Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          F0mrn6831Pv5SH1jPyk/7fE1wO+T4efWydqRJScCeKY=
Subject key identifier:   72:61:3B:F6:72:B0:38:25:8A:80:58:72:21:95:39:59:89:95:BE:C6
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       018FB2D858624BEDC7AFE4CF9D905991FE39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          0C1E
Signing time:             Sun 26 May 2024 03:01:13 +0000
Manifest this update:     Sun 26 May 2024 03:01:13 +0000
Manifest next update:     Mon 27 May 2024 03:01:13 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: Y6CtFVyffaggOYQ0lXM77ZPOtWfssHSpV5INH4zkXrc=)
                          2: O9z59kqaxoeNEuG-ii8R6h4FRnY.roa (hash: 1Xmf6rOdq4atnRQwEt1Axk/QormEa2i5I6TDkuA7Mqs=)
                          3: hb6csWBkoEK5ynNhDHknUkSIjHA.roa (hash: AwL5FjGj/Od9OZpUWqWHO2PsGTbYf+X9ZYFg4SmLt28=)
                          4: nHMFhhn9YLwm3fxLLnKwnS54Stw.roa (hash: sZYXKGj51e7V0q4Rh1JbDrxNRGAHm0NfDEpWqnddoA8=)
                          5: up2OhYVMkK27HzylZe3Qmqi5mzY.roa (hash: TOd7Tr8KR0QIENiqPuogGWWcRUeotTQeqiXgragXyKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:58:62:4b:ed:c7:af:e4:cf:9d:90:59:91:fe:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: May 26 03:01:13 2024 GMT
            Not After : May 27 03:01:13 2024 GMT
        Subject: CN=72613bf672b038258a805872219539598995bec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:3a:5e:18:62:91:e2:3a:8c:ba:13:8e:0d:
                    4d:5b:35:fd:ab:d7:01:4c:5b:05:14:d1:29:e1:e2:
                    c7:a5:c2:57:ae:c4:c1:66:da:bf:2d:d4:b3:17:01:
                    f1:24:12:27:c0:de:f4:87:55:8c:45:1b:84:90:3c:
                    2a:23:1d:e4:1c:2d:05:e4:3b:13:42:01:8d:8c:9e:
                    6f:a5:30:a1:2b:b9:4c:6c:33:c5:2b:ff:23:e8:8d:
                    48:f7:e5:dd:cd:a9:66:46:fe:f5:02:87:c6:0f:da:
                    b9:1f:ac:bb:02:ab:6f:02:e4:13:3b:3c:1e:6f:e7:
                    28:71:a5:c7:ec:6b:0b:96:99:6f:a6:0f:e5:a3:33:
                    85:7a:bc:cb:88:ca:fd:0d:bb:4c:7f:bb:b1:75:10:
                    8f:2f:19:ad:19:8b:a0:9e:cb:df:89:e9:81:2f:46:
                    ab:3a:b7:dc:e2:3c:6a:af:7d:b3:04:de:97:dd:af:
                    a8:92:2e:25:2d:08:f9:a6:92:44:a5:a5:4d:55:aa:
                    c3:0c:39:67:ca:31:4a:b9:a0:fd:81:3e:e1:79:64:
                    1a:a1:7f:27:ed:1c:c3:1b:21:c7:af:0d:74:81:8e:
                    6e:ea:71:ef:e5:cb:b2:26:0d:c6:4a:b5:7d:88:c9:
                    94:3f:20:bf:eb:89:d1:b5:67:bf:1a:30:8c:59:0f:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:61:3B:F6:72:B0:38:25:8A:80:58:72:21:95:39:59:89:95:BE:C6
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:75:54:fb:e4:c4:1a:e7:fa:9f:55:3c:ff:cc:eb:4e:8c:f0:
         39:0b:82:1c:74:67:58:14:64:6d:91:cd:7d:67:c4:74:fb:29:
         a0:b1:09:eb:b2:a9:45:ac:4b:02:69:12:04:8a:77:35:aa:13:
         6b:fa:89:a1:81:93:bb:d5:9c:46:4a:74:38:f2:d6:8c:b6:15:
         86:7d:de:2d:5c:a1:09:41:d6:b6:ee:c1:9e:e1:b3:1d:c4:c8:
         f8:0c:1d:49:96:64:fb:6f:4d:56:f9:55:14:e2:60:6b:e4:61:
         46:a4:4b:63:b6:95:61:18:8b:02:72:b1:3b:71:4d:21:d6:6d:
         29:1d:e2:33:27:d4:94:8d:76:6f:dc:8d:ad:e8:22:6d:bf:d7:
         5f:c9:68:8b:23:61:08:49:b5:92:fb:52:88:80:26:fd:96:a9:
         13:db:62:62:97:45:c6:56:8c:82:77:02:2c:1e:0e:6f:06:f1:
         fa:21:b4:c3:b1:a5:b4:64:15:16:f8:1a:f2:02:27:7b:db:67:
         13:5c:44:22:f7:f8:66:f3:d2:b8:0d:e8:f4:61:fb:85:17:ab:
         dd:d9:63:9f:a9:84:ca:6a:71:7f:ee:d4:ec:fc:b7:10:0b:c5:
         08:78:68:08:9d:fe:4c:8e:5f:ea:c3:5c:fb:38:5a:39:18:4c:
         78:d4:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:57:40 2024 by rpki-client on console-ams.rpki-client.org