Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File:                     yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier:          SzixhLYMQ7sfVlLEtSMt7b3X7N7Iwkiz6JMKbyRsac0=
Subject key identifier:   5A:0E:4D:02:6F:A0:CF:FE:94:F9:D9:57:06:17:86:F0:BB:DB:17:C8
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer:       /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial:       018F882432C6E9A4A7CBA346A9DDA464D25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number:          0161
Signing time:             Fri 17 May 2024 20:00:24 +0000
Manifest this update:     Fri 17 May 2024 20:00:24 +0000
Manifest next update:     Sat 18 May 2024 20:00:24 +0000
Files and hashes:         1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: AeUmffuvJhc/fbjkTDLcUwXlYiDaT1e0g1jklLYQM9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:32:c6:e9:a4:a7:cb:a3:46:a9:dd:a4:64:d2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
        Validity
            Not Before: May 17 20:00:24 2024 GMT
            Not After : May 18 20:00:24 2024 GMT
        Subject: CN=5a0e4d026fa0cffe94f9d957061786f0bbdb17c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:9a:5f:23:75:6b:d0:91:da:df:1e:dd:9b:
                    3c:0f:33:ca:c1:16:7f:6a:34:7a:26:27:c0:3e:5b:
                    24:11:60:e6:83:6d:48:f2:fa:23:25:fe:9a:a3:c0:
                    71:10:40:cd:62:87:e7:df:5a:57:9e:9d:98:92:dc:
                    d6:50:67:3e:5a:d8:46:86:4a:10:f9:11:a3:b7:72:
                    6b:a7:2b:8b:da:af:0f:f4:9d:2e:7e:b3:4e:ae:48:
                    ff:f9:02:50:02:2b:f1:0b:e1:91:93:b5:69:9e:e9:
                    64:a1:eb:f2:f7:b7:6a:bf:b0:f4:d8:c7:c1:2f:ff:
                    a9:97:c9:eb:d4:f4:eb:18:d7:ef:a1:0d:37:5d:a9:
                    5b:13:89:0f:2b:2a:89:f3:8f:c8:9b:2f:10:4c:55:
                    99:83:f1:b9:9c:81:40:4f:c1:53:21:8d:47:a9:2b:
                    ca:89:79:1f:e0:35:cb:fb:1d:21:af:d5:c1:33:87:
                    82:cd:5f:27:b6:ab:ba:6c:a3:65:ee:8d:66:0c:22:
                    1a:7c:e8:86:6c:fc:d4:26:6e:b3:9e:2a:5b:4e:fa:
                    9a:80:3c:8c:1c:20:4e:7a:d6:53:cc:2b:db:78:ff:
                    ae:3f:a7:80:c6:b1:44:af:b3:fc:5b:28:1c:a3:e4:
                    02:a3:91:75:b7:d6:d6:35:76:a3:f0:b0:c9:e6:76:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:4D:02:6F:A0:CF:FE:94:F9:D9:57:06:17:86:F0:BB:DB:17:C8
            X509v3 Authority Key Identifier:
                keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:45:63:27:a6:af:6e:22:c1:c9:d1:9b:47:d9:8b:8d:c4:44:
         cc:63:3f:7c:f7:96:0a:f2:46:61:05:f7:44:26:7b:9c:3d:a5:
         bb:16:ea:f3:ff:28:26:9f:20:f1:5b:36:37:cf:19:76:e3:23:
         21:83:55:16:1b:bd:c5:35:80:70:ce:45:0f:9c:54:d2:d4:a7:
         9e:b7:2c:7a:ca:5c:a8:13:40:ce:e4:9c:89:8a:7d:2c:dc:53:
         44:49:3d:52:7f:9a:de:ac:06:6e:9b:dd:47:7c:93:c6:bc:5a:
         92:7a:a8:cb:43:6d:b1:90:35:14:cc:2c:7b:6e:a4:27:72:c5:
         32:79:d3:1b:24:d7:d1:9f:25:19:91:df:1b:a5:da:50:c7:7e:
         3d:c0:7e:71:d2:22:5f:9d:da:0e:45:a1:46:ac:73:81:a2:9a:
         a6:05:c3:40:57:03:d8:ea:8f:a7:b6:bd:df:d2:d6:28:38:61:
         4c:d9:7e:89:76:fe:04:0a:03:99:16:88:de:51:d0:7a:20:54:
         a3:19:f7:12:a2:56:b7:2b:e4:3f:b9:9c:90:05:f7:2d:fb:a0:
         69:b6:73:7a:f3:4b:3a:46:c8:9e:df:e7:26:df:d6:1c:92:c6:
         1f:5d:e4:c3:39:34:77:18:00:1b:e5:6d:b3:bf:c5:f3:33:17:
         8a:1b:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:39 2024 by rpki-client on console-fra.rpki-client.org