Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
File:                     Yv8lPFoTQ6JWma4I51dnrya52-U.mft (raw, json)
Hash identifier:          soiHQPgKzRL4aMMdZNO4vknGQaQjH7L/Vxd+myvDo5U=
Subject key identifier:   80:8E:53:8C:C1:5A:C3:58:F1:C9:36:2A:1B:FA:3C:09:A3:0E:F8:BC
Authority key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Certificate issuer:       /CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Certificate serial:       01906E622B34C1FCA330E85E4F3C25938B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
Manifest number:          117F
Signing time:             Mon 01 Jul 2024 13:00:45 +0000
Manifest this update:     Mon 01 Jul 2024 13:00:45 +0000
Manifest next update:     Tue 02 Jul 2024 13:00:45 +0000
Files and hashes:         1: Yv8lPFoTQ6JWma4I51dnrya52-U.crl (hash: Jeg8ABvNyj413WnEq6X4IKDw/+6idNOheCe+ZpEAW3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:62:2b:34:c1:fc:a3:30:e8:5e:4f:3c:25:93:8b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
        Validity
            Not Before: Jul  1 13:00:45 2024 GMT
            Not After : Jul  2 13:00:45 2024 GMT
        Subject: CN=808e538cc15ac358f1c9362a1bfa3c09a30ef8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:fc:dc:4c:13:dd:46:55:85:d0:5f:87:35:
                    15:46:66:34:aa:6e:88:76:01:47:c9:5d:bd:0a:03:
                    d3:b2:6f:33:02:2d:84:e1:8b:44:fa:e7:2d:23:49:
                    28:43:b6:3f:79:df:9a:0d:29:a0:ea:24:e0:29:bc:
                    74:f7:e7:25:fd:51:fc:0f:06:93:32:c7:68:9a:44:
                    2c:a0:06:42:19:56:07:1f:0f:08:4d:d2:74:a1:92:
                    50:71:c1:85:b3:52:fc:23:10:8d:91:06:37:83:fe:
                    09:01:02:24:af:f1:55:df:46:28:d7:b4:0c:11:d1:
                    1c:a1:5b:6c:1d:da:b5:54:0c:32:19:4d:42:c6:11:
                    0d:b3:52:5f:11:5d:98:5d:d7:da:78:d4:a4:fb:85:
                    9c:78:ff:3d:55:1c:39:3f:3f:50:3e:7a:ee:81:13:
                    37:69:83:85:e6:28:f9:d6:f3:e7:ac:10:4f:bc:6c:
                    30:fd:d9:21:eb:62:11:8a:aa:d6:ee:de:35:ce:71:
                    df:00:b2:1a:12:4f:7c:3a:da:95:6e:ab:4b:3b:31:
                    03:ed:1b:5e:af:a7:89:83:b2:d9:18:71:c6:43:04:
                    0d:ba:c1:f5:1f:39:e9:06:94:d7:9a:2d:81:80:31:
                    d6:1e:87:b0:b7:da:e2:86:3e:e0:11:fc:79:54:a8:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:53:8C:C1:5A:C3:58:F1:C9:36:2A:1B:FA:3C:09:A3:0E:F8:BC
            X509v3 Authority Key Identifier:
                keyid:62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:de:34:60:39:1e:94:6f:43:d4:5e:58:60:33:b5:c2:02:9b:
         c7:b2:00:41:e1:46:9d:39:07:68:c6:91:0e:c2:a4:0f:2a:38:
         6d:38:7c:38:4a:6d:02:33:71:9c:cc:d3:bc:d8:d2:b0:7d:51:
         28:de:56:73:a8:b2:7f:2f:32:43:33:f4:27:5d:ff:24:48:20:
         e3:95:e3:dc:b8:2c:71:eb:7f:fe:fb:e8:9c:f0:ce:92:53:a5:
         9b:bf:3a:8c:c7:55:82:2a:6b:cf:54:78:8b:1e:c0:f6:86:92:
         6e:ac:d0:75:24:fd:6c:8c:91:e9:f1:d2:5b:49:05:c7:b3:03:
         d0:75:fb:0f:74:6f:7f:b5:70:ed:52:f2:4f:15:d7:17:15:7b:
         03:31:25:53:62:56:1b:fe:99:b7:e1:57:79:f4:e7:88:d0:9f:
         8f:fe:c3:6a:cc:8f:9e:5d:62:27:6f:d0:fd:fe:0d:b9:ae:da:
         26:b4:df:3c:ad:95:1f:74:fd:51:71:1c:a4:60:5b:dc:b0:fa:
         7d:b9:bc:c6:f2:b8:db:6e:0d:bc:73:b4:ca:19:78:5c:eb:5e:
         be:09:c2:ef:24:86:aa:a1:b2:e3:af:55:8a:8d:7a:d2:d5:80:
         8d:51:fd:f7:a9:e9:ac:ce:b6:7d:10:ca:78:b9:e7:76:4f:a0:
         95:07:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:28:47 2024 by rpki-client on console-fra.rpki-client.org