Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File:                     5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier:          KI7QBpNJmujaWVd3o6an6Um4WxeMg+lDXQoOJRtas5I=
Subject key identifier:   90:B1:37:7F:00:2C:5A:4E:6B:08:84:53:8B:70:5D:F5:D3:87:D8:50
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer:       /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial:       018F38BFAE5E517F05661E0AB80C5878E275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number:          10DF
Signing time:             Thu 02 May 2024 10:00:37 +0000
Manifest this update:     Thu 02 May 2024 10:00:37 +0000
Manifest next update:     Fri 03 May 2024 10:00:37 +0000
Files and hashes:         1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: bzIl51FjO1LDPodaUPhgMXjY6PX6XsK9xG/XVwmaoTg=)
                          2: LXhAPtmUJ6-Zp7m1RzZJEjPD7Fs.roa (hash: Yd1JGC4TFUt+BK4lIH/4WaKrehmwQ3QtYK00q739UCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:bf:ae:5e:51:7f:05:66:1e:0a:b8:0c:58:78:e2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
        Validity
            Not Before: May  2 10:00:37 2024 GMT
            Not After : May  3 10:00:37 2024 GMT
        Subject: CN=90b1377f002c5a4e6b0884538b705df5d387d850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2f:25:e5:93:55:c6:77:ae:d8:5f:39:51:f4:
                    c1:58:e0:84:47:97:de:5b:bb:9c:40:69:99:83:92:
                    26:cc:47:56:9c:81:83:28:57:f2:76:24:de:7a:d7:
                    33:a2:de:86:c5:63:51:38:14:84:98:95:51:9e:55:
                    bd:95:3e:74:51:ab:ce:04:fd:bf:ec:c1:bf:3d:43:
                    af:bf:0a:9a:8f:b9:b5:57:b1:ef:34:86:57:63:3c:
                    9d:ee:f0:f8:ad:6b:e7:89:4d:c8:fb:d1:38:ea:b0:
                    9c:31:98:e1:e4:f7:6d:ea:21:75:86:5a:d4:6b:a4:
                    2d:f8:06:ab:20:a0:1e:ce:c9:f7:e7:a1:5d:c9:c6:
                    83:63:da:f8:be:58:db:20:d7:6a:9e:6c:35:bb:88:
                    34:68:62:b3:09:db:83:ab:1f:37:8e:e4:a7:1c:ed:
                    3e:96:38:8d:35:f2:f9:a2:14:b4:1e:b0:78:78:df:
                    bc:12:a8:4b:09:79:fd:96:33:85:0b:12:f2:19:ec:
                    36:eb:2c:b9:d7:18:d3:ad:0b:85:63:b8:85:fc:5a:
                    8a:f3:75:f7:4b:60:8c:cc:6a:87:1d:97:59:9f:a9:
                    95:03:3a:4e:c3:25:6d:ed:27:c6:3e:b5:0d:32:ce:
                    36:2e:8a:43:97:0e:9d:4c:6f:22:fd:e9:b6:fd:c2:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B1:37:7F:00:2C:5A:4E:6B:08:84:53:8B:70:5D:F5:D3:87:D8:50
            X509v3 Authority Key Identifier:
                keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:34:98:43:96:b6:fa:21:bd:6e:60:6a:2a:7f:a3:33:49:
         84:5e:bb:f8:8b:95:d8:a7:d5:95:40:73:f5:c8:d5:86:9f:41:
         a8:8d:08:2f:2b:b7:e2:7e:0a:a9:3d:c0:d2:b8:c2:65:86:b7:
         b7:f3:69:cd:df:dc:b6:5d:9b:9f:d7:a0:9f:07:c9:7b:ab:36:
         b8:ad:f3:48:5b:44:3b:20:1c:0b:35:73:79:9e:e3:9c:60:14:
         55:9a:5d:3a:da:26:21:a6:69:13:2a:39:ba:17:c8:0f:5e:cc:
         c7:9c:1a:17:84:ef:96:f5:04:65:2f:c8:64:6b:95:b6:7c:3a:
         c4:e2:2d:bc:06:2b:2f:8b:32:9c:53:b0:3c:20:a7:2c:6b:7f:
         7a:35:c5:49:51:14:fa:b4:68:d1:af:3a:02:9e:3b:05:7e:2f:
         b5:55:88:84:55:03:e7:ff:05:b3:a3:e9:b0:91:a7:87:0b:48:
         a0:a7:c1:ea:b7:dc:49:04:63:b1:c7:24:71:46:7a:9f:23:47:
         1d:4f:5e:7b:54:90:f5:00:d0:93:68:9a:b0:91:61:e0:51:21:
         d4:37:72:01:2f:d4:8a:86:8a:70:e0:2b:28:c0:cc:2e:6a:ee:
         52:e3:6c:8a:6e:9a:01:b1:09:7f:34:2a:63:8c:44:a5:cc:9f:
         f3:35:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:34:30 2024 by rpki-client on console-fra.rpki-client.org