Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File:                     yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier:          nxIDC9MHXYgSX0PFHcqlePmAvLhX1IgviDfd3Zj3vlo=
Subject key identifier:   82:51:65:8E:BD:C5:7E:CD:2B:C3:01:CE:9C:F2:8D:01:50:4C:3A:3D
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer:       /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial:       018F8749B31E6B935E18BEF157665365274A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number:          0DD0
Signing time:             Fri 17 May 2024 16:01:45 +0000
Manifest this update:     Fri 17 May 2024 16:01:45 +0000
Manifest next update:     Sat 18 May 2024 16:01:45 +0000
Files and hashes:         1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: 10AXJzVt7zzH2xJml08hAiukAybwx9l+Jzx7ovKIEKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b3:1e:6b:93:5e:18:be:f1:57:66:53:65:27:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
        Validity
            Not Before: May 17 16:01:45 2024 GMT
            Not After : May 18 16:01:45 2024 GMT
        Subject: CN=8251658ebdc57ecd2bc301ce9cf28d01504c3a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:e5:55:62:f4:98:39:05:6d:83:bb:2e:85:
                    0a:21:c5:8b:aa:9e:a0:27:84:5b:d6:dd:a7:3c:b2:
                    63:db:fc:c8:ea:e9:b8:1b:73:ea:0e:5a:20:52:78:
                    76:64:d6:b4:58:38:dc:b9:17:ec:ee:4f:38:04:c1:
                    b6:7d:c3:6d:8a:25:e3:db:f2:c5:cb:86:ef:27:a7:
                    70:e4:c9:7a:09:85:8b:15:92:34:94:7d:19:2d:ff:
                    bf:76:9f:d5:cd:b2:6c:c3:06:ba:1a:32:b7:58:92:
                    91:91:ca:2e:e6:1d:af:40:8d:f8:7b:77:7e:78:eb:
                    49:1e:10:86:3d:32:62:83:cb:99:1c:d2:c2:6c:f8:
                    d8:c8:b1:85:66:76:88:45:91:1b:dc:ff:cc:ef:6a:
                    65:02:63:9d:45:63:70:a6:a1:e3:48:49:d1:ae:47:
                    40:7a:b8:3e:7b:ba:32:4a:58:58:6c:c3:2f:cb:8d:
                    c9:36:2c:4d:33:d8:a3:a0:3b:ed:32:aa:e0:6d:29:
                    74:71:94:42:b1:e4:81:9b:e2:bd:74:d3:50:5f:7b:
                    a6:6d:33:1b:d4:39:3b:1f:21:40:7e:25:e6:e5:ce:
                    70:fb:fb:67:ec:50:23:53:d3:6f:37:6d:f2:2a:65:
                    e6:ee:b5:32:c2:47:43:3f:12:5d:b2:23:8a:3c:f7:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:65:8E:BD:C5:7E:CD:2B:C3:01:CE:9C:F2:8D:01:50:4C:3A:3D
            X509v3 Authority Key Identifier:
                keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:b7:de:e4:d2:f1:ba:ef:b7:b9:20:3c:1d:cc:4e:98:78:
         ca:65:93:0b:0f:98:08:ca:84:e4:88:76:05:82:f9:ed:a8:fa:
         0a:fc:fb:9b:b2:d2:66:f5:d3:aa:a5:ad:32:a9:d0:c3:eb:79:
         b3:cf:21:fe:ab:e7:97:a5:4a:8b:87:f2:c4:5b:b7:7c:bd:be:
         d0:f3:d0:e1:22:f3:92:1a:95:4b:da:73:28:d1:1a:cb:07:21:
         d1:4d:e6:b0:be:4e:ac:31:d4:72:2c:8f:ed:d2:df:4a:eb:e5:
         fd:14:51:c8:e8:35:db:65:e4:73:df:c4:82:86:ca:7b:74:95:
         e7:6c:14:1b:59:07:db:42:91:9a:f0:21:72:a3:21:74:1c:f9:
         44:9b:cb:73:71:32:da:e3:fd:c3:39:1d:be:80:6e:69:19:de:
         ae:6e:90:19:5e:36:b3:28:04:ad:44:52:aa:9f:df:cd:e8:4b:
         05:94:8d:cc:5e:f8:44:00:42:9a:2b:02:3b:d6:a8:28:25:55:
         b4:17:a3:10:ce:61:9c:a7:9e:e1:95:47:41:b0:f1:59:59:a9:
         7b:f1:08:c3:1a:df:17:7e:ab:13:a4:07:f2:ed:31:a9:72:0d:
         34:d7:72:85:a3:61:9d:3a:e7:7b:7a:e9:47:11:96:08:de:28:
         a1:30:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:42 2024 by rpki-client on console-ams.rpki-client.org