Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File:                     ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier:          /Yel1WiaI73wT367HEhWz1xvGMA57SSekSBkwQZJITU=
Subject key identifier:   04:73:1B:5A:FA:9B:E5:8D:D4:9D:4C:15:99:3D:AA:99:FA:A4:9F:B2
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer:       /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial:       018F874886BE4F922368B78243679BB5E802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number:          01CD
Signing time:             Fri 17 May 2024 16:00:28 +0000
Manifest this update:     Fri 17 May 2024 16:00:28 +0000
Manifest next update:     Sat 18 May 2024 16:00:28 +0000
Files and hashes:         1: jQ7i8xOPOygwLdhB_Cs-EVJK7-U.roa (hash: 7X7HxxrXSlyFcrRy2hHx5Fkzm5/DzxHteeqg3/apAyQ=)
                          2: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: AmIXAtwiPH1Trb+dXHM7HWm0/sz2/eyJNq52a1yTaP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:86:be:4f:92:23:68:b7:82:43:67:9b:b5:e8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
        Validity
            Not Before: May 17 16:00:28 2024 GMT
            Not After : May 18 16:00:28 2024 GMT
        Subject: CN=04731b5afa9be58dd49d4c15993daa99faa49fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:b8:dd:cb:51:59:89:ce:77:0c:7c:78:eb:
                    5b:61:5f:96:14:72:a8:73:65:55:9b:2a:03:27:de:
                    d5:00:de:b9:c7:2f:f4:04:c8:ee:91:84:37:c0:61:
                    e3:cd:6a:84:09:d7:35:b3:ce:7e:bd:37:5e:c1:1d:
                    df:b2:6c:7e:7f:2b:96:d5:f1:5f:63:de:94:6d:3f:
                    ef:55:05:6b:54:d9:d5:dd:cc:57:f9:9e:f4:2f:d5:
                    70:d4:f1:f9:07:7e:10:49:a4:bc:56:53:d2:6d:eb:
                    c0:22:8b:16:fa:b2:c7:2a:e3:d7:f4:7d:dc:57:ee:
                    df:09:d6:01:1d:23:58:e0:4d:9b:de:34:07:9f:d5:
                    05:2a:c8:c4:f5:b6:19:da:93:f5:f9:38:4b:3f:4e:
                    38:ca:b7:7a:c6:72:c7:f6:7c:88:08:07:50:94:2a:
                    33:a9:d9:59:43:d3:f1:d1:50:8c:ca:d8:bb:4b:fb:
                    48:99:a2:e5:1d:93:88:6c:45:d0:2f:e8:90:b5:00:
                    30:b6:e3:29:69:22:1b:2c:58:cb:d8:0c:21:a1:1b:
                    44:16:92:a5:68:9a:85:d4:35:65:ac:85:8f:a4:79:
                    09:99:c0:11:35:a8:80:9c:a1:f4:c8:d1:09:5e:26:
                    2f:d9:02:f7:90:2f:1c:75:91:7c:15:e5:13:2d:e4:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:73:1B:5A:FA:9B:E5:8D:D4:9D:4C:15:99:3D:AA:99:FA:A4:9F:B2
            X509v3 Authority Key Identifier:
                keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cd:4c:4b:a7:53:7b:8f:58:f1:dc:23:50:5f:60:8b:4a:49:
         62:93:bf:f6:ad:b5:1f:7c:e5:fb:13:8f:ae:b9:2a:ab:b1:89:
         36:11:0b:66:16:6f:6f:c5:4d:77:2b:2e:e7:54:73:b2:07:ac:
         c0:40:56:16:ad:fd:f7:b4:d7:2a:05:65:9e:97:f9:86:d0:13:
         e3:15:c0:79:93:89:20:02:63:29:9f:c2:37:74:23:61:4f:58:
         7f:e3:33:f8:81:a3:30:32:3b:89:95:ff:a1:66:95:69:c5:2b:
         69:9b:b8:62:79:ac:72:e7:35:13:db:42:97:e2:60:ad:ba:14:
         c9:6c:57:cc:cc:0f:b5:25:01:49:36:e4:6a:a6:be:54:c5:b2:
         c2:df:7b:5f:3b:48:35:d2:73:81:7e:b2:4b:2b:41:98:16:e7:
         5d:7c:ad:ec:04:ea:ac:9d:a5:c2:38:55:10:6a:b1:c7:00:98:
         2d:95:eb:6e:d5:8f:d2:6e:a9:ed:d8:8c:f8:94:63:b8:62:cf:
         1f:30:d1:37:83:78:72:df:ad:c6:65:71:ac:f3:10:80:e3:15:
         7b:8d:e3:49:e9:f1:6d:0a:17:68:9c:70:c3:ef:f3:45:d2:70:
         e6:88:7b:11:fb:aa:73:ac:d8:c9:36:82:2c:91:57:16:e3:51:
         b1:e0:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:58:37 2024 by rpki-client on console-ams.rpki-client.org