Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File:                     5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier:          Pf5rapJzkEJmswoE7IwpdSabeNoP2Me9UTrNmS5IRQE=
Subject key identifier:   F0:C0:A6:F9:E8:1A:3A:2A:CA:56:19:F7:EC:8F:57:0F:87:AB:63:47
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer:       /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial:       018F8892802722D062D7830D54AFC2F5BB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number:          0387
Signing time:             Fri 17 May 2024 22:00:53 +0000
Manifest this update:     Fri 17 May 2024 22:00:53 +0000
Manifest next update:     Sat 18 May 2024 22:00:53 +0000
Files and hashes:         1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: c9iTU5GOo8fTw0hduJ20N1B9cweqI2o3ZtnBmXlCFZ4=)
                          2: WShFpAiezmrR6D-4iAhvtzgnjJU.roa (hash: nB1gimX0RBvWjrfPuM4uOO0LCGgCCRo1il/BhDJRR+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:80:27:22:d0:62:d7:83:0d:54:af:c2:f5:bb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
        Validity
            Not Before: May 17 22:00:53 2024 GMT
            Not After : May 18 22:00:53 2024 GMT
        Subject: CN=f0c0a6f9e81a3a2aca5619f7ec8f570f87ab6347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:a8:04:60:62:e7:df:f8:0c:6e:94:78:5d:
                    c8:30:38:e0:ad:e4:e3:91:e9:f1:c3:c8:83:12:ea:
                    58:ac:9a:cb:09:90:61:da:b7:4f:4a:c7:0f:87:04:
                    f3:83:d8:dd:ed:dc:bf:e2:1e:38:63:ef:57:e2:dd:
                    83:d2:6d:7a:52:3f:d7:1e:20:89:c7:f3:6f:07:40:
                    54:d7:45:cc:af:17:a7:4b:87:42:74:90:2d:61:ae:
                    30:39:24:99:78:49:83:73:91:26:9a:55:24:25:de:
                    99:81:07:83:f2:39:49:16:cf:f5:e2:5c:70:21:84:
                    3c:a4:d0:ba:b3:ef:55:c6:dd:49:3e:be:34:6d:29:
                    4a:a4:93:14:a3:3f:5f:8b:d9:3b:b0:da:55:98:84:
                    88:64:1e:a8:d8:10:12:3b:2f:cb:fd:62:ab:2d:04:
                    b7:8a:b8:af:8e:cf:12:f0:93:5e:ee:a3:dc:0e:96:
                    3c:6c:ae:67:74:c8:f6:35:fd:84:38:46:0b:ce:9e:
                    8b:44:28:48:d3:c2:fb:14:f3:11:e2:f1:e1:01:6d:
                    3b:41:5b:a1:75:33:c7:9d:8b:85:1a:c2:ba:bc:b7:
                    ba:6c:9a:23:b4:09:ef:de:69:b4:58:a3:85:2f:51:
                    3c:59:d2:d9:81:47:18:e3:ed:60:2d:f4:6f:8f:43:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C0:A6:F9:E8:1A:3A:2A:CA:56:19:F7:EC:8F:57:0F:87:AB:63:47
            X509v3 Authority Key Identifier:
                keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0a:fb:80:ab:d6:6c:ce:33:b2:92:0a:4b:9a:88:a2:20:cd:
         3d:f1:54:65:11:4b:00:33:0c:1a:1d:2f:27:fa:7d:8f:d5:a7:
         96:ca:11:3b:99:f1:f3:41:9f:f1:e9:ac:3a:34:7b:f8:73:c2:
         19:3d:71:b9:18:e9:32:10:5e:7b:f7:e5:ec:20:21:4f:50:56:
         6d:c8:06:45:62:db:d5:c6:69:14:e1:d7:ca:7d:f5:37:b5:b2:
         3a:7f:f0:76:86:b6:71:fd:e7:b9:ed:cc:be:7f:93:e2:d5:04:
         4b:e5:49:48:50:a3:3e:7e:f9:95:f7:01:51:51:54:da:1b:15:
         fb:43:b5:d8:06:59:78:24:47:79:b1:28:4a:13:0d:18:b4:bd:
         a4:30:e1:fa:cb:4c:0f:1a:92:d9:d2:6a:3a:e6:b7:22:fc:7a:
         4f:b9:e7:9f:36:03:17:be:ff:29:ed:71:c8:5e:cf:b7:04:bb:
         36:84:6e:77:25:15:ae:01:23:36:be:92:39:6a:62:2c:72:66:
         0b:54:e6:7f:d6:21:da:2b:68:fc:72:5a:ff:32:74:53:27:a5:
         06:5c:19:b3:49:56:59:3f:62:94:f3:9d:03:3f:a1:d7:bb:77:
         ca:9d:8e:15:a2:d2:1f:b3:e6:d0:bd:76:bb:e6:5e:1e:46:d7:
         78:21:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:59:13 2024 by rpki-client on console-fra.rpki-client.org