Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File:                     zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier:          5Y0+ezFgehfbBEv8f3MsUTzwT8bV2nifl5DiOFpjTHg=
Subject key identifier:   53:DA:AE:06:25:BE:FD:7D:3A:30:46:11:17:4B:E3:8B:22:98:DD:0C
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer:       /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial:       018F88242683ADF6374AFDFAEC331BE4CF5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number:          01EB
Signing time:             Fri 17 May 2024 20:00:21 +0000
Manifest this update:     Fri 17 May 2024 20:00:21 +0000
Manifest next update:     Sat 18 May 2024 20:00:21 +0000
Files and hashes:         1: xGjFPWOWK5JbnB1zW68TPItDAj0.roa (hash: QFmYFD9bB/H5Y9oV11eb0kanEIR1dZekgS2y53i8Ugo=)
                          2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: srJ3R18E5ZcwsuyfKnSWl5ud2yf5jhjinEP4Kl37MB4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:26:83:ad:f6:37:4a:fd:fa:ec:33:1b:e4:cf:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
        Validity
            Not Before: May 17 20:00:21 2024 GMT
            Not After : May 18 20:00:21 2024 GMT
        Subject: CN=53daae0625befd7d3a304611174be38b2298dd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:ee:c4:a7:74:4c:c1:b2:7d:71:ff:09:7a:
                    56:6b:bf:72:9a:34:1a:3e:41:ae:a7:c0:08:57:14:
                    2e:31:c0:c6:66:23:cc:e9:3c:cb:9a:1b:59:2b:1d:
                    33:83:a4:c2:56:c5:b5:b6:78:01:8e:8e:12:bf:21:
                    29:a0:44:49:1a:42:10:aa:cc:d5:61:64:44:c1:5d:
                    68:67:2f:77:b8:09:c6:0a:96:99:b6:4b:b9:e5:3c:
                    03:1c:07:61:7a:25:fd:99:77:ec:28:be:c2:8f:e1:
                    ec:f4:dd:58:cd:c5:15:f3:64:00:ca:b1:8d:84:19:
                    87:d0:b1:6e:4d:47:d9:8b:42:18:ca:af:c8:a5:bb:
                    72:4a:61:99:96:bc:a3:54:5e:ab:4e:0a:a9:bc:3b:
                    f5:bf:71:99:2d:72:72:cd:b6:a0:80:15:b9:8c:6e:
                    32:4b:ae:e0:f0:8a:76:ff:3f:a6:9f:dc:c5:9e:ef:
                    24:b9:8d:d7:f9:6a:30:19:32:1d:d4:67:2a:72:75:
                    31:2e:8b:6d:de:47:dc:e1:83:8c:5c:a9:4f:95:bd:
                    a1:30:df:29:90:c2:e6:07:28:39:5b:cb:10:73:6f:
                    1b:e1:51:b7:1d:33:2b:6f:42:70:72:ae:a9:54:79:
                    82:7c:6b:3d:06:cb:e7:8c:af:6e:fe:e5:e1:8b:72:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DA:AE:06:25:BE:FD:7D:3A:30:46:11:17:4B:E3:8B:22:98:DD:0C
            X509v3 Authority Key Identifier:
                keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:f0:1f:1f:0f:9c:3b:c4:73:09:e5:bf:82:55:10:25:db:
         19:4d:6d:f6:5d:31:ec:cb:c2:14:cb:2b:23:06:57:15:ef:0d:
         d1:26:d6:2a:08:68:9b:61:ea:5f:35:95:f6:7b:2b:89:7c:1e:
         e4:86:cf:c5:f7:62:d2:89:28:f1:3e:59:0d:2a:1a:49:be:34:
         9b:8a:54:84:66:41:88:a5:75:80:e3:ee:38:3a:25:a5:e2:28:
         73:88:9d:5f:c0:2e:36:6e:92:11:29:4d:1f:cc:96:9c:4f:12:
         13:fc:e6:c9:77:97:fa:6d:4f:a7:48:22:01:0f:24:77:49:92:
         e6:79:08:f8:2b:1a:8c:c0:ca:97:a2:a1:54:5f:9d:0d:02:27:
         d6:11:ed:61:fd:e0:48:36:7b:a1:84:45:88:04:ef:01:b7:99:
         24:97:b7:ee:bb:64:bf:45:6e:c2:55:ee:0a:54:0e:0b:89:d4:
         e7:9a:58:a4:c2:bb:8d:30:a8:d0:26:17:e6:6a:89:45:db:0f:
         fa:11:e0:d5:16:f5:96:2a:e6:e8:cf:9b:7e:ed:f3:2b:77:a5:
         e5:bf:5c:0f:e9:a2:bb:64:1c:2c:2a:2f:9d:28:0c:3a:af:56:
         56:ce:63:e9:78:55:0e:09:c4:f2:d1:60:0f:1f:bd:ab:c4:ec:
         e2:6f:39:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:43 2024 by rpki-client on console-ams.rpki-client.org