: May  7 07:01:23 2024 GMT
            Not After : May  8 07:01:23 2024 GMT
        Subject: CN=9653acfa8722d749376bf158036509a18b00e3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:d4:ad:5c:d6:f6:5a:2e:d2:c4:7b:83:e5:
                    fb:ce:e7:6a:fd:47:7c:b8:48:df:6d:77:24:25:40:
                    c0:7f:55:75:07:0c:f8:06:cb:da:3a:12:fc:ed:02:
                    29:33:82:b3:b0:ea:e4:e1:ea:64:24:e8:ca:82:36:
                    cf:44:af:40:98:a7:33:c0:a4:88:0e:3f:19:f1:bb:
                    7e:7e:d4:d6:f3:23:e5:04:72:40:4a:86:f3:ba:df:
                    b2:5c:f0:c7:05:e7:73:3c:c0:d0:d2:91:4b:e1:7b:
                    c5:3b:d1:29:9c:2b:89:87:74:08:be:cc:f8:83:18:
                    da:23:88:39:f8:6d:11:84:36:07:85:b4:6c:92:57:
                    59:6a:9c:c6:a9:6b:75:08:cf:65:c1:d5:14:e7:1e:
                    df:56:5e:cc:e9:5b:48:80:65:ef:51:b8:3d:76:c7:
                    78:fb:bf:bd:0c:4c:64:0b:2c:93:1c:36:52:0e:8b:
                    37:2c:bb:64:9d:48:55:af:92:21:ef:6f:ed:56:ac:
                    33:72:98:1a:08:6a:ff:c6:90:37:77:b6:73:cc:b4:
                    d9:1b:dd:8c:a2:b2:50:e9:65:88:52:84:af:9d:8a:
                    c7:87:56:85:7a:b8:5d:db:a3:8b:4e:a4:83:1d:26:
                    8f:c9:ba:aa:9d:86:e4:89:1d:ed:48:6d:24:21:94:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:AC:FA:87:22:D7:49:37:6B:F1:58:03:65:09:A1:8B:00:E3:D1
            X509v3 Authority Key Identifier:
                keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:82:43:84:c5:81:eb:5d:c3:cb:0d:23:20:0f:fb:d1:90:
         3a:99:4c:8d:d5:f4:34:1b:92:64:03:d0:69:87:2c:a3:06:d8:
         f0:37:e5:a6:db:3e:9e:b1:b9:d0:f0:12:dd:79:34:a8:a9:e3:
         98:8c:b2:92:53:59:ec:ce:e7:f3:e5:5b:75:a9:99:5e:9a:ad:
         49:2c:93:60:05:25:98:0e:98:57:6c:36:32:58:e5:90:6c:1b:
         14:c6:c5:53:2e:4b:31:0e:31:56:c5:78:2b:ad:ef:39:a7:b8:
         44:a7:3c:06:61:c4:ca:79:79:03:af:d0:d8:72:a5:e3:3c:f6:
         1e:70:84:83:52:3c:57:37:a4:27:2f:2f:24:ce:bf:5b:f5:1a:
         3d:07:4e:6d:28:64:1d:ee:60:cd:7e:a6:ad:d1:ef:2c:d7:01:
         f9:36:e9:ae:f0:b5:e9:81:c2:1d:b4:7c:e8:2c:8e:3f:b6:fb:
         f3:85:be:2f:d7:79:2a:23:a8:17:05:13:e6:66:b9:39:9d:30:
         22:d0:8b:00:ac:74:44:00:43:87:bc:87:c7:9a:1f:a6:f9:f0:
         3b:c9:83:55:7c:5b:e6:4a:a2:a9:c3:fc:14:5b:01:42:42:5b:
         75:68:bc:a5:a3:e2:2a:0e:bc:98:68:66:a5:50:b5:2e:9f:3e:
         19:4c:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:50:56 2024 by rpki-client on console-ams.rpki-client.org