Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File:                     DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier:          3abq1BOg3RQTDEwo4+HB/+lgPSu8od4yTFsGMD/e8s4=
Subject key identifier:   A9:A8:7E:A4:87:26:20:C7:F7:82:F2:2A:AD:D0:21:86:11:62:9F:F9
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer:       /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial:       018F505AF9810EA44C40D0DB46BC73A711F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number:          0B55
Signing time:             Tue 07 May 2024 00:01:30 +0000
Manifest this update:     Tue 07 May 2024 00:01:30 +0000
Manifest next update:     Wed 08 May 2024 00:01:30 +0000
Files and hashes:         1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: iNoLvISh0H821fKzBzmvJwgWyP8hNIM/QZPQR0D9KgY=)
                          2: VaevHXaXSSH0RuCHiFyfIOvqtnQ.roa (hash: XZNcSnQJ5faVenv1PHuVvx/XohtzYMtv8HjuX8PeYCA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:5a:f9:81:0e:a4:4c:40:d0:db:46:bc:73:a7:11:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
        Validity
            Not Before: May  7 00:01:30 2024 GMT
            Not After : May  8 00:01:30 2024 GMT
        Subject: CN=a9a87ea4872620c7f782f22aadd0218611629ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:53:a4:ec:c3:b6:55:0f:c5:42:e0:5d:c1:
                    81:df:86:f2:8d:df:84:9b:ea:36:6d:48:4b:57:99:
                    24:bd:df:67:41:83:c0:5e:7e:a2:27:34:d9:7e:2b:
                    3c:bd:5f:33:14:77:c0:c3:42:0f:74:fb:e9:30:55:
                    0b:a3:58:40:bb:b5:2c:4f:22:db:6d:a9:8b:aa:c4:
                    fa:3f:ba:dd:af:35:52:08:e8:f0:87:02:1a:c7:4c:
                    34:9d:96:cf:33:38:43:62:2c:f9:62:ad:69:58:98:
                    85:06:f9:1a:24:74:c1:42:df:d5:e8:07:b4:21:98:
                    60:90:a5:06:da:ac:7e:fe:58:f5:86:f7:8a:51:1b:
                    94:de:9a:52:57:d4:6f:e7:6f:c8:71:35:53:4c:07:
                    73:92:c5:23:ba:1b:e5:0b:70:cc:6b:8b:89:7a:0a:
                    53:c6:96:a5:f1:7c:89:3f:11:07:f1:a2:52:b9:8d:
                    62:29:59:fb:0e:03:3d:11:13:15:0a:71:b6:44:a7:
                    b7:99:e1:fc:a8:c8:69:a9:18:98:a4:9a:bc:9e:7c:
                    c4:52:d4:28:68:f6:31:c4:a7:5b:21:47:ea:99:c9:
                    e9:22:13:1f:da:f8:19:b0:2a:e4:48:10:da:eb:78:
                    52:0d:57:54:a4:51:3f:7d:9d:d1:e9:9d:21:d0:f2:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A8:7E:A4:87:26:20:C7:F7:82:F2:2A:AD:D0:21:86:11:62:9F:F9
            X509v3 Authority Key Identifier:
                keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:01:40:3e:e7:d0:87:36:ca:6b:f7:c8:3c:79:f6:3b:62:
         ea:34:0e:0b:2d:9b:6f:52:4e:1f:1a:e1:47:8d:2b:a0:b4:c2:
         6a:dd:c7:0f:b8:cf:e5:eb:28:00:6b:a7:6b:29:20:b2:d8:c9:
         37:91:3f:55:f2:5b:23:be:e7:f3:9f:e1:5c:c7:8e:db:48:ea:
         3d:cf:1a:be:18:30:bf:97:70:6e:98:58:4a:07:1e:63:b3:c9:
         2e:7f:1e:8b:af:e8:73:79:e5:f9:e2:5b:9c:9a:50:0a:d5:11:
         77:4d:75:02:20:81:db:87:33:89:ff:dd:bc:24:c8:53:8e:95:
         84:8b:03:c0:4d:55:69:54:cd:6f:6d:ae:0f:09:a2:4a:3b:63:
         e8:99:8c:0c:85:9a:3a:41:2c:4e:59:ce:4d:2f:4b:f3:fb:2d:
         a5:68:ff:a7:20:96:fb:cd:6a:0a:31:e0:b0:30:06:00:b4:7b:
         45:d8:9b:ea:9b:c1:a1:78:af:29:fe:f9:a9:e5:1a:78:32:99:
         e6:76:3f:45:1b:d4:e6:4a:ee:19:c9:e1:20:b2:41:c2:59:23:
         44:6a:9a:ad:01:7b:e4:30:b6:9e:41:d1:40:da:47:58:4a:d3:
         08:b5:da:98:8e:dc:87:34:c6:c9:9e:6d:b9:3a:f2:d2:16:6e:
         3d:65:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:07:30 2024 by rpki-client on console-ams.rpki-client.org