Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File:                     vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier:          lpwTdpuyCLuEckVsMY3YwWV4fzwCpVLCnUx/9wcowks=
Subject key identifier:   47:3E:5F:71:75:2B:9A:E4:CF:19:2B:41:A9:55:A7:AF:37:B6:D9:EA
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer:       /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial:       018F87488D01A8155CEA7BEA6880B724198A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:00:29 +0000
Manifest this update:     Fri 17 May 2024 16:00:29 +0000
Manifest next update:     Sat 18 May 2024 16:00:29 +0000
Files and hashes:         1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: yIQZWpa1R1IudJeF8h2sFUvRSBBki8yDVTaPWPAJVwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8d:01:a8:15:5c:ea:7b:ea:68:80:b7:24:19:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
        Validity
            Not Before: May 17 16:00:29 2024 GMT
            Not After : May 18 16:00:29 2024 GMT
        Subject: CN=473e5f71752b9ae4cf192b41a955a7af37b6d9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:76:18:7e:14:ed:8b:5d:39:df:0c:b8:1d:
                    2d:79:2f:e5:0a:39:d8:4a:7f:b5:8c:52:52:ec:dc:
                    c2:67:fb:77:c6:32:bd:42:f6:b7:78:b9:94:79:bf:
                    6f:6c:f6:af:0f:be:2b:01:ad:b6:90:0d:a7:c6:46:
                    69:c4:da:c7:72:a8:f5:0f:34:2d:47:8a:25:a9:46:
                    86:45:47:e0:37:39:d6:3c:4f:41:a7:48:4a:d3:13:
                    ee:83:05:c8:8b:94:7c:44:ba:ea:c9:cc:3b:16:f8:
                    60:09:6c:92:2a:21:11:ea:9b:ec:e2:a4:7d:c4:79:
                    e0:63:47:45:02:58:d6:12:8a:ac:f7:fe:82:72:dd:
                    fe:76:11:dd:52:e8:cf:21:c4:bb:2c:04:96:07:cc:
                    48:93:92:cb:b0:5d:6d:70:01:98:8a:a6:66:03:45:
                    05:2a:e5:4e:7c:23:9a:83:2a:d0:74:01:d5:76:6b:
                    b6:fc:cb:6a:75:76:8c:73:dc:31:5e:29:ea:b5:f1:
                    e4:31:5c:18:7a:95:0e:6b:5b:38:fd:b2:a7:f1:37:
                    bb:c3:81:a1:b1:9e:91:3f:7f:3f:36:74:37:7b:d9:
                    97:b9:43:e8:65:f1:e8:03:de:14:42:c2:4e:a0:1a:
                    f4:a2:06:39:fd:d0:e0:2d:eb:ed:39:25:b5:09:fa:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:5F:71:75:2B:9A:E4:CF:19:2B:41:A9:55:A7:AF:37:B6:D9:EA
            X509v3 Authority Key Identifier:
                keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:f2:d0:d0:69:6b:8c:cf:2a:0c:4e:6e:60:ef:e6:c3:0f:28:
         eb:05:00:f8:e3:5e:82:1f:c8:33:83:54:4c:a2:3a:a2:f3:d5:
         13:bd:3d:9c:1b:a1:98:12:23:c8:2b:da:f3:ac:dc:0d:d4:0f:
         9b:81:64:41:3d:6a:6f:0e:4a:fc:a8:44:a7:4c:c5:d0:8e:f7:
         64:55:60:69:01:1c:0c:5e:68:38:4d:0f:c8:7f:a9:d0:15:1a:
         86:ba:ba:9c:07:d8:ca:b0:f1:ee:e9:17:85:2b:54:a8:46:64:
         7d:37:4a:9b:3b:b3:b3:fe:75:9d:a8:2c:cd:3a:c3:44:27:6c:
         7a:d4:c8:0e:8b:27:15:94:61:21:3a:44:11:c2:d1:84:13:74:
         f6:26:1c:96:e8:19:ee:63:70:ea:65:4f:55:42:e4:5a:3c:07:
         ed:87:84:d0:19:9a:08:67:99:49:07:7d:e1:7a:9e:e8:64:93:
         62:bf:ad:aa:f7:56:7b:37:3e:b0:17:a8:0c:c1:5b:e3:d9:aa:
         a0:f1:4a:c8:a4:80:fb:4c:bd:4c:2b:25:1c:20:68:13:47:a2:
         62:fc:4a:47:9f:9f:de:e2:13:5d:db:7f:ad:fb:39:f7:d9:1b:
         d7:93:54:a7:c9:ce:a2:dd:16:60:b8:fb:35:6c:4f:cd:b8:0f:
         2a:68:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:21 2024 by rpki-client on console-fra.rpki-client.org