Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File:                     0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier:          JMwDkRBKWQuULJCTLW7qAuXH/YkyLrT9/fW9oq8P0rQ=
Subject key identifier:   62:DD:0C:8C:C1:28:22:3C:0A:C7:33:1E:AC:59:D9:F9:6D:20:E2:2A
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer:       /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial:       018F3DE8D78C6BBBC56097FB237DAF7A5627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number:          1151
Signing time:             Fri 03 May 2024 10:03:40 +0000
Manifest this update:     Fri 03 May 2024 10:03:40 +0000
Manifest next update:     Sat 04 May 2024 10:03:40 +0000
Files and hashes:         1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: lP/v4iWbYAEerSxdb+Xb1eqqXffEwtwL/A/yv2uurqE=)
                          2: 4nh3q0nLQq8KOfc3jcT6Am3PT6w.roa (hash: 2esWk0mtFqduBA3KRQA7Ildh+EdW1H0cZNHEqqnJsJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e8:d7:8c:6b:bb:c5:60:97:fb:23:7d:af:7a:56:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
        Validity
            Not Before: May  3 10:03:40 2024 GMT
            Not After : May  4 10:03:40 2024 GMT
        Subject: CN=62dd0c8cc128223c0ac7331eac59d9f96d20e22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:76:8a:69:67:3b:3c:f2:e7:7d:b0:a6:48:
                    a7:cc:bf:8d:b3:f9:bd:6c:00:d0:6c:7e:98:d2:1d:
                    7d:f9:73:94:46:52:de:32:0d:d9:e3:20:f7:a3:7c:
                    85:f4:6a:a4:82:8b:42:f4:1c:e8:0a:11:a2:f1:ad:
                    65:af:cc:68:21:f9:75:41:b8:8e:76:47:67:a3:87:
                    e9:b3:b8:96:d5:06:00:34:92:44:cb:f2:90:c3:fc:
                    34:43:56:82:3f:ca:c9:72:20:04:93:54:1e:33:f8:
                    de:e4:a2:5c:d3:50:47:f0:62:9e:74:13:a3:a3:91:
                    38:ed:54:5b:81:b0:b5:0e:ba:ca:74:bd:4b:e2:c6:
                    83:99:f7:8f:57:06:45:0e:4d:17:2b:f5:cd:0a:61:
                    8f:5a:ba:09:29:d3:97:6a:39:53:7c:7d:77:5a:f3:
                    60:6a:7d:3a:c2:65:d2:14:f0:45:af:69:31:13:cb:
                    e1:c1:ca:6b:bf:84:db:d0:a1:8c:98:84:07:50:25:
                    63:06:51:f2:12:19:d1:c1:4b:d7:db:69:0b:6e:7d:
                    f1:f2:ca:a2:e3:43:79:7a:95:fc:57:25:c2:ca:00:
                    de:44:9a:96:4e:ea:f4:8d:67:f0:03:07:fd:29:31:
                    85:73:81:66:14:63:5b:73:43:0e:96:6f:10:14:16:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:0C:8C:C1:28:22:3C:0A:C7:33:1E:AC:59:D9:F9:6D:20:E2:2A
            X509v3 Authority Key Identifier:
                keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:14:ec:e2:a8:aa:29:f6:51:a3:a3:32:a4:84:33:7c:cc:
         c8:b7:ea:77:a6:9e:8d:f9:85:39:3b:e3:eb:dc:3a:80:37:07:
         8f:fe:20:6b:5d:24:86:85:23:84:9d:f9:67:a9:d3:23:1d:51:
         3b:f4:95:14:e4:93:87:4b:40:ff:2f:ff:5c:f5:d6:23:d0:12:
         72:63:fc:fd:1a:8b:61:d5:58:35:13:41:7a:20:41:2b:4e:3d:
         aa:a8:86:72:e8:b5:43:9e:6f:2b:e5:59:d6:82:9a:41:23:f6:
         33:42:b3:d7:e3:14:6d:11:5a:af:c9:53:4e:05:39:4c:41:50:
         d2:6a:30:da:3c:02:23:f1:03:40:1d:f9:5d:d9:b3:73:f6:4a:
         7f:98:87:0b:56:41:53:c3:0b:e6:e3:61:88:62:58:78:25:8f:
         8e:8f:fe:a9:36:6e:99:67:22:00:3c:e3:45:e3:1a:9e:71:48:
         74:8b:1c:83:64:d0:a3:ff:b3:53:9d:b0:33:ca:90:95:60:cf:
         b7:b7:cd:c6:04:41:e8:0c:2e:15:29:84:1c:fc:03:ab:e0:8d:
         54:9c:6b:05:62:70:e6:4b:e9:2b:42:f8:95:82:e0:a4:35:42:
         7e:02:eb:58:de:55:bb:05:b5:18:30:94:51:6e:76:1c:b3:92:
         73:7b:6b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:25:15 2024 by rpki-client on console-fra.rpki-client.org