Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File:                     Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier:          Z+KH51s7q9u38YFi/6FFaV0motzsS5iaT46X3QFJbVc=
Subject key identifier:   79:0F:3D:BC:D1:5E:31:E0:CF:73:04:83:93:ED:CF:F2:0A:07:87:77
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer:       /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial:       018F874928FD3367EE2595B819B4660BE6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number:          1028
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: 9dOMvYbIZCbVJLUC4UTjeIn/xj3Hi98hVK6Do2fB7r8=)
                          2: q1k1rviOntydexcr74ykhyEQbnU.roa (hash: UurGEm9d2V6NSZDu2GXyPNHE7UH8MhVxNVpPoljZNjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:28:fd:33:67:ee:25:95:b8:19:b4:66:0b:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=790f3dbcd15e31e0cf73048393edcff20a078777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:f7:6f:59:8c:93:e7:f6:ec:18:38:83:f9:
                    8f:25:91:47:b1:47:45:be:7e:56:cf:bf:7a:2d:63:
                    2a:d7:cb:98:8c:2f:b4:3b:cf:9a:4e:9d:09:c8:39:
                    c4:86:de:3d:71:5c:fd:fe:b0:f3:fc:51:eb:a1:67:
                    b4:4d:db:3b:87:70:3a:e8:37:8a:d6:f9:0d:31:12:
                    32:53:27:a2:fd:78:7c:ac:33:e7:43:dd:14:ee:20:
                    c1:eb:f5:a4:6e:ed:b3:c9:69:2c:c2:fe:50:16:96:
                    68:d8:0e:61:8f:95:33:a5:59:c6:bf:13:94:da:f4:
                    33:4f:15:69:f1:8a:05:5d:f2:a4:7b:77:99:31:e6:
                    14:db:f1:dd:a6:79:71:2a:7a:27:30:e0:12:b6:83:
                    0e:b5:46:e6:73:ea:71:92:f0:74:82:28:36:b5:33:
                    2c:63:8c:7f:ba:5d:c5:7b:19:40:22:d4:36:45:e2:
                    67:e2:82:4d:1c:18:42:23:30:8e:e3:b5:73:c5:95:
                    65:56:8e:13:73:a0:07:ff:f5:c0:f7:2b:bc:ea:6f:
                    df:93:9e:e4:c7:6e:73:0f:98:b0:4e:0d:f6:69:97:
                    bb:df:e0:5f:ee:7f:e9:fe:f8:d9:f5:e3:71:44:6f:
                    3a:87:a0:81:29:f9:23:f3:03:2b:b1:14:7c:5a:89:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0F:3D:BC:D1:5E:31:E0:CF:73:04:83:93:ED:CF:F2:0A:07:87:77
            X509v3 Authority Key Identifier:
                keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:c5:50:4c:2b:00:df:68:d2:73:66:00:c0:37:2b:15:e6:
         7c:42:3e:4e:f0:8c:19:b0:b5:cf:f5:bd:42:7a:47:ef:2f:ce:
         89:99:82:72:79:eb:36:4e:75:e3:c8:5b:43:06:17:9d:62:6b:
         06:28:86:e2:5f:5c:f9:ae:9c:17:9e:19:4e:18:6e:c6:95:c4:
         52:b4:a6:52:dc:e4:4e:ad:7f:96:aa:ba:74:0b:42:2a:a6:60:
         bb:28:68:e5:c7:68:b7:9e:af:71:8c:ef:2d:05:30:9f:95:2a:
         82:d4:26:db:89:15:33:b3:22:4d:a3:3f:1c:ba:30:81:f6:f4:
         31:61:e2:3f:d1:e0:46:3a:39:f6:89:13:eb:ce:b2:d0:e9:4d:
         47:f0:15:23:42:2e:ce:7b:22:fb:41:5e:f7:55:40:73:a8:8c:
         08:4c:c9:f5:c8:88:88:1e:7c:7f:50:a0:74:ba:e2:4a:c6:28:
         79:b6:cc:37:13:5b:64:e6:1b:32:01:5e:2f:16:e1:7e:71:ed:
         35:f0:6c:cd:81:98:73:5f:a3:f1:71:4a:d5:3d:d5:c5:46:cd:
         e0:a3:80:8c:4d:1a:e2:0c:95:ea:24:f6:3e:9b:9f:bd:c4:d5:
         2f:ea:a7:d8:af:9f:0a:57:d9:f1:f3:09:55:bc:09:88:77:5a:
         7b:bf:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:27 2024 by rpki-client on console-ams.rpki-client.org