Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File:                     dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier:          sDKulKCKk98VqVgWy/fmYEcy8EW3LICRkVqZ6f4pglM=
Subject key identifier:   DB:0B:26:8B:BF:89:29:32:AB:8C:5A:7A:C7:47:09:62:71:D9:06:93
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer:       /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial:       018F88240244F12398D7946524A923979739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number:          053F
Signing time:             Fri 17 May 2024 20:00:12 +0000
Manifest this update:     Fri 17 May 2024 20:00:12 +0000
Manifest next update:     Sat 18 May 2024 20:00:12 +0000
Files and hashes:         1: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: BsHXEr0WUacduBW4MVxOgo425LWlV2jNDj0cKz9L1tk=)
                          2: vdxpz9a4s2iBaQufWBElAvEI2VA.roa (hash: kObLopjnnN65OWonitWDg9f7pzx7j+bzkK70rrCE7gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:02:44:f1:23:98:d7:94:65:24:a9:23:97:97:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
        Validity
            Not Before: May 17 20:00:12 2024 GMT
            Not After : May 18 20:00:12 2024 GMT
        Subject: CN=db0b268bbf892932ab8c5a7ac747096271d90693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:08:3f:2d:d8:90:c0:45:a5:a9:3f:00:ee:
                    6e:22:c7:1f:45:b0:ed:d4:bf:9a:2c:3d:e0:69:46:
                    f5:18:4f:47:35:77:7f:31:37:9e:b2:bc:3d:46:39:
                    e1:89:8e:cd:0a:6c:9f:4e:37:aa:f6:c5:50:45:bc:
                    bb:67:d9:96:6d:00:90:5f:f6:32:00:9c:27:ce:30:
                    e6:5d:2a:52:26:72:0c:47:c8:f7:96:d3:0e:55:fb:
                    7c:ba:02:c3:a7:2a:25:a2:a0:cb:7a:d7:4e:07:f0:
                    ee:08:f2:16:71:eb:82:53:1a:dc:ec:2a:a6:d8:96:
                    15:26:79:91:9f:64:2d:14:8a:3a:92:13:48:2d:af:
                    19:4f:c3:25:50:2b:0c:20:85:73:06:dd:92:52:bd:
                    e7:b3:38:03:a6:cb:4f:18:f1:38:a9:cf:73:4b:1e:
                    57:60:82:d8:bd:a4:d8:d8:b7:08:38:44:4d:f3:bb:
                    89:e7:b2:bd:7d:98:c4:e7:99:67:9b:6c:92:14:4e:
                    3f:74:c5:ed:f7:a0:cf:25:66:14:1c:82:5a:bf:50:
                    c6:5b:5d:ce:6b:0d:e3:8f:46:f4:42:ec:79:8f:cf:
                    48:56:fe:55:3d:39:0c:a6:c9:bd:54:29:e1:ae:43:
                    a9:c7:ac:11:c0:a6:94:3e:f8:7c:af:36:76:ac:6e:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:26:8B:BF:89:29:32:AB:8C:5A:7A:C7:47:09:62:71:D9:06:93
            X509v3 Authority Key Identifier:
                keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:a7:26:34:88:cc:b8:0f:f0:fa:af:7d:85:62:86:0a:9b:
         1c:f8:06:80:0f:c3:82:6d:e4:28:91:f9:63:f8:4f:5a:25:df:
         51:7c:66:46:f4:b4:27:43:d4:2b:4c:07:eb:f1:7c:39:36:db:
         7b:5f:59:a2:a1:0f:75:39:4c:1a:c1:de:41:25:fb:e1:65:ef:
         46:10:77:b5:e8:ee:2e:6c:b5:1e:be:d2:53:1e:1d:a6:0a:a7:
         a9:b0:8b:88:62:2d:a6:c7:6e:c4:50:45:d7:27:65:7c:99:b0:
         8a:c4:18:c5:6f:7a:57:23:91:8a:1d:7a:57:fc:ab:5a:c0:fa:
         d0:eb:11:1f:ca:b8:70:80:c9:b0:78:ea:cd:02:af:b4:8e:e5:
         85:ce:b6:6b:12:de:a7:10:79:3e:3f:9a:c0:79:6a:3f:4e:ed:
         67:d9:8c:10:c3:69:3b:d2:d2:d6:58:2d:9b:cc:08:a7:f1:91:
         9e:d3:5d:e3:e3:07:21:ee:fd:08:32:23:98:01:d5:ee:ce:46:
         a3:ac:bd:19:93:55:00:80:0a:d1:a8:40:05:11:3c:e2:af:d8:
         d6:53:f5:88:06:cc:10:a0:33:ca:98:f1:26:f6:45:54:83:4d:
         aa:cc:24:00:41:81:ed:c4:24:ba:8f:09:19:b3:3e:bd:ff:16:
         de:35:ab:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:01 2024 by rpki-client on console-fra.rpki-client.org