Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File:                     YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier:          MTsewV/hu2TdHjkDiqJeq3JzxcqJGalOdVB9zhjS//I=
Subject key identifier:   54:34:5F:B8:D2:62:C8:2F:9A:4A:FD:93:D3:80:EB:70:50:2C:BC:CE
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer:       /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial:       018F86A3CA18B515E6B6C6DCB9090827EAFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number:          0996
Signing time:             Fri 17 May 2024 13:00:32 +0000
Manifest this update:     Fri 17 May 2024 13:00:32 +0000
Manifest next update:     Sat 18 May 2024 13:00:32 +0000
Files and hashes:         1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: NXP/ZHJ7c92joz/kRSRCyEX5d3XFJOyOcDidHTurQZo=)
                          2: ca5JJ4vm4BQJICVMfZJo9jbO6QA.roa (hash: KXidyLOyVmePyVyS05CpJoIVAj1myybZD1jLgTuAdPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ca:18:b5:15:e6:b6:c6:dc:b9:09:08:27:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
        Validity
            Not Before: May 17 13:00:32 2024 GMT
            Not After : May 18 13:00:32 2024 GMT
        Subject: CN=54345fb8d262c82f9a4afd93d380eb70502cbcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:15:aa:8a:64:f9:3f:94:20:89:e6:77:3c:
                    93:00:72:ca:05:1d:87:35:59:bc:29:40:d2:d3:f7:
                    b3:68:36:4d:c9:84:59:ef:e1:a4:4e:75:fb:99:0a:
                    3c:18:39:0b:34:a1:9c:68:5a:ea:9c:4e:8a:22:b4:
                    f1:2c:31:f3:54:24:1f:3a:b6:d1:af:84:1c:ff:7e:
                    51:55:16:16:03:60:57:64:0d:6e:d5:be:6d:e2:ac:
                    b7:36:81:aa:6c:98:56:cc:8e:5c:25:b2:ad:aa:52:
                    1f:27:9d:bb:2f:09:80:78:c5:39:3d:42:6b:46:41:
                    54:c3:8d:19:57:1c:f5:9c:eb:1c:c8:f2:9a:4c:36:
                    64:07:2e:ee:0c:52:d0:51:e7:60:d9:24:9c:9b:ee:
                    88:d4:fe:32:f3:c7:70:aa:de:ae:33:47:9f:46:3b:
                    6c:da:69:14:fe:59:c9:d7:88:3e:48:92:bc:27:27:
                    a7:55:73:16:c7:9c:db:14:d9:c5:07:33:50:07:26:
                    a1:9c:ae:91:ca:c0:00:87:dd:09:d9:7e:0f:b7:04:
                    ba:16:35:4b:bc:00:a1:b3:92:48:1d:58:fc:e1:14:
                    ec:a3:4d:f6:83:16:6b:e9:8b:90:92:c0:a2:c9:f2:
                    1a:f3:07:62:97:aa:a7:3c:1e:88:8f:d7:4e:9a:57:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:5F:B8:D2:62:C8:2F:9A:4A:FD:93:D3:80:EB:70:50:2C:BC:CE
            X509v3 Authority Key Identifier:
                keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:95:30:80:95:36:c9:3d:e1:0a:fc:64:55:77:6c:35:cf:
         14:c6:38:4e:77:b8:44:c1:af:7f:91:80:e1:9f:27:ca:d9:5b:
         c1:ec:ef:a0:76:51:3d:bf:94:a3:bd:90:62:59:56:07:28:91:
         de:ae:68:4a:6b:b1:90:e5:be:98:1c:8c:28:e6:c2:17:55:0c:
         fc:f5:b2:22:57:c1:ef:26:a8:b8:c3:40:12:cc:83:c1:1b:04:
         42:fc:a2:8c:84:02:f9:04:02:8e:64:c5:fd:64:f2:c9:ea:fc:
         49:62:5e:a7:9a:cf:1b:ef:77:ba:d1:18:de:94:f1:87:e7:e7:
         d7:f6:f2:b3:3a:ba:76:93:6f:65:91:43:5c:9e:82:b5:54:29:
         d4:5e:4a:41:40:21:62:25:11:46:d9:89:9f:eb:27:51:78:08:
         6d:44:a4:d5:e0:f8:65:89:3e:11:8a:e7:3a:f9:f9:a2:2d:22:
         86:96:2d:11:17:8d:14:1b:1d:46:2f:a8:f0:ef:a1:5b:7d:fa:
         a1:ab:92:9e:77:06:ac:a0:f4:ab:eb:bc:ae:b7:70:5c:50:aa:
         31:5e:5e:c0:c6:22:2d:e7:2d:9f:9e:82:34:30:20:fd:f7:34:
         68:59:6e:66:80:ae:16:b2:d1:bb:83:f1:6d:1d:aa:90:a0:b7:
         1d:1c:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:49 2024 by rpki-client on console-fra.rpki-client.org