Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File:                     SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier:          0pQYpevgJ/rXLz9x9qPOLUCNcgUCp8qnDIjVjZzNcuE=
Subject key identifier:   F3:FA:1F:91:7C:B0:95:EE:95:97:4F:2D:14:D9:E4:ED:52:9C:DE:2D
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer:       /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial:       018F874A2EBF5808378240810240FC7C7D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number:          049F
Signing time:             Fri 17 May 2024 16:02:16 +0000
Manifest this update:     Fri 17 May 2024 16:02:16 +0000
Manifest next update:     Sat 18 May 2024 16:02:16 +0000
Files and hashes:         1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: QcKJ0qPtWzSbdrbmZY2PmAC78MEcQTZAgM9Zj22i1Lw=)
                          2: VxQVxhC7GGFfqObxyWDExl-tdAg.roa (hash: 4KByHrX9k5UwoavSziIU4H7Znt0p4r8UmEYZ1DaC0Kc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:2e:bf:58:08:37:82:40:81:02:40:fc:7c:7d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
        Validity
            Not Before: May 17 16:02:16 2024 GMT
            Not After : May 18 16:02:16 2024 GMT
        Subject: CN=f3fa1f917cb095ee95974f2d14d9e4ed529cde2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:de:63:2e:78:cb:e7:4f:87:2c:e2:e7:9d:
                    70:fc:e3:1f:cf:f4:59:b4:24:aa:9b:72:74:0c:bc:
                    f2:f8:ce:b5:f3:d5:98:7e:65:96:83:b7:4d:1e:50:
                    37:ba:9b:88:7c:06:fa:24:c4:60:cf:a9:45:22:2a:
                    f5:e2:18:79:8a:e5:26:12:c4:3f:24:e0:7f:d2:eb:
                    57:92:55:4c:09:c1:6c:3a:48:16:8d:3a:66:62:72:
                    f4:26:f4:ce:8b:a4:d3:d0:33:3f:e6:82:6f:2a:6f:
                    b6:5b:ca:ea:60:56:6d:18:c7:85:30:e9:94:ad:ce:
                    31:2d:ab:73:06:0e:b0:0b:7e:72:0a:d7:25:1f:74:
                    f8:4c:12:ba:ea:f9:93:77:a0:79:2e:32:a9:d6:96:
                    b5:5c:1f:16:b5:f3:13:1e:a3:d9:2d:74:4b:d8:c3:
                    3e:ae:d6:24:e9:ff:76:77:4a:14:a3:b6:e4:2f:9b:
                    f4:64:7a:8d:f7:90:9f:10:1b:ba:33:19:45:06:94:
                    d0:54:34:df:7f:f5:1a:f6:8a:c9:5f:35:0c:f5:9a:
                    06:02:f6:3e:d3:e4:9f:91:b9:71:23:2e:9d:61:6d:
                    d9:1c:20:45:b7:d2:ea:10:cc:79:b5:b9:a0:9b:1f:
                    8b:8e:57:6b:6b:e3:60:aa:8e:a2:19:96:79:b5:d7:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FA:1F:91:7C:B0:95:EE:95:97:4F:2D:14:D9:E4:ED:52:9C:DE:2D
            X509v3 Authority Key Identifier:
                keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:3a:03:dc:51:ae:79:bc:2d:db:c5:cd:77:cd:81:06:78:df:
         8b:3b:f1:3b:fd:e1:38:59:6d:ca:22:f4:34:44:e4:bf:83:b8:
         85:8d:7b:45:45:91:17:18:6d:6a:71:22:59:5c:86:d0:16:f9:
         ee:47:56:8a:cc:75:f5:d2:aa:43:c6:b9:1b:70:db:9d:14:08:
         fd:64:92:6d:5c:84:f2:4d:b5:cd:79:e6:05:27:c9:53:e6:9f:
         68:24:d5:6a:3c:b8:7c:f2:6d:46:39:b3:28:a1:96:3a:24:91:
         08:1d:3d:3a:65:e8:5a:7f:f3:5d:ef:40:c1:75:03:71:4d:21:
         c2:7a:1e:5f:33:ad:8e:2b:d1:df:f2:63:b4:d9:f5:6c:6f:44:
         12:0c:ef:4a:cb:6a:c5:5f:d3:ac:90:50:1d:12:43:c5:e0:30:
         34:7f:4c:e7:2c:dd:e0:fb:86:cc:a4:fd:0e:9d:4e:6b:7d:34:
         2a:dc:cc:ca:96:9d:a8:ba:9e:05:b2:be:7b:4d:09:b8:cd:63:
         0a:f1:17:41:65:41:a4:76:32:ac:6d:ca:6d:a1:59:11:fc:f5:
         1b:b1:1c:75:70:c6:60:d4:28:a8:12:fe:46:9a:c7:cd:dd:03:
         78:da:94:ef:a7:93:48:32:6f:fc:8d:bd:19:08:a2:50:6b:a6:
         77:39:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:56 2024 by rpki-client on console-fra.rpki-client.org