Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File:                     S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier:          zAHHICLvhaO9JKfqD0h3giz5XgRTBJLvynH9YbDzyo0=
Subject key identifier:   16:75:C3:30:4D:7B:32:DB:37:14:DC:3B:53:A3:13:32:58:96:2F:8B
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer:       /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial:       018F874A8EB70E64EA7BABE71B1B39B007D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number:          050A
Signing time:             Fri 17 May 2024 16:02:41 +0000
Manifest this update:     Fri 17 May 2024 16:02:41 +0000
Manifest next update:     Sat 18 May 2024 16:02:41 +0000
Files and hashes:         1: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: abV8XOrETtEHukmiY6+zhqGCRjqzMYuoyo23jMWgk8k=)
                          2: nlxS1WBkpSqVdrVHB5cIP6cayy8.roa (hash: 4cxhwoFqKmdPmCW1DjAchMD9K2qNaiw5BSM8+7ZyGU8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:8e:b7:0e:64:ea:7b:ab:e7:1b:1b:39:b0:07:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
        Validity
            Not Before: May 17 16:02:41 2024 GMT
            Not After : May 18 16:02:41 2024 GMT
        Subject: CN=1675c3304d7b32db3714dc3b53a3133258962f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d3:c8:9f:c5:cf:32:3e:f7:b1:af:23:5d:ce:
                    0b:7f:c6:98:2f:29:e6:2d:d5:15:66:0b:cb:37:66:
                    7a:5b:d7:0e:5e:fa:66:82:60:f7:8b:bc:11:e7:4d:
                    a9:d4:8a:e3:91:9f:99:ca:53:f6:64:f6:50:e0:f5:
                    6b:4d:e4:f9:56:0d:81:70:4e:32:db:0b:05:7c:15:
                    70:c9:c8:05:52:a6:72:15:29:cf:01:a0:35:87:06:
                    9d:30:48:2c:78:36:5f:10:7f:bb:18:2e:7c:be:c9:
                    c1:b9:eb:ef:9c:a4:25:54:42:8b:3b:2d:57:14:8c:
                    ef:f3:76:7f:fe:e7:e5:0b:9e:5e:05:c0:43:19:a6:
                    4e:e3:3b:8b:1c:82:ba:ba:17:91:fc:8a:0c:03:28:
                    9d:62:b7:57:6b:6f:a7:25:8e:18:6c:ba:b8:76:83:
                    60:60:8f:c1:97:d7:97:a6:50:44:71:8e:63:a3:cd:
                    a0:09:2f:77:fe:d9:9a:59:4a:d1:fb:fc:76:92:8a:
                    2e:dc:ce:43:58:22:25:cc:1a:be:13:b3:a2:4d:2a:
                    e5:a0:63:3d:bf:43:87:d0:46:cb:6f:dc:bb:91:68:
                    1c:aa:ca:1c:af:f4:57:7b:8d:8a:0f:08:78:11:bc:
                    2b:a7:80:c0:79:80:19:3c:bb:d7:5f:50:d8:94:09:
                    6f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:C3:30:4D:7B:32:DB:37:14:DC:3B:53:A3:13:32:58:96:2F:8B
            X509v3 Authority Key Identifier:
                keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:3e:ea:b4:fb:b6:6a:c4:65:45:7f:1f:f6:8f:16:ef:18:
         a2:3e:80:23:c7:be:83:94:fa:6a:04:69:ef:df:10:b1:d3:19:
         71:ef:29:e6:ff:99:5f:6a:66:a7:73:9b:29:33:3b:fb:c8:a5:
         8d:63:ab:7c:b2:14:82:67:5f:b1:e2:3f:26:d4:6e:02:c3:b9:
         18:ad:76:8c:ff:be:bb:b4:21:70:22:02:cc:8f:5c:dc:ff:f0:
         1f:ca:ba:9c:e3:1e:c5:34:a9:cc:b2:32:44:cd:94:be:2a:ae:
         e6:4b:d3:ec:7f:6c:9f:b6:b0:7e:4e:45:1a:25:ec:3f:9c:69:
         61:ee:b4:40:e2:15:99:0a:8d:46:d7:ee:c6:2b:9c:27:e8:0a:
         79:5a:48:aa:38:8f:c1:86:0d:e2:79:2e:d5:ad:08:a5:bd:ea:
         4f:11:d8:ee:d5:43:b3:58:d7:a5:59:0d:d8:94:9c:12:64:f1:
         ef:8e:06:09:54:0b:b7:cf:a7:6e:f7:82:ff:2c:b1:b9:03:f1:
         84:16:99:9c:f9:6d:8b:7e:e4:dc:3c:7a:44:c4:72:48:b2:b2:
         5c:a9:4c:11:d1:3a:32:5c:71:d0:ee:4a:09:cb:c2:13:27:46:
         92:d6:a6:dc:fc:cf:10:af:95:f3:8d:a2:59:20:94:67:ba:b6:
         60:d1:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:45 2024 by rpki-client on console-ams.rpki-client.org