Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File:                     ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier:          dFfPy4dnY4oleDcgjhQ2rakauSI0t0eTisxE8Q2zMJU=
Subject key identifier:   D3:A4:3E:26:C9:8D:E3:6C:0C:99:3A:53:CB:FA:F0:4C:B4:C9:09:88
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer:       /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial:       018F874B30150031E0BBE89B6A8DA88ECB51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:03:22 +0000
Manifest this update:     Fri 17 May 2024 16:03:22 +0000
Manifest next update:     Sat 18 May 2024 16:03:22 +0000
Files and hashes:         1: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: GaRGIf4AubJQrxKEt/et021rbVe1vd+JkRaIaiaUFsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:30:15:00:31:e0:bb:e8:9b:6a:8d:a8:8e:cb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
        Validity
            Not Before: May 17 16:03:22 2024 GMT
            Not After : May 18 16:03:22 2024 GMT
        Subject: CN=d3a43e26c98de36c0c993a53cbfaf04cb4c90988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:5e:eb:51:7b:3c:76:d1:43:38:2e:33:99:
                    e8:68:73:c3:0e:c4:65:f8:a6:59:d1:34:79:e4:ef:
                    be:84:be:1f:b1:9a:91:d9:90:f3:de:a2:c6:f2:5b:
                    98:b2:a3:2f:25:9c:f6:44:0b:e9:47:36:22:86:90:
                    35:68:67:d8:19:af:dd:ba:b8:f3:03:e5:38:79:ba:
                    71:fd:cb:c9:a0:2d:7a:08:af:53:fd:82:4a:fe:3b:
                    0c:2b:a7:db:19:25:83:92:8b:ce:de:d3:e4:2d:51:
                    a4:8b:a9:88:ff:ac:40:77:cc:e3:b0:75:31:46:f3:
                    4e:de:ec:4c:8a:85:57:f0:2f:f2:6c:57:70:a8:84:
                    9f:7f:bc:81:50:e7:02:7d:00:ea:08:0c:11:28:c0:
                    4c:7f:61:12:a7:1c:13:f3:64:79:ab:4d:61:34:01:
                    46:f8:e0:e6:f2:6e:19:7e:37:44:0b:c7:d3:a0:5c:
                    1f:5f:c0:07:2c:86:7a:c6:d6:05:17:eb:39:81:13:
                    0b:4a:4d:8c:d5:3e:1f:f4:26:ca:62:db:bd:a7:99:
                    61:47:36:0f:35:25:c2:5b:ce:5b:8d:5a:c3:8f:4a:
                    2c:40:cc:36:57:da:22:0a:99:79:45:30:75:8e:bb:
                    f5:0e:d7:11:41:f3:dd:b3:2e:85:90:6e:f1:d5:39:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A4:3E:26:C9:8D:E3:6C:0C:99:3A:53:CB:FA:F0:4C:B4:C9:09:88
            X509v3 Authority Key Identifier:
                keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:04:09:1c:cf:6c:37:9b:cf:37:28:db:85:ee:90:76:db:
         be:2e:19:8b:37:33:14:d1:96:0a:24:cb:24:bc:42:69:c1:f6:
         82:d0:08:f2:88:3c:db:9f:c5:8d:1c:ae:af:f5:a2:0e:b5:4d:
         b9:93:f4:23:10:77:84:02:ee:7c:4d:f1:50:b9:e3:94:4a:c2:
         16:7d:52:30:2d:28:15:3a:bf:58:f8:23:bf:4c:6f:4c:4b:16:
         52:b1:59:db:31:1e:1f:d5:e0:b0:cb:3c:61:b2:e6:ff:da:8a:
         fe:77:a7:fd:b8:1d:47:6d:c7:e9:46:5c:a3:b7:60:75:5e:ec:
         a2:0e:be:64:dc:19:e8:13:37:6e:06:62:d3:88:e8:6f:b1:9a:
         fc:98:88:b7:e0:fa:9a:d6:71:ca:b8:6f:a9:8a:5d:a7:74:03:
         e8:80:67:42:61:5f:88:e3:e9:3c:0a:10:ee:7e:c7:94:f1:5f:
         d9:4b:11:b8:ef:18:4d:a8:c6:05:bc:db:b6:35:e6:a6:57:bc:
         b8:27:71:f4:5f:73:06:6c:49:04:92:bf:9d:51:16:14:e6:bb:
         bc:f7:7e:2e:35:cc:93:89:ba:07:b5:73:aa:db:6b:03:42:58:
         6c:3b:3a:f3:0a:72:98:5d:54:8f:b2:eb:a4:7f:a2:e5:a8:49:
         58:43:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:17 2024 by rpki-client on console-ams.rpki-client.org