Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File:                     X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier:          BW/zfvWaMNhrA4T/pOcakpceGs0NN/CgiiKpV3HvwWM=
Subject key identifier:   E5:69:18:26:F2:1C:02:E0:47:6B:28:9B:2B:7A:C5:65:7A:2C:80:10
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer:       /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial:       018F866CD8DBEF41487C2E8D03857793D0EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number:          0B88
Signing time:             Fri 17 May 2024 12:00:31 +0000
Manifest this update:     Fri 17 May 2024 12:00:31 +0000
Manifest next update:     Sat 18 May 2024 12:00:31 +0000
Files and hashes:         1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: vfgRZjq2WgkcIUJYcJXLKLFjln92DYydvDUP+GMCunQ=)
                          2: ciaLEow_VCUI6Y9EhWoOqmPoXlU.roa (hash: zLk/YXGfjywOQ3dk1p1gUZfr4hKaPMXAYPiXektSHXI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:d8:db:ef:41:48:7c:2e:8d:03:85:77:93:d0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
        Validity
            Not Before: May 17 12:00:31 2024 GMT
            Not After : May 18 12:00:31 2024 GMT
        Subject: CN=e5691826f21c02e0476b289b2b7ac5657a2c8010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:b9:26:af:5d:20:53:2c:15:13:0b:9a:c2:
                    33:be:f0:f0:db:ca:bc:fd:46:98:61:70:a3:0d:cd:
                    42:69:71:94:4b:6d:9a:58:3e:8a:67:9b:45:9d:3e:
                    f6:93:f2:46:68:59:31:e5:b7:2d:d3:05:7d:d3:78:
                    66:8e:32:37:05:2c:bf:96:0d:07:a1:0f:cc:dd:3d:
                    ee:e0:11:9b:3b:3b:7f:92:cb:ed:67:e2:5c:8f:cc:
                    99:c1:4b:da:b0:6e:e0:4a:8a:af:bf:c0:c2:3f:93:
                    03:bc:9d:57:a0:4c:e4:fc:53:50:68:31:b2:fb:73:
                    5b:ef:bb:85:2f:9d:44:36:01:5c:5a:f8:cb:db:65:
                    fd:2c:a7:5f:2d:af:45:80:7b:c2:df:25:48:06:ed:
                    9a:75:6a:b0:2e:be:0c:e3:23:fb:3d:04:71:58:e1:
                    16:72:86:33:76:54:4b:02:79:6f:ea:f4:c9:b4:75:
                    73:db:6d:b4:13:30:d0:98:55:6e:65:83:6e:16:00:
                    f3:f2:1a:10:f1:1c:6e:98:40:76:dd:f8:6c:d7:4b:
                    7b:6e:02:9a:cd:e3:de:d1:fd:9c:d3:03:e3:ac:08:
                    bf:90:97:da:6e:61:64:1f:4b:12:06:ae:c6:f0:3f:
                    38:01:e7:19:02:96:d4:72:09:5c:70:86:64:87:e2:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:69:18:26:F2:1C:02:E0:47:6B:28:9B:2B:7A:C5:65:7A:2C:80:10
            X509v3 Authority Key Identifier:
                keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:71:81:af:c8:36:7d:9e:f4:9c:a8:75:b7:72:40:b5:36:
         ef:26:37:23:63:9a:b0:eb:96:b6:cc:6a:f1:6b:30:21:9f:ee:
         0b:3d:b3:90:cb:d2:4c:df:51:7e:e6:bc:85:17:7c:fa:e7:84:
         a1:0d:60:f2:89:ee:08:24:60:0e:0f:bb:5c:f5:bd:c7:8e:22:
         30:a7:42:02:5e:15:6f:77:42:51:31:3f:a3:88:c5:02:09:d1:
         66:49:3e:51:99:77:21:4c:46:06:08:de:6f:81:99:a6:57:ea:
         5f:1d:c4:ae:21:a0:5a:50:3c:10:9d:58:63:d0:57:c5:ec:a0:
         d8:60:5c:36:30:60:e4:c4:45:96:cd:21:35:33:59:21:68:eb:
         51:d9:4b:80:de:e5:79:e2:ba:07:85:ab:3e:25:ee:db:12:62:
         14:5a:73:03:ed:30:0e:4f:3e:c0:8d:5f:15:d6:31:56:34:f4:
         25:ef:15:02:64:a6:b9:e2:c1:6b:8a:b6:27:7f:9a:35:34:c8:
         46:fd:78:8c:0e:e8:e0:52:aa:1c:12:f0:3e:a9:d8:7b:6c:54:
         e2:cc:af:63:23:a7:3c:45:8f:b5:6c:a7:bb:7f:92:02:1f:50:
         5e:e8:bb:d9:60:01:f3:8a:3d:0d:d1:f7:1f:d7:ee:a4:1f:8a:
         86:fc:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:40 2024 by rpki-client on console-ams.rpki-client.org