Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File:                     Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier:          feZEvthohR7XE2yoX0fDhOKEtj5AT76F56FAEnQd5bM=
Subject key identifier:   77:7F:EF:05:79:4A:E4:23:7F:A2:30:5D:39:B4:20:F8:15:14:A6:E5
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer:       /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial:       018F87495DF769E71EE7C772CF1226C6F4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number:          0534
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: vZ2r0ndCgljJCZfd1fcL6JjCxwVRSuh1uR1L8akGRFs=)
                          2: ewZfEts9gqAe8Jgs1WakpG9VA2E.roa (hash: VKjMi7qH3TKkWx9nL+OCMje8kdmyivkRUyCd84BWoQ0=)
                          3: kOlrPnBB5B8bTJ2gq1oQZMICiUo.roa (hash: Em8re/LDHgQMn4fBVoNtbH+p9Q2NITTJ0mZ6F2AbHzo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5d:f7:69:e7:1e:e7:c7:72:cf:12:26:c6:f4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=777fef05794ae4237fa2305d39b420f81514a6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:85:74:ed:62:44:f5:17:51:be:2f:b3:e7:
                    57:2c:2c:2c:b5:5f:59:ff:f5:92:77:98:9b:cd:a4:
                    3f:19:56:e2:79:3c:d1:9a:1e:2a:b0:46:a2:fe:e5:
                    24:b4:8e:b5:85:ee:f8:0e:af:49:ad:6b:bb:b9:50:
                    4e:a5:4f:cf:a8:1b:18:98:7b:2b:b3:dd:5a:a2:0c:
                    67:1b:eb:6c:b2:0e:7d:b7:5d:c8:11:ce:a7:7d:01:
                    3c:33:f4:e2:3c:9e:c5:a8:b3:b0:3f:7a:72:87:81:
                    55:ee:7b:9e:26:0b:d9:32:63:1e:08:27:00:3d:e8:
                    8b:df:e8:95:eb:8f:98:e3:0c:ae:f6:cf:78:13:6f:
                    af:59:7d:d9:ae:03:42:0e:fb:66:51:ae:0a:d7:d7:
                    03:c5:ad:6f:66:db:cd:2a:53:fa:a4:e0:e2:32:96:
                    47:29:55:7d:e9:8b:fd:6a:e0:d8:d4:94:4e:53:98:
                    13:49:82:c4:6d:6b:6b:9a:8c:a5:90:33:cb:88:64:
                    99:da:02:41:6a:25:39:d7:fe:e2:d4:ba:23:a3:51:
                    bd:c1:4a:5d:ae:c8:ac:28:44:4f:3e:16:46:28:4f:
                    00:b6:c9:ad:5a:c9:8c:4b:bc:25:a5:00:77:bc:8b:
                    79:1d:4e:a2:e0:63:21:74:f4:78:29:c6:eb:b8:cc:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:EF:05:79:4A:E4:23:7F:A2:30:5D:39:B4:20:F8:15:14:A6:E5
            X509v3 Authority Key Identifier:
                keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:5c:b1:b1:02:67:1e:ba:7d:6c:20:dd:a1:c0:76:f5:2d:
         47:86:90:7d:fe:1e:c6:f4:d5:71:28:0c:57:53:78:72:9f:3f:
         c6:5c:c9:11:d9:f4:04:b9:8c:42:69:bf:25:62:49:3b:87:67:
         87:cd:c7:7a:7a:f1:5c:d4:4f:21:bf:f0:8a:5a:21:4d:a2:2a:
         ec:98:c7:58:59:3c:e6:e0:2f:37:e6:50:c0:d3:8b:b2:c2:f1:
         c1:d5:d3:57:39:35:ee:e2:45:29:ef:38:3d:f8:df:db:1f:82:
         58:5b:37:e7:42:26:e2:c8:87:31:0e:47:96:e9:b7:1b:b0:ef:
         1a:2c:0f:ea:1a:04:23:c4:c4:cf:24:17:78:4f:93:91:31:1a:
         18:6a:2d:b3:a5:d1:14:61:9c:57:0f:5e:5e:e1:bb:36:8f:e0:
         c9:f2:ec:da:6c:0d:80:b4:a9:64:86:cf:83:a7:91:15:66:87:
         8f:e0:3d:7b:89:50:0b:39:f5:9d:0e:67:ec:7b:88:ec:17:33:
         f9:34:85:ed:cd:3f:f7:eb:fc:06:7b:fb:da:b0:d5:02:86:14:
         5c:4d:14:33:e7:91:75:96:10:e3:21:e3:4f:4a:4d:f3:be:4c:
         3c:78:2d:3f:98:c8:54:07:9d:89:d4:d2:59:03:fd:1e:ff:0f:
         0c:b1:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:33 2024 by rpki-client on console-ams.rpki-client.org