Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File:                     Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier:          qJWZXNqFxIVLWu2ZFYlaQNj+GtKK4U9hvRCX6rCQ6k0=
Subject key identifier:   46:F0:D6:07:90:64:0E:83:D3:B7:BB:4F:DE:CB:E7:91:C6:27:39:45
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer:       /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial:       018F87ED47BBC4CF619751216603EB96A1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number:          0B59
Signing time:             Fri 17 May 2024 19:00:25 +0000
Manifest this update:     Fri 17 May 2024 19:00:25 +0000
Manifest next update:     Sat 18 May 2024 19:00:25 +0000
Files and hashes:         1: B8rwftGD8YDJnk49pznAyjvTTNw.roa (hash: 2tf9mCstVcFLJ1ZysMI0NwciXTNMohtlJuC9fE5Cx9Q=)
                          2: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: Z/g8Mhqy0jYbpKzuNPoTq0Xs2mkD5rxBVY/e87bFSfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:47:bb:c4:cf:61:97:51:21:66:03:eb:96:a1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
        Validity
            Not Before: May 17 19:00:25 2024 GMT
            Not After : May 18 19:00:25 2024 GMT
        Subject: CN=46f0d60790640e83d3b7bb4fdecbe791c6273945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:4a:9e:7b:7c:da:59:d9:77:39:aa:e0:4e:
                    28:0a:63:81:e5:66:a1:3c:43:45:bc:8a:20:7d:69:
                    e9:80:21:13:e4:07:65:d0:19:a6:9d:2f:12:02:cf:
                    08:ba:d3:53:d7:06:68:1a:a5:b9:93:1e:38:67:4c:
                    67:d6:7d:f4:5f:9d:e6:2a:f9:29:6e:1c:1d:b6:9d:
                    23:e2:d7:79:8b:bf:28:17:95:ef:f4:38:f8:c6:03:
                    c3:1a:8b:45:35:f3:d2:f6:71:74:14:29:32:a0:87:
                    a0:80:e0:bc:7f:19:3e:71:fc:96:e9:0c:93:ee:a8:
                    ab:29:5a:52:8c:5c:a2:ce:64:31:9e:d6:a6:d5:8c:
                    cd:32:b6:aa:f2:aa:42:46:fa:7c:0d:57:28:dd:22:
                    5c:15:2b:25:90:d4:af:c5:57:25:d5:f7:b5:e6:a9:
                    64:0b:03:de:40:e0:5e:eb:a0:62:fe:fc:90:25:1d:
                    dc:b6:dd:02:f4:e1:d5:2d:68:e9:9f:bb:4f:12:b9:
                    02:12:40:6c:1a:4d:63:4c:46:85:2e:98:0c:bb:aa:
                    e0:9a:a2:b3:3e:84:ad:ea:f3:a3:4c:cd:cb:cb:ea:
                    2b:df:eb:c5:cf:c1:08:e0:45:83:e4:70:5f:f3:66:
                    f6:df:c3:32:18:1d:80:99:d3:f0:97:91:09:06:60:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F0:D6:07:90:64:0E:83:D3:B7:BB:4F:DE:CB:E7:91:C6:27:39:45
            X509v3 Authority Key Identifier:
                keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:d5:8d:32:90:2a:bc:99:97:e1:d8:31:51:4c:cf:bf:36:
         0f:c6:15:cd:a3:bd:d6:3e:5c:da:b1:5d:6a:5a:7a:1a:5a:56:
         39:aa:54:6c:ba:71:94:b9:65:a2:0b:90:c4:29:cf:b3:7b:1f:
         a8:e2:a3:8f:fb:23:86:71:11:a7:f8:bd:ae:b3:0c:b2:10:a5:
         e1:a5:d0:ca:cb:49:a5:ee:91:db:fe:ac:af:e0:74:b7:a5:cc:
         d2:51:f3:7f:01:83:39:ec:88:ba:ed:3c:ea:bf:23:df:f8:20:
         0d:8f:46:00:e3:05:64:f7:a6:73:3f:67:b4:ac:1b:66:94:23:
         fe:45:30:da:7d:03:b6:a7:bf:9a:17:22:92:32:ff:0a:99:7b:
         40:c1:49:a7:ea:97:6c:3e:48:8c:50:e7:52:87:2e:1a:cf:d9:
         0b:6a:92:6f:04:2d:2a:3d:c4:1a:20:8d:50:a7:a6:3e:51:d9:
         0d:9c:1c:50:ce:bc:36:36:b0:ab:55:21:06:2e:25:31:21:ce:
         7b:1b:19:0a:e0:83:7e:83:e9:d8:7e:e1:79:fe:2e:cd:cb:c5:
         ff:9a:2d:c8:1c:ad:6e:45:ae:c7:af:80:64:a9:f5:e4:d5:20:
         7f:75:27:7e:76:bd:28:79:f7:ba:f8:80:a6:77:57:dc:61:d5:
         08:01:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:20 2024 by rpki-client on console-ams.rpki-client.org