Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File:                     2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier:          ubXY1UXDXJZA2Glm6rGvs5J0vd2uY92AF6lTwILOtzA=
Subject key identifier:   58:9B:27:D8:4C:96:28:FA:6B:F2:82:4D:5F:54:C5:F8:03:B1:C5:B2
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer:       /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial:       018F4079E92200598C93DB339CBA70D8E120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number:          1153
Signing time:             Fri 03 May 2024 22:01:22 +0000
Manifest this update:     Fri 03 May 2024 22:01:22 +0000
Manifest next update:     Sat 04 May 2024 22:01:22 +0000
Files and hashes:         1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: rSmW0n3Z1w4D3Dqfhxls4kDPw4ELVlJTs4ee0wZN23U=)
                          2: FfZvuBDmvLnTBc0WIfHzPoNEXXA.roa (hash: YwjlNh2YpoWDiM90UzlVl0k1uePbt7bjQXvOBThFRh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:79:e9:22:00:59:8c:93:db:33:9c:ba:70:d8:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
        Validity
            Not Before: May  3 22:01:22 2024 GMT
            Not After : May  4 22:01:22 2024 GMT
        Subject: CN=589b27d84c9628fa6bf2824d5f54c5f803b1c5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:aa:04:41:c2:c7:50:fd:b8:8f:a6:d1:ee:
                    73:b1:16:0e:7d:fb:bd:e3:fe:8e:30:db:3b:1e:77:
                    2a:83:70:02:07:a4:7e:d5:bf:8a:03:f3:27:9e:aa:
                    3e:07:a9:bc:06:b4:79:b4:41:e5:82:d9:4d:4c:30:
                    39:a3:59:ba:b1:fe:97:aa:14:21:d4:e8:d9:7c:b4:
                    82:82:86:e0:b5:d3:6e:70:24:d8:55:65:08:55:12:
                    62:6a:25:6f:ec:3c:f6:39:09:27:57:d7:e9:a8:2a:
                    e4:a4:62:95:82:ce:3a:20:c1:a4:20:e0:9d:78:99:
                    c5:01:c2:cb:9e:70:20:6c:c2:2d:7e:c8:e3:96:8d:
                    d2:d4:f3:42:e7:cc:df:53:57:ef:33:b1:5d:98:01:
                    a0:d3:99:ef:54:9c:5c:04:82:79:00:24:f9:72:95:
                    22:a2:df:a4:a9:cd:3f:d4:31:f0:17:48:1c:87:4f:
                    30:6b:74:ea:2f:46:9f:f2:cc:df:de:61:37:ea:e6:
                    62:27:6f:81:21:6b:2b:06:bc:e9:29:fa:bf:31:cb:
                    3e:d0:5c:5c:13:8b:7c:d2:d3:f6:9e:4c:5f:32:41:
                    14:27:57:f6:c4:31:77:be:80:a4:98:57:d9:a8:dd:
                    31:d9:e6:52:de:7e:b1:9d:dd:29:89:0f:45:e3:b9:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:27:D8:4C:96:28:FA:6B:F2:82:4D:5F:54:C5:F8:03:B1:C5:B2
            X509v3 Authority Key Identifier:
                keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:98:da:94:6b:5f:39:b8:0a:90:6e:93:d2:70:3b:f0:4a:5b:
         ae:5d:05:e9:b3:09:7a:9a:a7:15:08:80:9b:8a:b6:de:a7:2c:
         44:cf:24:68:bb:73:fd:61:b0:97:83:79:67:9c:e0:da:8f:d8:
         8e:9b:8d:63:09:a1:ae:cd:8c:32:06:d1:b0:3d:4c:f6:eb:d5:
         03:05:95:e5:c1:46:3f:1d:91:ba:7e:71:7f:e3:9b:fc:3e:07:
         20:81:a0:86:b8:8d:48:7d:4d:54:03:17:8b:ca:d2:b5:bd:12:
         06:19:bc:2e:ae:60:e7:2f:ca:b4:5b:97:c2:bc:41:ea:d6:3e:
         1f:0b:5b:ae:a5:44:f8:3f:af:cf:5f:7c:86:79:82:d2:27:f5:
         7f:ea:01:67:2a:16:51:32:5d:d7:68:df:50:19:1b:2e:fe:d8:
         ba:04:4e:bb:50:33:ba:1b:9a:e1:1e:62:40:aa:82:3e:4f:1f:
         e7:e3:a7:83:db:7d:50:00:7e:95:6b:31:ce:0f:2d:ce:13:11:
         75:f1:dd:b9:39:5a:b1:66:2c:c2:4e:c6:83:df:8a:0a:3d:16:
         52:a2:78:1d:5c:6e:8d:d5:3b:f2:ab:a4:57:0e:b5:df:ac:c0:
         9c:7e:03:d5:42:de:ff:75:6b:fe:8f:66:65:c9:d2:db:e0:9e:
         72:56:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:13:30 2024 by rpki-client on console-fra.rpki-client.org