Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File:                     Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier:          r5S21vjpRAHb5ZiWb8RzxgEYn122loOsdz3W9EqZ7Gs=
Subject key identifier:   A1:8D:7B:1A:8E:07:65:DB:79:72:BB:2B:8D:9D:21:1B:EC:70:56:E8
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer:       /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial:       018F86360ED0B51D0204CC9F004B82943D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number:          0BDC
Signing time:             Fri 17 May 2024 11:00:40 +0000
Manifest this update:     Fri 17 May 2024 11:00:40 +0000
Manifest next update:     Sat 18 May 2024 11:00:40 +0000
Files and hashes:         1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: 2Up4dZWi3RTPxGS7lT26AR7uuxFmmysy5RnNef65bW0=)
                          2: dzt8RMRa04p3rcoJ3odntQyPJv0.roa (hash: Oh9kpBQhbO/A3Dpes28u4RIBdMS4Q9EKpDLXS/svIY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:0e:d0:b5:1d:02:04:cc:9f:00:4b:82:94:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
        Validity
            Not Before: May 17 11:00:40 2024 GMT
            Not After : May 18 11:00:40 2024 GMT
        Subject: CN=a18d7b1a8e0765db7972bb2b8d9d211bec7056e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:48:2a:c0:6f:f7:64:38:ca:b4:59:93:1f:
                    a2:08:d1:ff:91:8a:1b:43:aa:80:0b:bc:de:e2:df:
                    50:0f:a3:77:25:ad:46:16:05:bd:af:f0:02:41:4c:
                    d0:6f:9f:aa:03:e3:ad:70:ce:bd:e5:54:8b:70:36:
                    3d:23:b2:a0:d9:49:8f:41:25:fb:f1:07:ca:a6:70:
                    55:26:19:dc:fa:92:9c:93:40:6c:c2:e9:30:d2:5e:
                    fb:5d:f6:b1:7e:50:36:b7:19:f4:4d:c6:6d:eb:83:
                    5e:86:c6:ad:57:14:00:45:ce:21:17:e0:35:eb:c4:
                    aa:fe:6a:5d:0a:a5:aa:2c:c5:d4:c4:e9:72:63:97:
                    38:a0:5b:8b:77:29:c9:0b:40:96:51:5f:f4:aa:a8:
                    07:cc:a0:52:01:81:3c:03:e3:a9:47:d6:64:61:2c:
                    f4:7d:58:8b:86:dd:13:e0:58:41:74:4f:6a:1f:35:
                    8d:01:fb:95:35:c2:60:20:a3:bd:65:14:89:28:94:
                    f2:42:68:6d:d4:0c:f5:8e:e4:98:5c:50:42:ea:1f:
                    38:52:34:fb:16:8d:48:be:48:19:5f:df:9f:19:12:
                    ef:96:f4:8e:e5:24:db:82:6a:76:af:73:34:28:cb:
                    1e:68:4e:37:92:01:21:97:d4:96:ab:77:d2:d2:dd:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:7B:1A:8E:07:65:DB:79:72:BB:2B:8D:9D:21:1B:EC:70:56:E8
            X509v3 Authority Key Identifier:
                keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:81:30:7b:c7:9b:76:93:4e:63:31:e8:50:04:e3:cb:e5:9d:
         3c:5a:be:30:e9:67:ae:27:7d:ce:59:98:02:6b:6e:a7:24:ec:
         51:41:a7:bc:dd:f6:3a:b1:b4:90:c0:7e:94:42:a1:94:c7:7d:
         06:12:28:9d:f1:7d:07:aa:e5:64:f4:ce:44:75:61:10:96:76:
         78:37:b4:9a:72:35:5a:d3:fc:d7:25:55:4d:59:f0:a2:7e:86:
         3e:99:86:fe:de:51:63:cc:b2:fd:8e:e3:03:7c:6b:33:97:97:
         73:1a:04:81:02:e8:6e:90:e5:2c:a8:ae:1e:33:d7:63:c2:d8:
         7f:f2:7a:9f:e7:0b:e3:fc:24:5a:1f:e0:34:5e:6d:c0:07:09:
         f6:49:24:f4:09:fe:b2:d2:b8:c4:b8:80:83:29:40:73:2c:b4:
         55:93:38:6f:0a:3e:69:93:2d:a9:75:75:8d:92:78:e1:1b:e6:
         2c:78:02:b3:eb:a8:cf:08:d1:a4:21:43:98:65:4f:6e:97:7e:
         f2:48:f9:ce:2d:0f:4b:5c:9c:df:e5:52:e2:2b:82:7a:fb:48:
         9e:f6:bf:83:73:2c:46:6b:bf:6a:f7:10:4c:f0:72:c8:88:19:
         ec:3a:1b:e4:5f:e5:4b:b7:cc:3c:03:36:55:bc:23:a8:59:36:
         21:d5:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:01 2024 by rpki-client on console-fra.rpki-client.org