Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          9+5XB++s9BsrkxxHl3DAEk3PM0ITghpWDTOjtH+ghe0=
Subject key identifier:   38:16:8D:AB:CA:B4:64:8C:99:AD:63:05:9D:CD:FB:9F:3C:3E:02:82
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       018F4C1009F1FA363781E96951BAE099E4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          079B
Signing time:             Mon 06 May 2024 04:01:10 +0000
Manifest this update:     Mon 06 May 2024 04:01:10 +0000
Manifest next update:     Tue 07 May 2024 04:01:10 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: WQMEp5H+5uh0dJoJsoe8BYXg1wCetxI/g/WUOvEk+UY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:09:f1:fa:36:37:81:e9:69:51:ba:e0:99:e4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: May  6 04:01:10 2024 GMT
            Not After : May  7 04:01:10 2024 GMT
        Subject: CN=38168dabcab4648c99ad63059dcdfb9f3c3e0282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:84:14:d9:ba:94:bf:34:22:0c:2b:1e:fa:
                    3a:1c:5d:f6:56:70:ee:2b:62:07:3e:d7:e3:31:35:
                    60:9a:7d:05:a0:18:6e:b5:83:61:aa:0d:ee:83:49:
                    7f:37:40:d1:71:8b:fe:cd:f8:28:e8:f3:7d:3a:64:
                    7c:87:fd:bd:c4:25:d9:7b:55:c8:4f:b5:3d:88:bc:
                    8d:2b:62:59:3f:04:e0:0a:32:2b:5d:bc:2e:34:59:
                    c9:b9:db:61:2a:10:e7:5f:dc:54:35:8b:06:97:df:
                    2e:c0:48:da:78:12:fa:ab:9d:2f:2e:f0:bd:11:38:
                    d9:6f:e6:c7:25:94:91:31:2b:b7:8d:d9:c2:73:95:
                    64:4b:20:e2:ff:8e:5d:93:9f:62:2a:3f:31:cc:cd:
                    f5:ad:c3:d9:3c:7a:31:73:35:2e:50:c7:6b:de:2d:
                    f9:ca:5c:14:1a:01:39:97:81:7d:fc:f7:e2:31:38:
                    47:fe:d2:a0:f7:a6:93:31:e4:79:34:ff:33:7b:ee:
                    bc:2e:6b:d2:6a:97:40:ea:78:78:59:21:cd:31:6a:
                    7e:d4:11:2d:0d:c1:33:ff:96:f7:86:64:b6:eb:24:
                    fd:12:b5:90:5a:08:a6:37:d7:c4:71:09:ff:34:b3:
                    ad:bf:25:73:64:6a:0b:13:55:3e:a1:d6:ed:2c:d1:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:16:8D:AB:CA:B4:64:8C:99:AD:63:05:9D:CD:FB:9F:3C:3E:02:82
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:e8:25:68:8f:09:4d:45:93:75:67:a6:76:a6:dc:e2:5b:
         4a:a0:34:94:27:ce:02:5c:45:39:34:f9:7d:5f:41:4a:32:1b:
         98:8e:aa:de:ed:8f:ef:9c:5d:a5:a0:6d:90:cc:5a:61:ad:46:
         c1:26:d4:41:f7:12:5f:72:cb:87:de:80:88:c1:8b:d4:b3:f8:
         ee:ce:57:8a:2e:59:0d:6f:b2:aa:41:42:fe:5b:4c:99:91:0b:
         1c:0c:3b:4f:5b:55:fe:2e:c7:07:6a:6f:f0:3b:c9:93:84:3c:
         b4:c0:d0:86:f6:b4:a0:70:90:99:b6:9f:30:cc:e3:33:02:cd:
         35:21:12:49:4a:49:a2:69:11:ad:ca:66:2a:6e:43:a8:9d:48:
         01:ca:05:b2:c4:24:a6:c5:b6:cd:e7:98:61:a6:01:5f:b4:75:
         24:f2:c0:e4:8b:96:9e:dc:bd:d4:35:57:6d:6d:a5:a0:99:98:
         e9:26:93:25:cc:bb:60:64:ab:47:e5:2b:99:76:c1:cd:29:40:
         14:b9:e0:0e:f0:80:af:90:81:3d:d2:b8:89:b5:60:1b:ce:13:
         39:aa:7f:bb:d2:2c:4d:d2:91:09:74:06:df:63:e6:5c:cf:b5:
         10:4b:f4:d0:6a:61:85:90:d9:a1:9c:df:01:94:52:19:68:a6:
         c1:4c:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:43:19 2024 by rpki-client on console-fra.rpki-client.org