Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          WYYt4EEwS5QJ9N3ymGqSvCHM96arbQiq9Ztsyj0HN+0=
Subject key identifier:   36:4C:C7:5B:39:DA:91:B2:AA:BA:B4:86:D9:AD:68:4B:A4:A3:C8:11
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       018F8B267532D0114F7EE17F40FAC6208531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          0873
Signing time:             Sat 18 May 2024 10:01:44 +0000
Manifest this update:     Sat 18 May 2024 10:01:44 +0000
Manifest next update:     Sun 19 May 2024 10:01:44 +0000
Files and hashes:         1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: YZ8trRe7svSFdVsTX4sucvyonp6CeHILw1tLe0nD+7I=)
                          2: CyPPbBbvJZMI7toNLlEpCBzqEo0.roa (hash: 9fuLmuuKEFStHEZHtEymT6/CklZhm7FGMKGfnlY4J0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 10:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:26:75:32:d0:11:4f:7e:e1:7f:40:fa:c6:20:85:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: May 18 10:01:44 2024 GMT
            Not After : May 19 10:01:44 2024 GMT
        Subject: CN=364cc75b39da91b2aabab486d9ad684ba4a3c811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:aa:76:2e:67:e9:b6:6e:d6:97:71:ca:85:24:
                    63:e1:38:53:26:a3:4f:d0:37:79:aa:7e:4b:be:e9:
                    86:0d:4f:bb:ed:f8:41:68:7c:07:14:2d:a7:e2:05:
                    05:9e:40:48:ac:39:8d:85:9d:90:2e:a3:2d:27:62:
                    10:36:94:3d:fe:59:01:0d:7e:07:0c:a0:78:38:77:
                    aa:51:f7:aa:0c:43:2c:78:df:6e:35:95:88:16:aa:
                    62:ce:fa:9c:8c:ee:4b:70:66:b4:18:b7:85:d3:9b:
                    f8:f8:d0:25:f8:80:e6:be:74:ef:38:95:23:60:16:
                    b8:d5:bf:f3:7c:03:d1:de:4d:89:9b:a9:eb:be:3c:
                    f6:1b:f9:52:cd:43:3b:c2:81:22:b8:97:dd:b3:2b:
                    bd:ad:cd:66:92:84:3f:d9:5f:d3:88:c8:41:64:95:
                    a4:c3:3c:59:2c:be:5a:2b:6e:13:e1:21:4b:fe:d1:
                    fd:3d:04:bc:4a:dd:fa:f3:08:1b:ae:4c:0a:d4:f0:
                    25:97:22:bb:59:22:47:03:38:e4:46:2f:4f:09:0d:
                    15:f2:d0:e6:ac:aa:b4:7b:bf:ba:2e:e5:b1:ff:af:
                    18:18:39:64:3c:1b:22:7e:2b:ac:15:86:ad:0d:9a:
                    83:79:b7:04:3b:a8:b6:b3:a5:56:5a:13:e3:b4:e6:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4C:C7:5B:39:DA:91:B2:AA:BA:B4:86:D9:AD:68:4B:A4:A3:C8:11
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:0f:7b:03:63:ca:9c:50:9c:ad:e8:dd:2e:75:60:dc:9e:
         eb:74:69:ed:cb:d6:34:f4:b1:84:02:df:6e:c2:37:8e:5f:1d:
         55:b2:14:81:42:3c:6c:66:15:03:2f:9a:e1:ef:63:7f:cf:ee:
         b5:2d:fd:8f:2f:61:3b:a9:49:3e:c1:c0:5b:d4:82:ae:a6:26:
         31:45:a4:06:ad:6a:48:12:ce:a8:97:3f:62:6c:38:4d:ed:e3:
         fb:fb:f3:62:34:aa:0e:7e:e9:94:02:17:6d:01:93:b9:1e:5b:
         70:9a:36:89:7a:43:db:9b:7f:e7:dc:a2:0a:b9:ca:51:6e:3f:
         58:35:83:10:ab:e0:b4:81:0f:f0:d7:5c:0b:26:99:a6:96:36:
         52:4c:74:82:ae:80:a2:ba:4e:15:cd:70:1a:13:8f:bf:98:0c:
         42:cd:f7:e8:cb:f3:3c:b8:ef:fb:d7:de:fb:46:a4:23:26:31:
         bc:77:04:5e:36:dc:d9:eb:ed:e5:35:05:0b:f8:02:6a:dc:4a:
         be:03:79:b6:a4:c1:73:95:76:12:ac:30:6e:e3:31:96:f4:15:
         5c:78:76:aa:be:2a:7a:29:aa:3b:9e:86:03:93:88:19:cc:19:
         e2:6b:67:56:8e:0e:4b:b2:fd:1e:8c:c9:56:da:c7:6e:2a:50:
         62:66:e0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:37:06 2024 by rpki-client on console-ams.rpki-client.org