Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File:                     1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier:          B0JeW5sAmxYB0Dpce35xyUwm9P9j79B4h9v3GQINEHc=
Subject key identifier:   F6:35:62:7A:A0:9E:6F:93:B9:52:96:F5:F7:53:7B:E9:0D:6D:F7:1C
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer:       /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial:       018F44C4C218CED5DCF406A038BC348B2E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number:          053E
Signing time:             Sat 04 May 2024 18:01:36 +0000
Manifest this update:     Sat 04 May 2024 18:01:36 +0000
Manifest next update:     Sun 05 May 2024 18:01:36 +0000
Files and hashes:         1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: wVu3J+3lTxelyjWiKpi+6fO0cdFthGU7a0rra5nbHis=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:c2:18:ce:d5:dc:f4:06:a0:38:bc:34:8b:2e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
        Validity
            Not Before: May  4 18:01:36 2024 GMT
            Not After : May  5 18:01:36 2024 GMT
        Subject: CN=f635627aa09e6f93b95296f5f7537be90d6df71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6f:7e:d1:da:1a:4f:09:01:0b:38:99:83:be:
                    03:4d:09:41:f5:e7:86:7b:ce:6d:30:34:03:bd:17:
                    5e:f6:bd:8d:cb:59:56:d8:a9:40:b5:53:46:2a:67:
                    b0:68:66:6f:4d:54:20:4c:35:39:40:89:32:b7:bd:
                    5f:dc:b8:e8:70:6e:d0:fe:9f:c9:4e:8a:54:c6:34:
                    02:58:83:b2:98:e8:96:2e:8e:7d:4c:d3:15:9c:fe:
                    1b:f8:85:78:50:ea:1e:06:ec:e7:df:d2:7c:23:f7:
                    4c:01:3a:9a:52:1e:55:68:99:ea:20:78:84:fa:c6:
                    d4:b7:91:63:95:41:72:bb:26:2c:38:b8:b0:2e:34:
                    a0:7b:75:3c:82:34:a3:ac:74:1c:00:73:eb:c4:2f:
                    59:a6:45:67:38:85:d2:d1:9e:6a:34:de:d6:5f:77:
                    68:1f:bf:6e:40:db:05:8b:ab:38:54:b2:4b:1e:02:
                    b7:68:bf:e6:ef:6e:98:2b:9a:21:82:6f:12:f1:b1:
                    71:2b:75:d2:6b:3c:69:61:4b:8a:bf:84:37:74:89:
                    79:92:04:31:42:43:5e:79:16:5c:5f:83:99:28:50:
                    c8:90:d6:06:5c:86:d2:0a:5a:9e:55:cb:c0:a6:cc:
                    0a:16:89:d1:96:24:4c:b8:dd:67:63:1d:9c:91:d9:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:62:7A:A0:9E:6F:93:B9:52:96:F5:F7:53:7B:E9:0D:6D:F7:1C
            X509v3 Authority Key Identifier:
                keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:01:5c:45:b1:c5:30:4b:21:6b:77:48:81:63:09:65:42:
         6e:da:bf:d4:f5:71:15:1d:c1:10:a6:3b:6e:3f:ca:f9:f7:29:
         40:dd:6b:3e:51:7d:4c:ae:3a:0c:b2:41:ee:9a:52:63:58:1d:
         ab:46:7a:dc:bd:ea:72:36:2d:ff:83:44:a0:d0:e8:f6:b7:c5:
         b1:1e:92:d2:b6:74:d9:aa:9f:df:ba:01:76:be:65:1f:b2:b3:
         60:ea:fe:3c:ba:5b:64:0f:f1:27:80:9a:f4:a3:0e:03:48:79:
         2c:ed:d2:e6:52:d3:ea:d4:49:c2:34:87:98:05:9f:ae:51:16:
         13:d6:c5:db:a3:d4:19:5d:45:a3:e2:eb:a1:20:5b:30:1d:fa:
         42:41:49:0e:fd:5f:d5:fc:30:f9:a4:16:e9:be:10:a3:4f:3e:
         ea:df:c7:e8:e1:c5:83:1c:b4:c8:9d:f1:ab:13:f3:10:4d:0b:
         e5:3e:a5:fc:ca:e5:ef:24:c8:98:a2:04:82:f5:c8:ee:86:44:
         36:af:bc:cc:d5:46:23:bf:c0:44:49:f7:3f:af:9a:93:6d:dd:
         89:8c:fe:74:1a:cb:15:b8:7b:7b:39:9a:e5:76:7d:3f:91:31:
         41:20:c5:cc:17:19:40:66:74:c1:ad:f5:6a:4b:60:06:38:aa:
         46:44:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:50:22 2024 by rpki-client on console-fra.rpki-client.org