Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
File:                     XYO1pn2S_6hHbJMhqnv21KINPas.mft (raw, json)
Hash identifier:          fEnCDdJFeBOmnS07IAQ9TCnms21EbQcTZfzSLN17LyE=
Subject key identifier:   22:1C:25:5E:08:11:63:D4:5A:39:1B:84:E2:80:CD:ED:72:71:24:88
Authority key identifier: 5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB
Certificate issuer:       /CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
Certificate serial:       018F874A3D367D4E810F41D149907453B9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 16:02:20 +0000
Manifest this update:     Fri 17 May 2024 16:02:20 +0000
Manifest next update:     Sat 18 May 2024 16:02:20 +0000
Files and hashes:         1: XYO1pn2S_6hHbJMhqnv21KINPas.crl (hash: C85vxeDzowjOKTqoZ4mciCosnhWoaIiF7AqKunNnGwo=)
                          2: tYjA70ZZuilBmqlOohdOI6JLHKo.roa (hash: PECqLqkHLJE6zy86na+6dfULVx22XsoZe+uQfg0Hx10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:3d:36:7d:4e:81:0f:41:d1:49:90:74:53:b9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
        Validity
            Not Before: May 17 16:02:20 2024 GMT
            Not After : May 18 16:02:20 2024 GMT
        Subject: CN=221c255e081163d45a391b84e280cded72712488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:d3:a1:d1:bb:19:2d:61:03:56:32:74:a7:
                    2f:4f:1a:a0:8d:9e:6c:af:f6:ab:c9:0f:a0:c3:d5:
                    d6:25:b2:1d:b1:12:04:f8:f2:99:38:f4:0b:d6:60:
                    c6:22:c4:bc:7a:ca:b0:1e:1f:73:8a:8d:b2:4b:94:
                    58:c2:33:13:9b:b7:01:ba:15:e5:34:09:2e:57:dc:
                    52:d3:d6:7b:1f:50:22:af:de:54:8b:22:d3:30:db:
                    68:2c:fa:89:b7:fa:ab:92:c0:f8:37:e1:47:b0:80:
                    d8:72:fe:db:3d:4f:9b:d4:03:f8:1b:5f:0e:f2:54:
                    2e:a3:d6:d6:89:12:da:43:d5:ec:64:83:15:c4:b7:
                    e6:46:6d:84:42:80:95:f3:64:94:d3:14:44:91:f1:
                    db:95:fc:f7:66:77:c2:32:c8:aa:dc:13:3a:ab:90:
                    bd:e8:b5:5a:05:9b:5b:29:82:56:32:9f:48:87:6c:
                    8e:09:11:b6:a6:fe:aa:be:71:3c:dc:ac:4e:96:e9:
                    a0:12:4d:8c:61:72:14:70:34:b5:78:76:7e:2a:2d:
                    c1:b6:81:50:ff:5c:c7:b6:6d:84:da:65:79:3b:9a:
                    8a:a3:e9:0a:62:4f:60:a5:88:ec:ea:c3:20:1c:48:
                    7a:3e:d7:20:e8:3d:0b:f5:8b:4c:72:c5:93:d2:a3:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:25:5E:08:11:63:D4:5A:39:1B:84:E2:80:CD:ED:72:71:24:88
            X509v3 Authority Key Identifier:
                keyid:5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:79:ed:e4:73:f0:8a:2d:6e:90:52:36:16:38:86:5f:4a:5c:
         90:1a:04:d0:b4:d7:4c:da:58:89:46:0c:ca:33:d1:ca:f0:81:
         47:f8:23:e5:f6:0b:6f:37:ad:01:86:72:cb:16:bc:48:b2:94:
         82:c7:5c:b3:9c:b2:3e:1d:d0:db:79:15:06:14:ea:5e:26:1c:
         d2:39:42:da:bf:ea:5b:50:97:e1:58:73:9c:32:14:54:63:16:
         96:9b:c9:62:12:f6:19:0b:a4:e9:f9:72:17:a8:d9:31:9c:a6:
         cf:20:7c:f5:ea:4e:d3:ff:3c:7d:fe:25:96:43:fb:26:c5:33:
         8f:db:bc:7f:43:23:6a:e7:aa:33:2a:ef:8c:83:50:d0:55:ef:
         39:da:f3:de:56:5d:6b:c3:02:9c:cf:fb:66:df:d0:23:5d:c2:
         b7:d2:86:9e:34:17:68:03:ef:ac:e5:05:a9:e8:17:a2:dd:50:
         1d:94:b1:06:ba:46:8b:18:20:35:44:be:5d:34:c0:f3:ca:ad:
         98:d4:ae:9c:86:1c:fe:52:90:da:54:14:0d:b0:1d:b4:a1:4c:
         51:c8:b6:b7:41:12:40:3a:b0:24:7f:db:c3:84:2e:39:b8:4a:
         a9:a1:be:79:55:4a:fb:a5:5f:e8:ef:ec:40:09:ea:48:7d:b4:
         45:de:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:51 2024 by rpki-client on console-fra.rpki-client.org