Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File:                     RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier:          CpEKYeR6s2vnHRPyPxnabFv7EOVVikZkX7zjiGnzrg8=
Subject key identifier:   B1:BA:7B:A0:D6:8A:E3:6B:46:78:1B:CF:D9:DE:7B:5D:1E:08:9D:4C
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer:       /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial:       018F877F4D83D35E524DEBD5C9F445E80B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number:          7E
Signing time:             Fri 17 May 2024 17:00:18 +0000
Manifest this update:     Fri 17 May 2024 17:00:18 +0000
Manifest next update:     Sat 18 May 2024 17:00:18 +0000
Files and hashes:         1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: P00sFj/w5pE18fNY0bCrDPyyt4X06IErN5t7YOoFM9o=)
                          2: pIAnkRcvLBdP_3Py1MjvxO1fhXI.roa (hash: h6SbBs0UezKV/16WT7LJpKLf5VbvuT81eL6ICgcWXpw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4d:83:d3:5e:52:4d:eb:d5:c9:f4:45:e8:0b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
        Validity
            Not Before: May 17 17:00:18 2024 GMT
            Not After : May 18 17:00:18 2024 GMT
        Subject: CN=b1ba7ba0d68ae36b46781bcfd9de7b5d1e089d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:53:bd:82:fb:88:9e:48:b9:5a:10:37:2f:
                    99:50:55:51:8a:ec:1d:09:a6:6c:53:0c:75:1a:3a:
                    d0:ac:19:3b:50:6c:a4:c1:93:85:49:54:bc:c4:3b:
                    bd:11:6c:9a:4a:0e:0a:47:a4:e3:51:b0:b0:89:9d:
                    b8:0f:22:0c:cf:3d:31:4a:02:ae:74:bc:fb:27:e2:
                    e3:82:39:c8:3d:6a:c4:58:cc:ea:3c:3a:b1:3b:5d:
                    0d:c2:c0:c3:cc:be:b1:79:e4:18:71:14:07:25:5e:
                    37:ed:a5:a7:77:71:a9:63:42:01:5f:98:1b:91:b2:
                    f4:1a:d0:06:37:2e:f9:21:fd:52:76:a2:a6:e8:da:
                    cd:bf:31:3a:4e:2e:8c:c6:c8:1d:39:2b:82:7b:c0:
                    a3:d4:55:42:d3:12:f2:fd:62:f0:95:b1:21:06:b3:
                    26:3a:4d:2f:c4:0e:32:88:ea:0b:5e:f9:25:7b:a5:
                    5f:1d:bd:1f:01:42:80:8b:2b:d7:2e:69:aa:7d:c9:
                    6b:29:32:4d:24:5b:2e:3f:96:51:bd:46:9f:42:2e:
                    9a:8e:ac:a3:65:bd:97:9b:0c:23:52:2b:4b:a8:14:
                    bf:e2:f7:58:8b:af:ee:16:1f:29:86:3d:94:80:89:
                    69:e5:d7:80:c0:eb:32:6c:c5:8c:66:24:84:31:38:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:7B:A0:D6:8A:E3:6B:46:78:1B:CF:D9:DE:7B:5D:1E:08:9D:4C
            X509v3 Authority Key Identifier:
                keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:bc:58:48:91:99:2b:04:90:96:d0:73:e8:48:d3:38:6a:
         42:11:41:83:8f:eb:32:6c:bf:8d:9c:a0:b3:2b:bc:c7:85:ef:
         4a:5a:6a:55:26:6d:1c:62:f5:fc:2b:f9:46:f5:6e:13:fc:80:
         4b:65:67:9e:ac:22:b6:88:6e:fc:ff:dc:9f:b7:8d:bf:44:7f:
         dd:71:e9:88:9a:6e:ce:24:88:66:44:0a:b7:16:bf:30:ee:23:
         1c:24:8a:02:a7:ab:5f:79:7c:cf:56:d2:8b:0f:13:45:6f:b7:
         b4:70:ad:9c:5d:c1:cc:92:4e:70:97:c8:23:cb:47:ca:cc:6a:
         4e:dd:e9:db:29:67:f8:4d:8b:6e:ad:bd:e9:57:44:6e:34:b1:
         fc:f2:82:7c:3a:43:08:09:85:43:1f:04:dd:03:6c:e6:b4:19:
         ef:ac:d0:93:31:e9:c5:38:8d:aa:8d:24:dc:ea:0d:4e:b7:f0:
         77:4b:22:20:94:00:ba:e7:44:6f:ce:46:c8:0a:de:1c:05:60:
         73:b7:90:30:1d:29:78:07:0f:f7:46:92:f9:c3:81:6f:46:5d:
         5a:f8:22:04:ef:1a:0b:71:71:61:3c:97:d0:2e:df:2e:d2:cd:
         21:e2:db:0d:04:c5:a8:23:cb:52:4e:ef:84:b5:e4:4c:02:a5:
         02:45:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:13 2024 by rpki-client on console-fra.rpki-client.org