Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
File:                     Y01u7EA-_4a0D5xZgJHdQwKppyE.mft (raw, json)
Hash identifier:          +rhn3jb5HC1Kt+RWWFaZz4mkZgd3n1lZgF+CPYJ4o8A=
Subject key identifier:   35:48:53:F9:CA:88:59:A7:D0:CA:77:84:CA:33:EF:0A:8A:3E:E5:A3
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Certificate issuer:       /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial:       018F889224CE63DE58138666C48B6D415101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
Manifest number:          0496
Signing time:             Fri 17 May 2024 22:00:30 +0000
Manifest this update:     Fri 17 May 2024 22:00:30 +0000
Manifest next update:     Sat 18 May 2024 22:00:30 +0000
Files and hashes:         1: Y01u7EA-_4a0D5xZgJHdQwKppyE.crl (hash: wN/CguWnHY1RRJYCW6i8S6A3ngPyDuUy5aJio4hGynQ=)
                          2: u1W8hEZV_5g88_2OWbANQkMTS90.roa (hash: MuLW7qG1ng/SZHF+6NurD2acHFX3XTdak3CIUr4w+S8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:24:ce:63:de:58:13:86:66:c4:8b:6d:41:51:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
        Validity
            Not Before: May 17 22:00:30 2024 GMT
            Not After : May 18 22:00:30 2024 GMT
        Subject: CN=354853f9ca8859a7d0ca7784ca33ef0a8a3ee5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:b8:49:af:af:2c:ac:93:1f:cc:c3:5d:21:
                    29:6d:56:a0:5d:4e:ce:df:db:19:79:86:f8:74:bb:
                    8f:19:0b:67:c2:2b:8a:b2:dc:0d:6f:83:bb:c0:e2:
                    28:25:d2:48:bf:c6:c0:f7:b1:f3:f5:4f:bd:15:0b:
                    77:ee:eb:f9:5d:5d:cd:c9:e2:64:d0:07:c3:f4:75:
                    4d:45:00:b1:65:95:84:89:6c:fb:61:08:96:3f:8b:
                    78:1a:e0:3d:e4:d3:9d:69:dc:9d:41:ba:60:df:ea:
                    0c:c7:e8:2f:11:61:6e:47:57:96:3b:ba:65:fc:3f:
                    2c:2e:ae:db:47:bb:87:1c:44:f7:d9:24:cc:39:d3:
                    61:73:f2:f3:82:0d:b3:ca:6a:c9:79:38:4e:24:73:
                    8d:bb:28:17:3b:a5:6a:be:8f:1d:79:9a:76:e3:98:
                    ef:2d:6e:3b:48:4a:64:f9:b2:ab:67:cc:46:71:e1:
                    7b:08:44:f2:90:70:cd:1d:bd:4b:ab:1c:48:1f:6e:
                    cc:b2:d6:1c:a2:ca:5e:c6:d9:db:e3:d5:68:54:2b:
                    dc:6e:bd:9e:88:0a:53:81:8f:02:02:e2:80:f3:33:
                    07:54:5e:d0:9f:c3:e5:a0:eb:06:f8:d4:64:69:51:
                    6e:51:a4:0f:43:5d:fd:c2:3d:99:62:47:dc:88:f2:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:48:53:F9:CA:88:59:A7:D0:CA:77:84:CA:33:EF:0A:8A:3E:E5:A3
            X509v3 Authority Key Identifier:
                keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:72:1c:a4:63:93:f1:90:e8:a0:65:8d:35:1c:7f:45:51:
         4c:44:a9:2b:5b:06:ed:f6:48:ec:f7:d6:04:66:59:1b:d3:b5:
         ed:9b:ac:60:ee:df:b9:00:99:3f:18:e9:07:49:8c:16:d1:d8:
         a8:f4:fe:55:e9:29:d6:f7:17:30:cc:02:f0:57:26:38:1e:98:
         82:e0:e1:c6:15:9f:0f:82:31:df:bd:cd:9f:e5:b6:83:2a:91:
         fe:cf:da:54:3c:9e:ca:16:88:d5:10:26:4b:a4:73:98:38:c8:
         53:46:28:fe:fb:d3:bf:32:46:b7:a3:39:11:9b:fc:81:52:d5:
         f0:31:67:5b:0a:f4:40:8d:3e:a7:81:e5:2b:3d:c3:a2:c3:9b:
         30:d4:1f:74:c2:c6:18:fd:37:5b:f0:4b:ba:14:c7:42:14:bb:
         6d:7b:ac:23:a3:50:9d:81:24:75:6d:15:e1:0f:6a:4d:7c:66:
         28:d9:bd:8e:a3:39:1a:ec:12:9c:3e:26:d1:4c:6a:bf:ce:0a:
         e8:99:2f:aa:85:8c:59:c0:8f:14:e9:e2:93:2e:fb:6f:37:5d:
         0f:c4:f3:bd:2a:61:47:bd:b7:65:7c:9e:40:62:90:e4:7e:1a:
         06:ce:0a:3a:8d:be:50:d9:85:27:bc:bf:02:54:08:45:48:c4:
         d8:b8:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:03:42 2024 by rpki-client on console-ams.rpki-client.org