Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File:                     5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier:          Gju1WAh0y/pBbnNA8zuIUBlBOSQ5MZjiYYy2qY5tUXs=
Subject key identifier:   1B:5F:97:87:EB:EE:A4:2D:3F:5E:07:D8:9C:B7:29:12:6D:AF:D8:9E
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer:       /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial:       018F1F001CF8DC473763887FC7ED0AFACC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number:          045F
Signing time:             Sat 27 Apr 2024 10:00:52 +0000
Manifest this update:     Sat 27 Apr 2024 10:00:52 +0000
Manifest next update:     Sun 28 Apr 2024 10:00:52 +0000
Files and hashes:         1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: rF4VHvAfL16ljbtV8s7VnIcRhLU3nWTIlituaowaL74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:00:1c:f8:dc:47:37:63:88:7f:c7:ed:0a:fa:cc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
        Validity
            Not Before: Apr 27 10:00:52 2024 GMT
            Not After : Apr 28 10:00:52 2024 GMT
        Subject: CN=1b5f9787ebeea42d3f5e07d89cb729126dafd89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:17:ed:26:53:60:d9:da:a8:86:40:6e:8a:
                    f2:bc:60:ba:7a:0a:6c:cd:dd:c0:d4:38:52:41:ce:
                    db:82:8b:a9:c1:62:f7:97:76:0e:9f:fa:61:bb:1e:
                    5c:c7:25:ae:9f:51:1a:37:74:3e:fe:27:df:64:eb:
                    8e:f1:00:bd:3a:01:4d:4b:03:1d:8d:46:08:ad:89:
                    d5:d1:95:ee:ff:fa:18:25:5b:10:eb:83:c0:90:ff:
                    26:f4:b9:d4:3d:a6:71:82:4c:3a:8a:3d:1d:1f:74:
                    2f:6f:0b:6d:d4:6d:9c:ed:85:63:a9:af:be:e0:b1:
                    1d:1c:19:89:4b:b7:54:ba:2c:26:cc:c0:ff:5a:0f:
                    2a:b4:75:ee:49:71:da:38:ee:c5:01:6f:45:8f:3f:
                    6b:6b:7a:b0:3b:81:22:4e:d7:c3:67:a0:2b:bc:77:
                    22:d8:c2:7a:a8:1d:69:4a:d8:d4:73:6c:74:b8:c7:
                    ef:88:fc:14:cb:d0:67:3e:16:05:39:89:c6:95:99:
                    27:21:af:36:12:08:ae:25:f3:c8:57:dd:d6:16:17:
                    e5:37:41:ae:db:cf:78:f7:e8:fa:c3:0a:e2:d5:4c:
                    55:a6:b4:dc:82:8a:28:5b:6c:fc:63:1e:ef:fb:cd:
                    91:28:88:ec:f9:73:cb:d7:d5:be:ba:1e:30:f8:1d:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:97:87:EB:EE:A4:2D:3F:5E:07:D8:9C:B7:29:12:6D:AF:D8:9E
            X509v3 Authority Key Identifier:
                keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:03:0c:d1:06:7a:58:ec:6a:71:41:53:d2:61:93:9e:24:
         49:9e:ec:1c:cb:0d:4d:14:55:cf:55:17:37:70:2f:b4:0e:75:
         b7:f4:37:d7:33:ca:5d:e3:29:59:00:54:0a:7b:e2:e8:68:ec:
         b7:71:31:74:68:a7:69:91:59:68:14:27:34:da:c7:ec:dd:2a:
         64:78:15:7a:61:8c:af:30:ec:76:1f:9e:45:c9:84:79:e0:5c:
         18:2c:bd:e9:ee:84:52:31:35:c8:03:e2:ad:72:d2:a3:bd:11:
         6c:7e:53:6e:66:7e:f5:75:52:e3:84:83:cb:6f:66:e2:98:49:
         71:2e:59:85:16:4c:c8:b0:5b:75:2d:fd:e4:e3:36:82:ff:e4:
         aa:5a:60:09:a2:0e:1a:df:f2:d9:f8:e5:19:f2:6e:c0:47:c3:
         17:74:28:2e:46:2b:6a:5e:6c:b2:39:2c:1f:cc:c6:94:7b:cf:
         6d:1f:b7:ba:1f:e0:5c:fc:90:1d:61:38:bd:6b:50:33:b7:63:
         e1:42:b8:f2:5a:63:9b:2e:1e:49:82:e6:d2:c4:b5:b1:7b:c9:
         73:ab:e1:ad:85:9f:bd:21:88:9c:30:0f:18:58:40:83:02:83:
         33:99:84:9b:87:30:c6:19:75:c2:2e:8c:6c:3f:5a:28:c4:ac:
         2f:94:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:13:42 2024 by rpki-client on console-ams.rpki-client.org