Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File:                     YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier:          V9Fkri5T7yDEXwFryB/oCfwn87hLeDanMakEorme+jo=
Subject key identifier:   5C:B2:F9:6F:77:66:3A:3A:9B:3E:A2:86:D5:06:D4:1B:6A:21:DE:06
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer:       /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial:       018F87B6686E9BC09E7F7F517F6D70CDB0A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number:          05D9
Signing time:             Fri 17 May 2024 18:00:29 +0000
Manifest this update:     Fri 17 May 2024 18:00:29 +0000
Manifest next update:     Sat 18 May 2024 18:00:29 +0000
Files and hashes:         1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: 9cWJzFbXPZ+1AysCURlBQwBfPGT0R2mtiqfEuzu/xmU=)
                          2: h8dGGke1xY1JEpUdTNczvEMmj5E.roa (hash: vo2ZgFHC68JDcvSHU2tNN+8GWnkrUyhfTfUl/V5oJfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:68:6e:9b:c0:9e:7f:7f:51:7f:6d:70:cd:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
        Validity
            Not Before: May 17 18:00:29 2024 GMT
            Not After : May 18 18:00:29 2024 GMT
        Subject: CN=5cb2f96f77663a3a9b3ea286d506d41b6a21de06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:45:68:6a:25:4d:4a:34:c2:f6:af:f7:b5:
                    9d:ec:cf:13:50:0d:53:25:97:fb:55:11:fc:56:9d:
                    95:64:f2:c1:b6:62:f2:03:25:f1:3d:29:00:74:dc:
                    d5:35:08:32:f6:28:48:e3:04:8a:22:60:1a:31:86:
                    87:ed:37:72:73:af:23:51:ec:94:d7:05:22:78:e4:
                    01:d5:af:f4:79:ed:0f:67:52:4c:90:94:75:84:22:
                    de:49:75:9d:12:ac:20:7e:f5:d2:ba:08:ac:b8:2e:
                    30:78:42:5c:ef:47:37:04:a6:5f:c9:99:d3:88:28:
                    a3:06:50:41:f1:51:38:6a:2d:35:4c:1d:be:35:6d:
                    df:49:c9:52:34:f4:65:63:a5:96:1f:e9:f0:bb:4c:
                    53:f8:74:39:71:2d:99:e9:77:38:9c:c3:1a:54:4c:
                    46:fe:f8:e8:fd:d4:11:44:c1:a4:56:5d:55:bc:b1:
                    e8:41:7c:54:83:5d:7f:6f:93:24:b7:69:db:b1:df:
                    f3:08:47:fc:35:87:18:f9:6c:56:24:37:ce:89:7b:
                    66:07:31:bf:2e:55:12:4d:43:89:43:8e:19:51:bb:
                    7e:20:9e:34:6e:76:9c:1a:c0:3a:6f:27:9c:4d:d9:
                    d2:5e:c0:79:d9:42:d9:ad:cd:27:9e:42:7f:9e:9a:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B2:F9:6F:77:66:3A:3A:9B:3E:A2:86:D5:06:D4:1B:6A:21:DE:06
            X509v3 Authority Key Identifier:
                keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b7:c4:32:66:d4:7b:dc:16:91:47:a1:53:7b:72:3d:d2:43:
         7d:c2:87:e1:a0:da:58:fa:85:71:fd:fc:f9:ff:b1:2d:75:06:
         0b:79:f1:b0:ef:4c:e3:17:9e:f3:47:b9:cd:1b:f3:3b:33:2b:
         d8:9e:c1:00:73:b1:40:b6:07:ca:ad:d3:08:cb:b7:b8:d1:a9:
         01:25:52:92:19:95:68:f9:e6:6d:44:d0:77:a0:69:f6:61:8d:
         1a:4a:2b:4d:32:22:73:8f:0d:3e:a3:30:03:1d:0c:3d:ec:8c:
         a2:3a:6f:40:69:3c:e1:34:5a:8a:1f:de:aa:ab:47:dd:dd:a7:
         71:35:c2:57:e2:96:c1:d5:fd:58:f7:df:a7:a0:31:ee:79:f3:
         a9:e3:a4:72:db:c9:01:27:30:61:a2:2b:50:69:aa:2b:78:59:
         64:30:7b:35:10:3f:9d:09:f8:3e:bd:f7:31:98:9c:8f:9b:68:
         41:09:62:ce:91:f5:ac:5a:1b:cf:e5:b2:db:8d:bc:95:2b:12:
         f7:e1:04:12:48:ea:5a:3f:36:32:3c:a3:8c:12:59:09:3e:f9:
         74:c8:80:2c:38:05:aa:e1:10:9d:b7:4b:b6:fb:0f:55:da:13:
         8b:44:80:ca:b4:b6:67:4a:c7:87:4a:09:93:07:37:89:5f:51:
         1d:0c:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:19 2024 by rpki-client on console-fra.rpki-client.org