Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ca61ca-7ade-4736-a976-de2d65391063/1/R5HpV2voE-gs-nixcCvoqcKD8Ek.mft
File:                     R5HpV2voE-gs-nixcCvoqcKD8Ek.mft (raw, json)
Hash identifier:          c7X0ger1AD8QYUttfk/sfL30Lg48oKQZ5GK1DOdMwik=
Subject key identifier:   09:50:76:0E:2C:01:12:9B:32:29:77:EF:99:C8:65:0A:E6:C2:3D:28
Authority key identifier: 47:91:E9:57:6B:E8:13:E8:2C:FA:78:B1:70:2B:E8:A9:C2:83:F0:49
Certificate issuer:       /CN=4791e9576be813e82cfa78b1702be8a9c283f049
Certificate serial:       018F874AD81D7DDF6886DACD3AF2BBF8993C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5HpV2voE-gs-nixcCvoqcKD8Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ca61ca-7ade-4736-a976-de2d65391063/1/R5HpV2voE-gs-nixcCvoqcKD8Ek.mft
Manifest number:          0543
Signing time:             Fri 17 May 2024 16:03:00 +0000
Manifest this update:     Fri 17 May 2024 16:03:00 +0000
Manifest next update:     Sat 18 May 2024 16:03:00 +0000
Files and hashes:         1: R5HpV2voE-gs-nixcCvoqcKD8Ek.crl (hash: n9wkkl0aJmoYMd/2fAX0rZtaSB0pshy0F29C7OTBniE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ca61ca-7ade-4736-a976-de2d65391063/1/R5HpV2voE-gs-nixcCvoqcKD8Ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ca61ca-7ade-4736-a976-de2d65391063/1/R5HpV2voE-gs-nixcCvoqcKD8Ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5HpV2voE-gs-nixcCvoqcKD8Ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d8:1d:7d:df:68:86:da:cd:3a:f2:bb:f8:99:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4791e9576be813e82cfa78b1702be8a9c283f049
        Validity
            Not Before: May 17 16:03:00 2024 GMT
            Not After : May 18 16:03:00 2024 GMT
        Subject: CN=0950760e2c01129b322977ef99c8650ae6c23d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:cb:09:ed:be:a3:90:60:78:4b:a0:4c:0c:
                    dc:11:1e:6c:cb:9e:d5:2f:06:73:95:ae:a3:c7:21:
                    b0:2e:a1:b8:07:91:15:e5:92:fe:d5:2c:56:50:f8:
                    2f:ad:54:c3:82:e2:f6:f3:d6:73:b6:ed:fe:09:fc:
                    2f:3a:87:2a:de:57:7b:51:a5:39:32:f6:d3:06:e8:
                    9e:ea:0c:3f:dd:4f:58:eb:a5:6c:e7:98:71:33:38:
                    fd:c7:a1:a6:31:0d:92:22:a7:8a:fd:8b:04:25:80:
                    bd:80:55:a5:db:f6:01:d9:2e:01:eb:0b:5c:06:94:
                    22:b9:3b:dc:c4:26:34:0e:71:ee:c7:23:a1:94:c0:
                    77:cd:69:84:c0:54:cf:84:9d:2e:69:99:59:f5:b8:
                    92:84:d1:03:1f:ea:e8:2e:4d:84:44:53:d5:be:c4:
                    de:39:ca:3d:e7:dc:5f:fa:1e:d6:b3:a6:8d:bc:0b:
                    9e:31:74:76:b0:14:27:10:2b:08:20:e3:c7:f7:9e:
                    7a:e4:a0:c8:ef:eb:fb:de:bc:53:aa:7c:9c:e6:34:
                    de:48:62:fd:3d:78:15:ac:86:82:84:a5:5e:b0:53:
                    fd:88:d9:8c:d1:0a:9b:72:1d:07:f4:76:53:39:eb:
                    44:43:73:b0:7a:ed:c8:16:47:8d:27:0c:b5:87:11:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:50:76:0E:2C:01:12:9B:32:29:77:EF:99:C8:65:0A:E6:C2:3D:28
            X509v3 Authority Key Identifier:
                keyid:47:91:E9:57:6B:E8:13:E8:2C:FA:78:B1:70:2B:E8:A9:C2:83:F0:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5HpV2voE-gs-nixcCvoqcKD8Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ca61ca-7ade-4736-a976-de2d65391063/1/R5HpV2voE-gs-nixcCvoqcKD8Ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ca61ca-7ade-4736-a976-de2d65391063/1/R5HpV2voE-gs-nixcCvoqcKD8Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:5a:35:9f:d0:69:09:21:08:91:16:ff:53:a5:1e:25:d4:
         66:42:1a:0a:07:37:2e:a7:86:4b:92:ca:b0:2a:12:5d:86:ea:
         ac:38:6a:24:e3:68:11:eb:32:e6:87:2c:53:64:c2:a0:79:f4:
         45:f7:25:9b:72:32:c8:79:ad:29:91:b4:22:de:ae:46:18:b8:
         e5:d6:45:21:1d:fc:40:8b:fc:b9:a4:93:4b:9b:99:cf:e8:bd:
         a0:9c:32:7d:ed:cf:e6:92:64:6b:f4:be:2f:26:cf:72:0b:94:
         34:71:68:55:34:81:03:8e:a3:47:11:75:f6:ce:8c:8b:74:0b:
         de:c1:e9:2c:4b:36:91:d1:2d:53:18:be:fa:c2:e6:f1:b8:53:
         5a:b3:46:44:c5:3a:69:fa:1b:34:f2:6a:2d:92:68:3e:0b:d2:
         cb:22:9e:be:99:bb:59:b2:f4:b1:b3:bc:14:6e:48:97:d3:5d:
         56:bf:6f:4c:75:b2:fd:46:ef:18:ad:87:ca:3a:53:68:5f:cb:
         d5:eb:5b:46:28:7b:25:46:da:52:6f:f8:9e:6f:10:ee:99:da:
         a6:1e:55:60:87:bd:3a:4d:51:2c:32:be:1f:21:68:46:c0:b3:
         e9:a2:7e:8b:8c:7c:e0:f0:b8:7a:74:22:7d:4a:fc:7a:02:d0:
         55:83:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:16 2024 by rpki-client on console-fra.rpki-client.org