Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File:                     m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier:          hzNINhBUatafir+HSl5Cx/5H7swMfC6yGw+DKmk7Ves=
Subject key identifier:   E8:9F:CC:4C:78:5C:19:CB:5E:42:08:76:D1:A0:95:03:F9:71:5B:F3
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer:       /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial:       018F87B62A3D02E06607C4DE54B264AC3628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: zGYKmPbwZwDqADmyme3VtTUnpYxoAKcpYMmVy5wPYfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:2a:3d:02:e0:66:07:c4:de:54:b2:64:ac:36:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=e89fcc4c785c19cb5e420876d1a09503f9715bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:03:c3:64:1a:8b:10:bd:ce:32:25:97:fe:4f:
                    e3:6d:b7:61:f2:a2:3c:4e:35:ef:b9:80:66:55:c5:
                    f9:bd:5f:0f:22:9f:ee:93:f9:ef:5c:c6:3b:37:91:
                    77:dc:07:22:ca:36:05:2d:62:c6:51:a2:36:fe:dc:
                    ff:ba:09:5d:b4:33:c9:6c:79:e6:3b:f7:f2:89:ab:
                    72:70:a8:59:f5:40:7e:19:54:a0:3f:0f:7e:38:32:
                    3d:2d:e4:33:e9:67:e4:e0:5c:28:c7:11:88:87:52:
                    8f:79:47:ff:da:da:42:e2:e4:1d:a6:54:27:85:cb:
                    29:22:f0:12:33:14:d1:a8:13:31:41:5c:d2:65:d6:
                    23:15:26:6f:11:86:cc:fb:6c:ac:82:38:70:72:6c:
                    c4:b6:14:b4:50:69:88:8b:d3:08:ff:a5:01:e6:d2:
                    1f:9b:27:a8:22:f2:4f:04:34:4d:95:31:b5:3c:c6:
                    1f:ad:b5:ee:3d:b4:8b:9d:99:12:0b:5c:c7:f5:e4:
                    e3:93:3a:cb:3f:df:aa:c4:25:a6:75:89:49:99:d6:
                    b1:30:8d:2c:89:e3:08:33:a5:c1:c6:30:48:ea:63:
                    4e:c8:63:23:68:65:31:9d:da:2a:9e:60:9e:d3:c9:
                    d7:2d:3d:ca:e0:01:cc:1a:76:62:84:95:ab:5d:1c:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:CC:4C:78:5C:19:CB:5E:42:08:76:D1:A0:95:03:F9:71:5B:F3
            X509v3 Authority Key Identifier:
                keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c8:dd:67:ab:6e:76:d1:77:55:18:c6:c4:0e:cc:89:fe:03:
         f5:29:86:c2:7f:23:ff:35:e9:82:56:cb:36:90:b9:11:6a:86:
         46:d6:b6:a5:88:ec:6b:b5:ac:9f:df:ae:58:e0:a5:c0:78:fa:
         a8:5b:34:3b:5e:92:36:c6:c8:57:89:74:88:81:dd:89:2e:06:
         8c:a8:25:94:a3:6a:41:76:70:7d:44:cf:bb:be:0f:0f:f0:c5:
         56:ef:bd:73:fc:25:49:b9:5c:8c:39:80:ef:da:b3:d8:e3:5a:
         0b:e8:c7:9e:8d:f9:84:41:ff:fb:b8:70:ca:26:f9:26:ef:b6:
         db:9d:9f:83:c6:50:4c:04:28:ae:fd:c8:21:de:fe:10:f0:5d:
         df:8b:3f:c1:ca:b2:0e:5f:17:d7:08:60:66:ce:28:e3:64:8e:
         85:2d:bd:64:1e:da:eb:85:b4:90:a0:13:f1:ab:a5:7f:5f:c6:
         56:bd:20:5e:fd:d9:0f:18:48:90:b3:de:6d:b2:6a:58:c0:bb:
         e6:49:e4:b3:e4:4f:ef:85:3b:c0:8d:f6:4a:e5:ff:83:b4:91:
         4f:41:c2:ae:fc:06:ce:28:7f:ea:77:af:23:12:de:a8:5b:07:
         36:20:03:26:d0:49:d1:a0:d0:b7:fa:d6:75:ca:87:de:0b:c0:
         5e:b3:bc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:38 2024 by rpki-client on console-fra.rpki-client.org