Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File:                     VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier:          0ouhco089YRrwBhTLdOylPrJwbj46N36XzqlIAVBc5k=
Subject key identifier:   01:A5:A1:A6:BE:6B:15:FA:59:35:87:E1:24:81:20:2D:43:45:85:4A
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer:       /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial:       018F86A35E9FD1A1110BEFCEE6C5C02773B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number:          10C7
Signing time:             Fri 17 May 2024 13:00:04 +0000
Manifest this update:     Fri 17 May 2024 13:00:04 +0000
Manifest next update:     Sat 18 May 2024 13:00:04 +0000
Files and hashes:         1: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: R7DrqbfaqYYvyyvxFsDJOMtMteOpTaqz1PHrFLi1Avo=)
                          2: s9ObDJjyPHq1zOz-e4O4ptl9ubQ.roa (hash: Ql+TOQD4NGBNyf3IKxbEE4gdXK37sylGmJ8nxPsXu8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:5e:9f:d1:a1:11:0b:ef:ce:e6:c5:c0:27:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
        Validity
            Not Before: May 17 13:00:04 2024 GMT
            Not After : May 18 13:00:04 2024 GMT
        Subject: CN=01a5a1a6be6b15fa593587e12481202d4345854a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:88:2a:fe:4a:8a:80:be:e9:b2:0c:18:74:
                    7d:7d:3c:70:ac:36:52:fc:e4:a2:ad:0d:c9:57:44:
                    67:24:58:0a:1e:47:1a:5a:06:63:9f:d6:f4:f9:e6:
                    70:6b:53:bc:b6:1d:aa:db:fe:87:0c:2b:d1:67:58:
                    3e:c4:42:7b:76:5e:e0:89:11:cc:77:82:3f:5a:88:
                    86:a3:01:3c:7e:62:07:46:d7:34:95:97:e4:89:58:
                    3d:91:de:22:78:a6:cc:1f:06:2b:44:20:ad:f5:f1:
                    ac:75:0f:b4:f6:0e:ee:2e:75:c2:2b:6a:b8:ad:14:
                    3f:e3:fb:12:64:3f:f3:a9:7b:ac:e8:73:52:6c:1c:
                    40:9f:9d:f1:52:02:e1:1f:2f:2f:76:55:b1:c8:f2:
                    64:b6:8d:56:e7:da:e0:4b:79:a4:07:1a:5c:86:68:
                    c7:bb:e2:1f:52:03:50:6e:2c:2c:e2:db:0d:3e:b9:
                    1e:84:3c:72:e5:45:f0:86:86:fc:95:b4:b8:4a:90:
                    40:57:40:f0:aa:92:ea:c2:af:54:6f:95:5f:38:85:
                    63:bf:25:ff:c7:98:a7:ab:48:de:85:14:9d:7a:37:
                    ae:e2:e5:a4:f3:23:5b:34:36:eb:74:b2:1a:0e:e6:
                    a8:80:91:37:cf:bb:23:d6:b1:7a:42:f3:af:39:c6:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A5:A1:A6:BE:6B:15:FA:59:35:87:E1:24:81:20:2D:43:45:85:4A
            X509v3 Authority Key Identifier:
                keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:e8:22:22:f0:66:ae:b9:49:a7:02:d9:1f:f6:fa:74:fe:
         34:fc:38:af:16:3a:f2:c5:91:63:22:ee:ad:4f:5f:fc:bd:75:
         d2:31:e7:6d:4a:6e:d0:16:ba:38:a9:f5:ff:b7:4f:d1:86:51:
         89:1f:b2:43:0c:e5:66:d9:4b:8a:a8:9e:5e:1f:66:70:fe:3d:
         8d:ba:fb:13:60:59:2c:01:d7:e1:90:a7:a5:eb:81:19:ff:a5:
         d8:bd:b6:48:8f:14:23:58:9e:d7:5e:d1:d3:ea:e7:9f:aa:87:
         27:c4:3d:f6:fa:49:75:5a:27:6b:0d:a4:b2:42:53:da:ba:70:
         99:9a:33:b0:0b:a7:68:78:1b:c9:ae:67:c8:57:1b:a7:0d:ca:
         ec:d0:35:c2:8c:c5:db:71:f9:1e:a3:c6:8a:56:77:65:8b:95:
         00:07:80:5e:ac:73:39:86:c3:55:56:ae:63:26:44:95:fc:c7:
         02:2c:e8:2b:ab:ca:ff:0c:51:66:60:be:3e:15:85:df:70:87:
         3f:e7:cb:87:09:13:65:a0:28:f5:29:6f:dc:37:07:08:15:89:
         a6:be:13:d9:80:ff:78:12:ac:d5:eb:6c:f4:c1:e1:00:5a:f8:
         64:04:9a:d1:8c:a2:df:3f:60:ad:b7:75:4a:98:de:57:43:3b:
         e7:42:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:51 2024 by rpki-client on console-fra.rpki-client.org