Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File:                     5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier:          6oJ8q5MFPyQ/Lq6vAEqPORQh3W3pYQWaWuyBoJTLQLc=
Subject key identifier:   69:C0:A2:08:1F:80:D5:01:B6:BC:E5:EC:09:E2:CD:FE:FF:A1:44:72
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer:       /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial:       0192102CDABA3FF5FA4070B98DBBFD9D48C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number:          09BE
Signing time:             Fri 20 Sep 2024 16:03:47 +0000
Manifest this update:     Fri 20 Sep 2024 16:03:47 +0000
Manifest next update:     Sat 21 Sep 2024 16:03:47 +0000
Files and hashes:         1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: n4bkb3ksBJg15PIDzcZQ7GC32R62Nl+AHcMatkoybz8=)
                          2: RMCegWbK44mDkBYwVAYKpKopYEs.roa (hash: zbZ4GAnGgdz4pVtHPNevbp6HO/aEDiIInWfMYePeoZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:2c:da:ba:3f:f5:fa:40:70:b9:8d:bb:fd:9d:48:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
        Validity
            Not Before: Sep 20 16:03:47 2024 GMT
            Not After : Sep 21 16:03:47 2024 GMT
        Subject: CN=69c0a2081f80d501b6bce5ec09e2cdfeffa14472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:ff:4b:c4:24:7a:f2:02:20:f7:be:b7:71:
                    7d:00:8e:49:73:ce:81:d4:dc:89:87:8b:b5:16:69:
                    25:4c:e4:5f:55:c3:40:b6:49:d1:e9:3b:14:f8:1c:
                    8c:04:7f:bf:da:82:5b:f2:24:08:b1:09:f7:13:f4:
                    d2:92:3b:a1:1f:b4:11:be:2b:d6:02:34:bf:1d:c6:
                    77:9c:91:04:c7:a6:0b:92:9a:33:2c:7e:0e:ca:b5:
                    08:13:ae:78:50:13:e4:a3:20:a2:27:c8:8d:fe:7d:
                    1d:33:9f:07:0c:18:2b:aa:db:03:88:e4:6d:be:c2:
                    47:09:cd:2c:ce:48:4a:56:5f:cf:ad:a4:d0:b1:6d:
                    f8:3d:a8:b0:f9:c4:71:41:59:9f:6b:43:b1:3e:f1:
                    4c:c7:4f:cb:57:17:1f:b9:7b:87:f7:a3:6a:fe:9c:
                    df:02:35:ce:28:3a:b3:49:4e:cc:bb:34:1c:07:3c:
                    9c:e5:90:dc:98:e5:5b:74:a9:85:15:ed:65:6e:fb:
                    6a:cb:d7:3d:0c:05:79:b0:47:2e:96:b1:61:14:ee:
                    b4:fc:b0:d9:22:cc:fe:30:37:a8:ee:af:6f:dc:dd:
                    0d:57:76:d8:fb:01:9c:0d:32:f7:49:c8:5b:26:88:
                    62:12:ba:3e:61:fa:6b:6a:fa:93:e1:c6:de:6e:a8:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C0:A2:08:1F:80:D5:01:B6:BC:E5:EC:09:E2:CD:FE:FF:A1:44:72
            X509v3 Authority Key Identifier:
                keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c2:a6:b3:c5:02:33:36:2c:ba:30:52:0b:32:61:65:ba:4e:
         bc:dd:6f:05:40:8c:13:da:42:88:d6:db:6d:4d:a6:05:96:be:
         28:13:63:d4:11:57:a4:bc:ef:92:1f:f7:42:06:2a:6c:5b:97:
         fa:f8:69:76:7a:9a:57:9e:fb:fd:ff:22:9d:77:ce:0d:50:2e:
         f5:5a:91:83:c6:a7:90:63:05:ec:fa:22:b9:59:96:01:1a:72:
         6f:f4:91:2e:82:30:af:e9:07:af:57:ea:41:eb:15:73:44:91:
         f0:a9:9d:ac:ef:1a:08:b3:6c:0f:7e:07:54:e9:7a:6d:67:d4:
         51:0e:65:1e:39:de:03:90:84:30:04:d0:4e:a3:3c:4e:5c:70:
         66:e9:cd:59:5c:25:58:08:1f:3e:61:f7:ae:a8:bf:09:a8:6b:
         93:a9:1f:07:1a:4c:bf:bc:40:0a:4e:a4:1e:50:07:c0:f5:bd:
         05:2a:45:48:07:ed:54:4a:df:35:44:37:7d:d2:70:d4:11:03:
         4d:c2:da:f1:a9:84:bc:a7:38:11:5b:14:9c:b5:85:d9:ff:5d:
         a1:ab:95:8e:c1:0c:73:67:07:5f:b8:3f:04:08:00:3f:98:29:
         5d:69:cd:cb:4c:85:af:1d:4c:05:2e:61:24:b8:34:e0:7c:3e:
         04:56:44:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:18:08 2024 by rpki-client on console-fra.rpki-client.org