Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File:                     YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier:          uX3AgwHIvIX04E13vob0lJK1fw5GXureFPM33ztkriM=
Subject key identifier:   44:EE:33:77:D3:A1:61:3A:7F:3D:32:C1:B7:7D:A1:35:F9:3E:41:E0
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer:       /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial:       018F885B23FF67E29E8F55EA0C3552AE5D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 21:00:25 +0000
Manifest this update:     Fri 17 May 2024 21:00:25 +0000
Manifest next update:     Sat 18 May 2024 21:00:25 +0000
Files and hashes:         1: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: 8cTU4UfCbdmR4k+YygLLn5g3TF2dLLO6NiSC0ANIoeY=)
                          2: n7hS9TYtixwCIO6ZnHs1ZHnXDNE.roa (hash: szSyN1QLEmGBmjO0SJXw3mGNLmqC4toJE/ZJ5qgr1nc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:23:ff:67:e2:9e:8f:55:ea:0c:35:52:ae:5d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
        Validity
            Not Before: May 17 21:00:25 2024 GMT
            Not After : May 18 21:00:25 2024 GMT
        Subject: CN=44ee3377d3a1613a7f3d32c1b77da135f93e41e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:5c:b9:19:4a:bd:1c:4c:49:f6:47:a1:e7:
                    ff:e4:20:6d:31:9a:3e:74:d8:f4:bb:11:bd:a3:4c:
                    c9:9e:fd:86:4e:e1:68:03:f2:c8:5c:c0:dd:19:12:
                    e1:c7:6b:6a:d1:da:49:b8:78:0e:3a:21:fb:c1:bc:
                    be:b0:da:5e:b5:97:e6:df:06:68:1b:7e:7f:df:cc:
                    01:25:5c:b3:c7:53:2c:e2:43:88:b6:72:f6:c0:b7:
                    f3:69:0d:e0:d1:21:22:39:f3:e2:58:45:87:af:d9:
                    70:74:14:aa:fa:71:77:7b:5e:f5:1e:21:c3:df:33:
                    25:32:49:3f:9f:0f:fb:bb:76:2d:65:59:8d:7e:35:
                    27:9d:53:fa:39:96:bd:e6:99:eb:80:08:ef:61:03:
                    33:9d:6c:1c:62:31:13:6c:c1:19:28:28:e7:01:45:
                    a8:bd:6a:7c:1e:c0:24:5b:6d:9c:ae:1d:32:11:92:
                    9b:06:84:27:fa:7d:26:e5:ee:9c:b5:e0:ec:9d:fe:
                    e8:57:e2:c8:3e:b4:20:8f:95:a8:fd:3d:ce:7c:cb:
                    83:e9:31:1c:36:23:aa:b3:ea:3b:45:7c:d3:10:02:
                    25:c0:a6:a9:c1:ca:a3:97:6a:eb:78:a2:6f:c9:74:
                    71:5e:10:e5:de:de:00:ae:00:09:9b:db:ff:ce:31:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:33:77:D3:A1:61:3A:7F:3D:32:C1:B7:7D:A1:35:F9:3E:41:E0
            X509v3 Authority Key Identifier:
                keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6f:a0:b4:80:8f:e2:9d:9c:69:93:fa:82:a4:8d:93:e7:14:
         55:84:07:ad:e6:97:3f:40:8d:30:c4:a8:cd:f4:cf:0c:99:df:
         f4:da:b1:53:aa:c1:51:75:d5:ec:a3:89:65:44:1d:79:9c:3f:
         85:25:c1:d6:79:84:7e:3f:4b:8b:02:60:10:c4:10:2d:b7:eb:
         3d:49:ec:d4:b6:da:26:f1:a2:84:20:28:b6:d3:62:95:b6:35:
         c8:a4:09:28:79:7e:cd:ce:5c:61:73:50:9f:f6:ac:bd:04:d0:
         eb:63:d7:44:0c:3c:8e:b4:93:8a:a8:16:a3:9d:a3:80:b1:9b:
         d7:2e:ff:bd:79:34:20:f1:98:e0:dc:8b:cf:ae:2c:6d:6f:74:
         cb:2d:81:87:be:76:b6:78:a9:33:1f:53:7c:bf:8e:11:06:bb:
         47:d1:e0:13:da:83:19:dd:ff:7e:69:4a:b3:a7:f2:96:91:7f:
         38:70:8a:b0:a1:da:6f:e5:2b:aa:f4:3f:38:fc:8b:76:6a:f0:
         6b:f5:4a:cb:17:ed:da:05:9a:db:38:3b:34:9e:41:a9:2f:05:
         85:0a:59:1a:0b:d3:60:1d:38:86:a0:19:de:91:31:3b:fc:b3:
         97:f4:96:f0:ac:c4:dd:1d:86:97:b2:7e:fc:c1:e9:e8:b4:27:
         05:3d:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:04:22 2024 by rpki-client on console-ams.rpki-client.org