Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
File:                     XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft (raw, json)
Hash identifier:          EK5SPaz07MEg43tS17DJsK8E4XWoj5x6dD1xUU3ZZCo=
Subject key identifier:   D8:4A:0C:12:5E:87:A1:24:4E:FE:00:89:6D:F8:1A:DC:03:63:C5:72
Authority key identifier: 5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94
Certificate issuer:       /CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
Certificate serial:       018F8748EE7209823DAABB0ACFCD7E0F5B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
Manifest number:          0388
Signing time:             Fri 17 May 2024 16:00:54 +0000
Manifest this update:     Fri 17 May 2024 16:00:54 +0000
Manifest next update:     Sat 18 May 2024 16:00:54 +0000
Files and hashes:         1: XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl (hash: XHK5fmdzz9CDyLn6RWjQdlGTQ8Jfk2Xaa08X2YVSY8Q=)
                          2: r6oeFTKrQLpaSlqkW_amqLF7fRQ.roa (hash: nfLc+MLO8ImnzNR/Vl6rOjtiN9xF9b4VWHuqQhSUON4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ee:72:09:82:3d:aa:bb:0a:cf:cd:7e:0f:5b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
        Validity
            Not Before: May 17 16:00:54 2024 GMT
            Not After : May 18 16:00:54 2024 GMT
        Subject: CN=d84a0c125e87a1244efe00896df81adc0363c572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:c6:1f:21:bb:2b:e8:fb:66:61:64:33:bd:
                    b6:1e:41:4e:38:c2:8b:f7:09:a4:28:0c:75:07:22:
                    61:21:56:e5:01:2d:b0:0d:2e:6e:1f:4d:e8:66:db:
                    18:0f:5a:51:17:04:4f:57:33:bc:e0:18:e4:56:21:
                    18:e7:f8:90:09:a5:a1:66:16:34:7f:d0:59:f7:b8:
                    7b:2c:2a:85:33:46:e4:13:bf:fd:c5:42:e5:26:ef:
                    f1:dc:24:46:33:66:3c:ff:9f:c4:49:a1:33:c7:f4:
                    e0:f2:6f:d8:93:39:9a:31:15:8d:34:8c:f1:b8:32:
                    9b:18:4b:5f:5e:69:f9:33:04:b6:f1:5d:6f:ed:7a:
                    c5:7b:a8:8c:c8:c0:34:d3:6e:3f:e3:d7:59:01:93:
                    7f:d2:c2:82:21:01:48:a7:94:4a:45:ad:94:42:31:
                    69:23:86:fe:72:8f:e5:2c:57:8a:19:df:0f:38:10:
                    61:75:5f:78:99:46:1a:d9:1c:4a:a2:57:00:64:85:
                    a6:36:26:eb:5d:87:75:4f:67:68:dd:02:94:78:47:
                    b3:40:27:b4:a1:2d:f7:ba:ed:9b:82:4a:41:f5:35:
                    4f:a6:07:28:61:33:2a:cf:7a:02:09:92:f1:54:b2:
                    ca:36:87:5b:a8:83:f4:e5:ae:b8:5a:1d:a6:97:cd:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4A:0C:12:5E:87:A1:24:4E:FE:00:89:6D:F8:1A:DC:03:63:C5:72
            X509v3 Authority Key Identifier:
                keyid:5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:7f:92:e3:6b:2a:80:11:46:39:e8:64:41:c9:f5:02:ee:
         38:6a:11:11:c1:9d:37:f3:ec:43:f1:b9:95:f1:22:a1:cd:9f:
         46:ce:36:fd:cb:6d:65:37:c7:a0:27:93:e0:59:b0:7a:dd:94:
         69:c8:33:10:b1:d3:92:2c:1a:99:56:17:f3:19:cb:2f:ab:6e:
         fa:d0:c5:d6:5d:cb:7e:6e:47:e6:27:a3:11:26:52:5b:82:1b:
         21:d7:a1:b3:41:61:e4:f4:d4:21:22:d8:dc:fe:43:0c:61:36:
         f6:d4:d8:c4:02:98:7b:a8:32:dc:c0:d6:91:31:dc:3d:16:26:
         00:80:95:b4:15:a0:b9:44:a9:7f:6b:7b:b6:c4:0a:42:e6:21:
         fb:a3:76:38:91:be:08:27:c8:7a:9e:61:0c:db:01:f0:0b:cf:
         21:19:de:c6:d5:b0:4e:f2:d2:aa:90:71:95:31:dc:0f:8d:08:
         d6:15:53:b4:30:38:62:1c:7f:fd:57:a5:e8:93:85:88:6a:8d:
         6f:7b:e9:7d:cb:6c:4b:f8:fd:29:a2:22:82:c4:7c:23:e5:98:
         62:8f:d9:85:7d:7b:6c:21:fa:94:03:a3:9c:e7:46:d1:96:2a:
         2c:f3:60:ed:df:c3:12:f3:8e:75:7b:1e:21:4b:9c:2c:87:38:
         67:06:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:11 2024 by rpki-client on console-fra.rpki-client.org