Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File:                     syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier:          GWc7GGIhJlAwQmWVOT/XREJEEnDe3apmWbMvccFTxJE=
Subject key identifier:   80:83:78:E1:5D:3F:98:D9:DD:1B:27:5A:C1:64:6E:9A:2C:17:E4:BB
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer:       /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial:       018F8748F9E817AA154D2293D2A46A9C11F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number:          0CB7
Signing time:             Fri 17 May 2024 16:00:57 +0000
Manifest this update:     Fri 17 May 2024 16:00:57 +0000
Manifest next update:     Sat 18 May 2024 16:00:57 +0000
Files and hashes:         1: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: OJznIJ92PaIhiDduflxWNFuIQp0YJfHNg8x7UhMLQfw=)
                          2: vL7sgOo_tCyPmZO0rLYLZVChUZg.roa (hash: CRrAJsjLt/Y5GhpRgUJA9xcGbVWv0/R7BK5vbyE82jw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f9:e8:17:aa:15:4d:22:93:d2:a4:6a:9c:11:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
        Validity
            Not Before: May 17 16:00:57 2024 GMT
            Not After : May 18 16:00:57 2024 GMT
        Subject: CN=808378e15d3f98d9dd1b275ac1646e9a2c17e4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:e4:b0:6b:af:35:f7:fd:de:c5:39:9b:f9:
                    db:34:d3:fc:33:f7:17:93:ef:bd:60:3d:72:18:fb:
                    cf:4f:36:a4:be:d8:1c:c3:21:cb:61:5d:ae:f9:a9:
                    e8:5c:1e:51:00:e4:b9:6e:8b:4a:fc:57:59:63:9c:
                    b2:20:34:9d:ba:29:77:62:66:13:e1:37:0c:e9:5c:
                    db:a8:15:20:d4:eb:59:c0:cc:51:71:28:a7:57:b6:
                    fc:98:25:a7:2e:be:8e:45:03:4f:e6:48:af:42:e6:
                    db:b8:b1:5b:86:96:d9:3a:47:ba:36:f1:1c:3b:95:
                    f1:98:c6:65:cf:d5:a8:55:7b:d2:48:d5:9e:84:ec:
                    05:ec:56:bc:97:69:82:8b:c9:89:c2:5d:bb:71:4b:
                    66:d6:3f:6f:9e:5c:b0:6b:2c:81:68:17:c9:4d:a5:
                    09:3d:aa:da:eb:3c:91:3e:c3:e1:af:8d:99:30:78:
                    98:75:ae:08:f9:22:57:bd:ce:dc:ee:88:05:28:0e:
                    e8:8c:e3:d5:e6:0c:11:05:c3:f7:53:e1:5b:7d:3d:
                    b9:94:70:7b:e0:1b:fc:86:8e:2d:a8:ec:2c:cf:1c:
                    e9:b3:17:87:ce:5c:41:0c:c3:4e:6c:61:cd:76:6e:
                    ef:19:17:54:86:ff:0c:69:9c:72:b5:46:4d:7f:db:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:83:78:E1:5D:3F:98:D9:DD:1B:27:5A:C1:64:6E:9A:2C:17:E4:BB
            X509v3 Authority Key Identifier:
                keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:8a:df:cd:64:ad:c6:2c:fc:61:8d:1f:59:6c:d1:74:aa:
         6b:92:27:d7:8b:59:1b:67:2f:be:35:d2:48:95:41:a5:2f:45:
         55:c1:74:d8:84:e5:80:40:94:4c:31:11:97:12:75:32:26:4a:
         89:cb:2f:8a:69:03:c0:43:89:e8:f8:08:91:28:36:c4:ee:12:
         19:2d:a2:96:c6:d9:a0:5b:6c:6b:fb:35:16:ef:3c:25:1a:43:
         5c:9f:b2:d3:7e:89:b5:44:95:82:4a:c6:c0:fb:fa:58:3f:11:
         bd:99:43:a0:69:2c:89:0f:39:28:ef:99:e2:9f:51:04:69:2e:
         d1:39:6b:e1:28:28:90:80:9d:41:c9:e2:cc:49:ec:df:79:7a:
         84:45:96:75:ba:10:77:ac:b7:b3:f8:1d:a4:55:bf:91:1f:3b:
         d5:02:5a:c6:67:04:c8:b4:63:90:ac:42:ff:4e:bf:03:61:7a:
         fe:5f:87:0c:0d:34:c9:23:76:a1:a2:4c:8f:86:5f:6f:31:83:
         80:5f:3f:1b:91:b7:6f:70:21:ba:4a:a4:bc:36:05:c2:f8:01:
         9c:c3:b3:d8:c3:f3:58:c1:50:4e:9a:3c:72:9a:17:39:4b:b0:
         5b:d1:c7:ec:56:e2:5e:89:da:72:cd:25:b7:99:54:19:ce:91:
         75:c7:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:13 2024 by rpki-client on console-fra.rpki-client.org