Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File:                     9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier:          6Hkj2Cfxo2bUriPfZJT6h0bSIE+Y5hbtaofs6+IHf38=
Subject key identifier:   F5:9E:9A:2A:59:54:A6:9A:47:F3:40:C9:85:A1:10:B3:70:45:16:AA
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer:       /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial:       018F3CD3E71332A42CC142C3859F5B50F535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number:          0956
Signing time:             Fri 03 May 2024 05:01:11 +0000
Manifest this update:     Fri 03 May 2024 05:01:11 +0000
Manifest next update:     Sat 04 May 2024 05:01:11 +0000
Files and hashes:         1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: pGph+H6KeVMhNbK3dRvpXwtuOm0kZtgx4iP6vATm7sE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d3:e7:13:32:a4:2c:c1:42:c3:85:9f:5b:50:f5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
        Validity
            Not Before: May  3 05:01:11 2024 GMT
            Not After : May  4 05:01:11 2024 GMT
        Subject: CN=f59e9a2a5954a69a47f340c985a110b3704516aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:4e:8c:8e:29:a8:fc:6b:73:4f:fd:cd:87:
                    90:56:19:2b:8b:78:45:28:ef:4e:1c:ed:a4:fb:06:
                    b2:ef:21:98:63:b7:2a:a0:c2:09:28:c5:1c:cc:6c:
                    5d:55:89:ce:ff:f7:60:8b:69:8b:99:4d:1d:f9:f5:
                    1f:15:93:34:6f:8d:fd:bc:57:f3:cd:ae:83:b8:b2:
                    dd:18:13:b4:f4:e0:69:17:c9:d5:c5:ce:bb:2d:1c:
                    cb:6d:fe:d3:eb:f5:d2:04:82:13:67:55:54:f7:49:
                    ee:32:7f:8f:57:62:64:bc:c4:c7:d6:73:cb:1b:19:
                    5f:f1:81:d2:a8:f6:4a:a7:f9:3b:5b:95:82:3a:2c:
                    84:d2:e6:c3:b0:1b:97:9a:27:7a:d3:c2:bc:f9:cc:
                    ea:a2:2f:f3:ac:41:b0:5d:f6:dd:9b:f9:2b:32:e6:
                    4b:26:d3:b5:53:04:28:01:b3:68:0c:14:41:61:c0:
                    93:e7:49:92:33:cc:fb:08:d6:34:dc:46:43:f1:10:
                    19:89:d0:24:02:27:20:2a:5a:ef:4e:74:f7:7e:d2:
                    c2:93:6d:3c:5c:0b:26:83:08:18:5f:5a:c6:e3:8f:
                    3a:a8:e2:29:a9:a4:c5:1e:2f:c1:d8:86:8e:c0:bc:
                    83:59:07:d5:76:30:12:26:15:1a:64:61:58:8e:ba:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9E:9A:2A:59:54:A6:9A:47:F3:40:C9:85:A1:10:B3:70:45:16:AA
            X509v3 Authority Key Identifier:
                keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9b:d0:cf:5f:5d:1d:49:c8:6a:9d:c1:f2:00:d6:86:2a:68:
         a9:7e:49:3b:5e:8f:6e:e9:0e:b9:fa:5f:d4:e8:92:f8:e4:e7:
         80:5d:51:bd:10:ec:26:b7:ec:52:08:12:21:92:fb:fe:b6:d3:
         73:48:fb:63:7b:00:65:1c:0c:1a:16:47:2b:8a:5d:1b:f1:87:
         35:11:02:b2:fc:db:e4:5a:c1:a7:80:cf:63:c7:2d:6d:26:e7:
         22:21:79:60:6c:97:77:f5:a8:40:a2:ab:78:0a:69:b4:86:73:
         f7:a7:ab:5e:7b:f0:9c:8d:67:44:df:50:dc:8e:73:04:0c:8f:
         f9:5f:c7:38:b5:61:65:c4:c0:44:af:ad:74:2b:68:45:d3:4e:
         ca:de:af:e8:d4:50:8a:cf:5b:c5:fb:11:69:59:7a:69:55:5e:
         6f:bb:43:16:4b:e2:00:93:1b:be:60:d3:73:a2:2b:82:ae:98:
         72:0d:36:5f:6d:51:4b:c2:6e:a5:fd:99:ad:57:2a:4f:9e:8f:
         bd:cf:b6:d6:85:7f:93:8b:80:7e:b4:11:24:0c:85:b6:c7:87:
         45:de:e9:dd:cb:90:3a:cd:a4:ef:b7:7e:e0:38:e3:9e:ae:55:
         2f:91:b6:6e:e2:d2:3a:d1:33:f1:34:a3:1a:0b:7b:4e:30:08:
         56:d7:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:28:10 2024 by rpki-client on console-ams.rpki-client.org