Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File:                     Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier:          v3TU2EcCQ4hXWpaq28VoTX7NMko7gclw21V2MzcjSMU=
Subject key identifier:   8D:88:09:F8:2E:6F:9B:A5:DD:5D:56:CB:29:FC:7E:62:8B:63:9C:B1
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer:       /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial:       018F87B65AA1A44AC841D203787996F8844D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number:          05A2
Signing time:             Fri 17 May 2024 18:00:25 +0000
Manifest this update:     Fri 17 May 2024 18:00:25 +0000
Manifest next update:     Sat 18 May 2024 18:00:25 +0000
Files and hashes:         1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: PNpueUPJprrg2C8vPHOKX7X1oWTeCWyTofGR7dCg4aU=)
                          2: bvFSWdjYHmXw6Dgqt1nHpx4dAXo.roa (hash: jNUGsrnjfw/TzNExA39+TCgfozlsQ0UYLVhNkwvCPq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5a:a1:a4:4a:c8:41:d2:03:78:79:96:f8:84:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233adc97f9826262007f46286591830df58fc55e
        Validity
            Not Before: May 17 18:00:25 2024 GMT
            Not After : May 18 18:00:25 2024 GMT
        Subject: CN=8d8809f82e6f9ba5dd5d56cb29fc7e628b639cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:d7:5a:03:af:d3:ea:71:81:54:08:76:d5:
                    8b:1f:3a:65:e6:7e:1d:e0:fb:50:cc:ab:7e:e2:7b:
                    6b:5d:95:d9:de:95:84:51:ad:29:78:8e:53:b1:45:
                    6d:cc:05:aa:cd:b1:0f:e0:49:75:e0:17:30:69:3f:
                    d0:f1:54:9f:d1:cd:8e:01:0a:47:6a:8b:5a:44:bc:
                    b0:e4:4d:bf:a0:d4:6c:8b:58:8a:c7:11:8f:34:5c:
                    42:3c:74:b8:b6:5b:1c:85:00:5e:2a:71:4c:58:0c:
                    69:96:c7:c1:ad:3b:43:bc:85:e1:17:25:d3:ea:73:
                    08:76:c8:fe:ee:03:8a:01:23:74:89:e6:0c:a8:01:
                    84:9c:11:9c:8f:ec:f1:6a:60:02:a2:2a:92:1d:58:
                    02:e7:98:8a:0d:37:e4:01:85:7e:06:04:57:5d:c5:
                    34:11:d1:e8:29:3f:94:8e:d0:be:06:8f:0e:da:8c:
                    10:5a:97:0f:70:6c:cb:41:26:c8:75:a2:b1:a4:f1:
                    06:5e:fa:32:99:ad:35:92:36:07:16:9d:08:49:fb:
                    9d:2c:c2:fd:91:2a:f9:af:ba:ae:22:39:14:fa:8e:
                    c5:a7:0c:37:da:65:e3:21:f3:89:30:ce:32:8e:9d:
                    16:3b:dc:44:c7:a1:81:e1:15:ac:d7:b0:70:18:7b:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:88:09:F8:2E:6F:9B:A5:DD:5D:56:CB:29:FC:7E:62:8B:63:9C:B1
            X509v3 Authority Key Identifier:
                keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:64:0e:fa:e2:58:d0:41:24:16:05:e3:98:81:e1:c4:4d:
         0a:be:bd:ac:87:01:c7:c2:71:0b:51:94:fe:6f:23:d4:e6:fe:
         f0:dc:8d:8c:e5:b0:75:7d:24:3f:82:82:85:59:ac:e0:3e:c5:
         51:63:98:5a:42:a0:e5:a8:63:3a:99:29:c6:56:d2:bd:ef:e1:
         d4:1b:b7:c4:8e:5b:07:4a:d3:0b:bc:ba:9a:45:e1:a8:76:9d:
         f7:6b:37:10:38:74:ac:d5:ca:79:08:46:8f:08:90:5f:75:72:
         93:f9:7a:7b:17:1c:dd:a6:fb:3f:9a:c8:91:5c:15:7b:f4:12:
         4c:61:ff:64:8d:3d:e5:84:9a:18:1d:b7:1a:0c:90:20:61:73:
         20:52:96:07:38:d7:8f:3e:37:82:3d:91:98:b9:93:04:37:0c:
         f3:f5:8e:f6:e4:dc:66:e8:f0:6e:6f:65:e2:79:4c:15:97:47:
         ba:04:c6:99:41:fc:0f:4f:5b:4e:63:be:2c:ae:06:fb:f0:b2:
         9a:b7:b8:0e:ed:17:ab:28:9e:05:a9:5a:dd:ac:50:91:7f:3e:
         ae:c6:20:7a:f5:2d:bc:5b:cb:ea:8e:42:2b:5e:4f:e3:18:76:
         56:ae:d4:14:4b:0e:16:5c:c0:e1:1f:e6:a5:97:04:56:3b:5d:
         47:64:38:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:38 2024 by rpki-client on console-ams.rpki-client.org