Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File:                     AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier:          p5GQWAYGVV8icTPIe1cW2A5EDIW49VJ5aJCpI+s5aG4=
Subject key identifier:   97:73:72:00:EE:D4:F3:F8:BD:AB:71:C3:62:0D:0A:0C:54:3B:00:76
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer:       /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial:       018F3A78090BDA632B10E5E456C651B7619B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number:          110A
Signing time:             Thu 02 May 2024 18:01:36 +0000
Manifest this update:     Thu 02 May 2024 18:01:36 +0000
Manifest next update:     Fri 03 May 2024 18:01:36 +0000
Files and hashes:         1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: pj2mQ61WXswfQp678yMiKzV+6W3hq8I7+TEDao9Iyvo=)
                          2: enqwDc9J8DP5EPYT43EUyO9vjFY.roa (hash: PYCwigrNNvCVmzi4mwud/doRd+wrlR/3DOoxzrHauvg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:78:09:0b:da:63:2b:10:e5:e4:56:c6:51:b7:61:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
        Validity
            Not Before: May  2 18:01:36 2024 GMT
            Not After : May  3 18:01:36 2024 GMT
        Subject: CN=97737200eed4f3f8bdab71c3620d0a0c543b0076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:7a:12:f9:05:d7:a3:6e:70:90:9b:9d:83:
                    23:b3:c0:ea:c4:e7:36:53:03:5f:f2:6e:11:54:5b:
                    35:96:8c:11:e9:5e:02:cb:c4:7e:f9:be:79:0e:cd:
                    82:f5:8d:a8:a8:f3:ef:d5:2c:11:72:c2:8c:5d:7d:
                    94:77:29:67:1e:a7:e0:8f:47:25:cb:1e:ea:14:12:
                    79:cc:1a:02:17:07:ae:72:ea:9f:05:1c:f6:ee:f7:
                    f6:a9:bb:8a:dc:89:ca:bf:88:62:21:54:2c:fa:6d:
                    99:ef:24:dd:e8:cf:a2:98:ef:2f:30:ed:27:b5:52:
                    34:13:f0:39:49:00:20:e1:76:a6:78:b3:ae:54:f5:
                    7a:6b:5d:46:f4:04:69:b0:87:8a:78:21:f8:6b:3b:
                    d8:29:97:85:72:e1:ce:5a:55:3f:15:e0:b6:43:01:
                    ad:95:92:47:29:36:cd:e6:5c:2e:05:17:ac:59:17:
                    d5:07:5a:49:d8:08:ba:12:c4:15:70:28:b5:79:b8:
                    cf:7d:85:8d:44:92:aa:da:10:8a:b1:97:36:e4:b7:
                    0c:92:9d:f3:65:53:39:78:de:22:2c:91:26:31:91:
                    cd:e0:64:3b:df:38:7f:44:6a:14:b9:6f:f0:3d:1d:
                    c3:a6:77:e6:00:42:ca:99:9d:b4:03:25:86:44:cf:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:73:72:00:EE:D4:F3:F8:BD:AB:71:C3:62:0D:0A:0C:54:3B:00:76
            X509v3 Authority Key Identifier:
                keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:b4:45:bc:bb:fa:40:59:19:5a:ea:59:08:96:97:20:b4:
         15:b3:48:9c:ba:af:0f:fb:3b:dc:16:44:fe:20:48:89:3c:41:
         09:aa:96:eb:68:5a:c2:19:dd:ed:87:24:e1:6d:d5:b0:16:13:
         8f:f6:95:4a:a5:d1:ad:df:0c:cf:83:98:cf:95:8d:60:87:2d:
         a7:d4:13:2c:f2:4e:f8:e2:6c:f4:05:3e:4b:4d:e7:9b:6c:82:
         45:7a:98:6a:dd:a8:68:52:ee:f9:85:86:52:8d:72:54:20:26:
         e2:63:e2:50:78:4b:c7:b1:c8:1d:dc:ae:d3:77:a5:15:92:e2:
         9f:dc:c7:20:21:e8:20:41:c7:38:2a:fc:ba:c6:7d:09:c6:e2:
         15:fa:3a:b8:43:5e:52:c5:5f:ac:1c:be:d5:8c:fe:cc:a7:e9:
         a7:68:10:1c:97:1d:20:0f:20:3c:b3:32:a3:fb:17:e6:72:0e:
         5d:f6:5c:09:23:65:3c:db:d7:56:51:0b:82:b8:8c:f4:a8:a6:
         96:6a:0b:be:b0:56:51:a3:8d:76:80:4c:12:b0:78:23:1e:6b:
         04:49:4d:2e:e6:86:b7:40:e9:10:57:2a:bc:09:e0:e9:4f:ab:
         7a:bd:e2:22:56:1d:ac:15:18:f3:db:8a:93:f3:23:2b:17:e1:
         54:cc:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:22:15 2024 by rpki-client on console-fra.rpki-client.org