Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File:                     Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier:          YFiK2p7/R3V2SgTL8JJU/Vek0xZ7UJRnKVI/TSUZ6wk=
Subject key identifier:   44:E9:89:64:76:25:15:1F:D6:9F:97:32:26:F4:6B:FD:5D:77:CF:E4
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer:       /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial:       018F866CB4A713F9AD8A40C0FC586A792DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number:          0614
Signing time:             Fri 17 May 2024 12:00:22 +0000
Manifest this update:     Fri 17 May 2024 12:00:22 +0000
Manifest next update:     Sat 18 May 2024 12:00:22 +0000
Files and hashes:         1: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: 42SPAy4vkYiKY+LA58jwzRjaZPQkK4Ef8FXkvwJCJX8=)
                          2: X-j1pFjeEwQ3XY1a-hvuxCt1fhU.roa (hash: 0EbdjzA6qDImB036uSe6fL4Fz/okbq7sBOhSqAlx9R0=)
                          3: bbg3HTkLDp5q9sAfubDYOiDyNlQ.roa (hash: w0PYG+huDNAbp8gGr/Z3FSbyzucZd/AXRh4TiudqLeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:b4:a7:13:f9:ad:8a:40:c0:fc:58:6a:79:2d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
        Validity
            Not Before: May 17 12:00:22 2024 GMT
            Not After : May 18 12:00:22 2024 GMT
        Subject: CN=44e989647625151fd69f973226f46bfd5d77cfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:cf:d2:a4:30:e5:37:a3:ff:f8:c6:77:80:
                    18:5d:ec:8d:a5:a0:85:d0:e0:ef:19:55:e0:ac:08:
                    cc:3d:8d:71:35:65:e7:2d:3f:5d:f1:41:98:47:8f:
                    bb:99:c5:13:38:9c:3d:c8:16:02:fb:44:21:40:a6:
                    39:95:db:a7:92:08:f6:a8:fd:b7:fb:d0:19:12:a0:
                    c8:fc:e9:7e:2b:4b:dd:59:ad:91:1d:d3:a6:a0:94:
                    7c:63:09:4b:1c:ba:07:f8:c2:c8:f2:f3:d0:fb:d3:
                    a6:19:30:26:4c:f4:54:90:c1:5e:33:2d:bf:0f:55:
                    a0:13:18:66:1d:16:86:41:ce:e6:5e:54:6e:ff:f0:
                    85:2a:8d:05:ed:13:59:5b:4f:86:9f:02:69:ad:1c:
                    30:a0:36:b7:4f:06:98:c2:6e:5f:2d:1b:25:c5:94:
                    3c:92:c1:40:97:5f:4c:b5:3c:3d:6c:20:9e:a0:dc:
                    03:49:8e:6a:ff:35:2c:4a:9f:a6:67:b6:fe:9f:8a:
                    7c:33:37:d1:94:3a:42:3d:2c:02:38:14:e5:a8:2a:
                    1b:f3:a9:8e:00:db:05:1c:b7:aa:05:dc:49:0f:28:
                    1a:22:40:1b:53:de:c2:30:b8:06:4f:24:b0:47:02:
                    ed:57:3b:1b:77:97:fc:2e:16:87:d6:f8:b4:50:e5:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E9:89:64:76:25:15:1F:D6:9F:97:32:26:F4:6B:FD:5D:77:CF:E4
            X509v3 Authority Key Identifier:
                keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:03:99:12:f3:cf:c8:65:62:bf:c3:1c:88:6d:e4:d0:72:
         a2:ec:b9:5e:41:b0:56:64:03:bc:b6:ce:80:d9:d0:40:91:f9:
         56:a4:73:da:ca:e4:43:41:6d:be:02:8f:70:a3:26:c3:74:fd:
         d6:43:87:a6:97:5f:bc:56:6d:45:45:b6:6d:e3:37:a2:10:5d:
         0a:d5:ae:74:d0:df:5e:62:69:31:3b:8f:22:31:18:cd:9a:e1:
         42:b0:c0:84:5d:6f:a5:ff:5f:db:3f:2c:dc:e9:a4:ca:7d:40:
         9c:be:5c:57:78:f7:de:14:92:3b:05:a4:25:0d:4d:94:23:c3:
         dd:d1:51:3e:a1:9e:90:92:b7:e5:83:12:68:64:4a:2a:df:5d:
         cb:3e:0e:4f:0a:24:a7:b9:4e:d1:4a:27:f2:15:9d:59:ef:0c:
         8a:7f:41:31:cb:e2:a0:36:28:f3:d1:e2:2e:de:32:ce:6c:a9:
         45:ff:ee:c4:80:7c:4f:72:73:1c:9d:75:e0:f9:4d:66:90:59:
         e6:b0:2c:f6:13:77:d1:6d:06:67:f3:22:82:fa:7e:de:2f:fa:
         64:6b:ab:f9:7a:80:7f:90:48:57:01:6f:ce:c7:e1:3a:07:0f:
         52:ca:d2:d9:a2:3c:c1:5e:24:84:ae:66:13:39:1d:1e:57:80:
         18:55:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:59 2024 by rpki-client on console-ams.rpki-client.org