Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File:                     bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier:          SZoA3CQ7TYw1ootzucESiwUlguD8Rno2gK7QKfZzKyI=
Subject key identifier:   33:41:87:EE:63:A5:C7:C7:37:69:9A:12:F0:FE:9F:DB:1E:64:F1:A7
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer:       /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial:       018F8749DD34F2CC478259F9C39B0B657F76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number:          0E8E
Signing time:             Fri 17 May 2024 16:01:55 +0000
Manifest this update:     Fri 17 May 2024 16:01:55 +0000
Manifest next update:     Sat 18 May 2024 16:01:55 +0000
Files and hashes:         1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: +v4p0GwO0pJ1sYhjvlW88AdJZBmBwYO/nu3jYKxb5hY=)
                          2: sZD2uiksEgouUq3vi19r0AQqiUw.roa (hash: /0qOOpP1yXRG7gGHeimJwbpqOSYqmsm0qB860xNu9pc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:dd:34:f2:cc:47:82:59:f9:c3:9b:0b:65:7f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
        Validity
            Not Before: May 17 16:01:55 2024 GMT
            Not After : May 18 16:01:55 2024 GMT
        Subject: CN=334187ee63a5c7c737699a12f0fe9fdb1e64f1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:fe:1f:f4:8c:aa:a7:9e:85:ea:f7:c0:bb:
                    96:65:be:4b:0d:b5:4c:ad:1a:89:9e:33:45:c0:15:
                    d6:9d:fc:34:8d:b2:22:ee:81:a3:bd:21:f6:a9:0a:
                    98:94:78:64:7b:2e:23:40:7f:dc:ec:49:33:0e:b5:
                    f8:5d:42:63:61:e4:a8:3a:d1:fb:31:9a:92:25:c3:
                    4f:b8:7b:fc:cb:7f:c0:5e:9f:7f:63:ee:75:1e:a9:
                    d4:55:5b:4c:a5:d5:c4:c8:65:e9:5b:5c:83:04:14:
                    07:f5:84:3f:fc:39:eb:2e:98:d8:8e:76:a0:f1:bb:
                    cb:e5:f9:3d:77:df:db:bc:6b:a1:ab:f0:66:68:34:
                    a9:7b:8a:5d:9d:d0:a1:b6:9b:d0:43:5a:00:58:58:
                    6e:d9:37:94:9b:70:db:70:8c:3b:dd:51:3c:d2:53:
                    27:5e:66:8b:b9:85:a7:f2:37:b9:20:f0:16:7f:5d:
                    d9:74:c4:35:f5:e4:a9:55:bc:69:c4:fd:69:34:7f:
                    5e:d2:b3:06:d9:98:a5:94:ab:2e:c8:6d:5e:38:9f:
                    78:57:9b:63:c4:92:92:28:7c:91:02:e5:55:82:07:
                    9f:61:a7:5f:54:6c:22:cd:ad:5c:13:cb:ec:1f:96:
                    89:b5:31:e5:d7:bc:8e:73:f5:67:40:4f:64:51:d2:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:87:EE:63:A5:C7:C7:37:69:9A:12:F0:FE:9F:DB:1E:64:F1:A7
            X509v3 Authority Key Identifier:
                keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:5f:9b:20:ad:35:80:fe:dc:8c:c6:f6:1f:55:f7:1e:68:
         6f:7e:61:6c:d0:af:c0:4a:65:ac:af:be:e0:1c:61:ae:9e:3d:
         2e:e0:af:55:3a:08:b0:1c:6a:62:ee:ff:3d:25:ee:fb:49:dd:
         a2:66:93:be:f8:ce:b1:38:8d:b6:b1:d8:65:fe:bf:ff:8f:45:
         bf:6b:c7:18:fd:12:56:c4:b7:90:53:e0:0b:33:e4:68:02:4e:
         31:40:7c:a0:bc:59:24:67:b3:2d:11:e7:03:d5:4f:0c:3e:91:
         ce:49:39:c7:56:1c:69:26:52:89:5a:f9:b7:9a:e8:e8:8f:70:
         86:77:43:9d:f3:4f:3a:64:e3:fc:9d:49:16:46:b0:d7:a9:e1:
         2f:d4:6d:a8:e1:14:04:31:11:cb:85:26:62:68:17:71:3c:e6:
         66:0d:d5:c3:98:57:a5:f1:6f:8a:0d:db:8f:e7:98:99:df:c8:
         55:ac:b4:0a:1d:14:16:28:0c:b5:27:a7:71:25:4f:2f:ee:62:
         52:c0:39:e3:1a:12:28:60:64:9c:2b:8b:e9:f5:b3:90:6d:88:
         8a:41:e9:ea:95:f2:76:a6:ba:ff:5f:b7:62:09:5d:b6:28:4b:
         02:1c:01:19:b0:14:86:06:ef:2f:14:06:51:3e:42:4a:3f:58:
         30:42:7f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:46 2024 by rpki-client on console-fra.rpki-client.org