Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File:                     lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier:          tRWcBrZc2Is2lwHEAo7XTWN153GkaN8vxdINOzrAD98=
Subject key identifier:   2E:82:EC:5A:6D:D8:18:FF:72:3E:6E:88:7B:2A:57:EB:B4:B0:E1:81
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer:       /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial:       018F87B681BFCF6E2B2D940F2D04C80BDCE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number:          0749
Signing time:             Fri 17 May 2024 18:00:35 +0000
Manifest this update:     Fri 17 May 2024 18:00:35 +0000
Manifest next update:     Sat 18 May 2024 18:00:35 +0000
Files and hashes:         1: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: sRtiDImWzmv2oPdOQURo7tgNF/OnnZWQxn2qkT6l+I0=)
                          2: p9D85ySquyu5x1So2RawvfuC_K4.roa (hash: 3tSLRDkVW4whvM93wPZM4M/Xg1J95ItXLrHMd/Eg3WA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:81:bf:cf:6e:2b:2d:94:0f:2d:04:c8:0b:dc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
        Validity
            Not Before: May 17 18:00:35 2024 GMT
            Not After : May 18 18:00:35 2024 GMT
        Subject: CN=2e82ec5a6dd818ff723e6e887b2a57ebb4b0e181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:68:b3:bc:94:01:d7:64:ed:49:46:c2:c5:
                    f1:c6:ff:36:03:cb:64:0d:c6:b1:d0:fc:14:14:a2:
                    b3:31:6e:b7:61:7d:0e:5b:e3:eb:5a:2e:9a:36:e3:
                    5f:c7:ed:bb:bc:3f:da:44:7a:ff:7b:5a:2b:b2:0e:
                    9c:d5:04:e1:49:ae:ed:66:dc:52:0c:ec:72:d5:ee:
                    87:f5:3c:2a:1a:60:f0:d8:4a:c8:b6:c9:21:13:23:
                    ea:e5:3d:83:03:38:f0:32:01:13:ef:19:17:9d:22:
                    2b:b3:f4:00:7a:0d:d7:9d:f7:7f:7a:3c:27:65:a3:
                    01:21:18:9d:4d:ec:af:ef:66:61:6c:83:39:56:24:
                    c2:90:8f:68:55:90:39:06:5b:30:67:72:39:2c:4a:
                    e7:2d:88:78:3a:35:f0:5e:4d:e8:7c:04:6d:5a:61:
                    5f:18:e7:ce:e1:4a:1f:1f:84:00:02:ce:ac:d2:9c:
                    80:3c:5b:f7:e8:1b:11:f4:21:31:6f:df:35:69:60:
                    39:fc:0a:74:f3:91:bf:b1:e0:83:07:04:85:44:a5:
                    8f:d9:18:f2:12:2f:34:7e:57:ae:e8:83:51:52:79:
                    f2:2d:03:c8:07:9d:28:5e:df:99:9d:60:eb:96:50:
                    9f:ad:03:6d:44:5f:e9:d5:28:f6:ed:aa:a0:c1:e2:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:82:EC:5A:6D:D8:18:FF:72:3E:6E:88:7B:2A:57:EB:B4:B0:E1:81
            X509v3 Authority Key Identifier:
                keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:ea:3f:6c:f9:38:50:cc:a3:6a:a5:64:32:a1:7a:f8:84:
         1c:c4:b6:10:1b:46:47:ce:2c:b1:a0:a7:1c:ee:e0:15:5e:db:
         4b:06:ff:eb:09:bb:19:e6:c3:19:49:09:5f:45:d6:3f:09:e0:
         c8:66:72:46:0c:88:97:e8:e2:7f:70:d0:04:bd:d0:03:bf:2e:
         b7:bb:dc:c5:69:1e:52:f5:17:29:6d:f6:88:48:f9:cc:5e:1d:
         ff:7d:ad:fb:46:f2:30:0d:d7:d5:40:5e:d4:fa:02:e5:76:0a:
         01:37:f5:8f:f3:b2:98:be:37:c2:2a:5c:63:16:fd:f0:7c:73:
         9d:4e:51:51:fa:45:ed:d5:83:e9:75:4e:49:1f:5b:94:84:3d:
         08:76:b0:0d:3b:df:4e:6d:2c:40:7a:f5:51:28:7a:56:11:62:
         a2:16:d4:af:88:b7:5d:f0:7f:8b:a6:4b:9e:6a:76:cc:3b:66:
         1b:6c:81:d8:1c:b9:84:19:b3:2e:33:ee:72:c0:e7:95:8d:14:
         80:34:40:2b:ab:1f:5d:a9:ef:f0:f9:28:26:48:e9:8f:cd:40:
         6f:3d:ea:9f:fc:3a:f5:a0:7e:b7:36:50:98:1a:d0:cf:a4:a2:
         67:f4:71:d7:42:dc:e3:eb:02:f3:47:e7:78:45:cf:6f:77:60:
         d5:42:c0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:23:11 2024 by rpki-client on console-fra.rpki-client.org