Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File:                     criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier:          sabi03J6vFES4PyUDV3qHe1EKVcLBIcomiMKqPmP9n8=
Subject key identifier:   02:EE:0C:36:CB:95:99:27:4D:1F:58:DC:BF:E4:8F:66:FC:0B:60:1B
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer:       /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial:       018F87ED1FF03B8C8FB751F587B59D4781E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number:          68
Signing time:             Fri 17 May 2024 19:00:15 +0000
Manifest this update:     Fri 17 May 2024 19:00:15 +0000
Manifest next update:     Sat 18 May 2024 19:00:15 +0000
Files and hashes:         1: 70DTM8lDpKWx_VihNVznZWWznnY.roa (hash: idqsiJDCij6sY86t77Xdh9KMsQD6SLoC0jjPANhltro=)
                          2: FwbubeZ2dFkOFpxJJZ5tjoMhw2k.roa (hash: QHVS/RZRBKIwMPs+NmlmGUk1Vt9H3Zv4SxmdWISFX5Y=)
                          3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: PMC/8bw9LGDBFwgmcnD52MQ3duVzft6fxUzbBB3gEpE=)
                          4: nxsdrB80Gh5yjfM0pW0x24np1RQ.roa (hash: C9aKIzqDTYjDuXzHQUAtGH8WExx5PY4j40BrkIc9IbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:1f:f0:3b:8c:8f:b7:51:f5:87:b5:9d:47:81:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
        Validity
            Not Before: May 17 19:00:15 2024 GMT
            Not After : May 18 19:00:15 2024 GMT
        Subject: CN=02ee0c36cb9599274d1f58dcbfe48f66fc0b601b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:38:1f:21:96:93:f0:d3:7c:48:e9:49:89:
                    fa:b9:67:fd:4f:e4:7b:e7:04:84:95:91:10:c8:9f:
                    f5:f9:52:48:7c:ce:90:d6:76:01:26:1e:43:23:4f:
                    ee:65:2e:44:a7:dc:7a:c2:30:49:6c:f1:89:47:9a:
                    f4:59:af:10:0f:94:eb:f3:2d:45:ef:97:db:08:45:
                    32:a7:52:35:7a:e4:34:0f:ef:e1:74:ac:c4:2b:0d:
                    ec:36:dc:2e:34:28:05:95:de:68:9a:62:dc:3d:2f:
                    3f:25:d5:00:23:f4:98:58:32:c4:40:bd:27:70:f8:
                    5e:dd:ae:ac:5d:07:0f:87:a1:39:72:37:13:a0:86:
                    2c:e9:e1:9c:c8:4d:b6:64:b3:e6:78:13:25:26:48:
                    f9:e9:82:aa:eb:01:be:b0:20:7b:c8:9f:5b:69:dd:
                    e6:b8:92:d3:8f:01:31:10:04:83:59:89:fe:3e:d3:
                    ac:87:7a:54:ab:dd:fc:0e:cb:d7:57:dd:ef:37:9d:
                    f2:4c:f8:19:28:e9:ad:23:98:af:1e:0a:6b:31:25:
                    40:c5:41:2a:41:76:4a:fa:0a:49:31:f1:78:dd:d9:
                    96:10:b3:02:18:18:bd:bd:f3:b9:fa:30:ff:7e:94:
                    0e:fa:dd:60:70:82:c6:bf:4d:52:c0:20:4e:5f:27:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:0C:36:CB:95:99:27:4D:1F:58:DC:BF:E4:8F:66:FC:0B:60:1B
            X509v3 Authority Key Identifier:
                keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:1e:77:3a:1c:5e:fb:5a:7f:5c:06:e0:e2:ff:b1:24:96:
         aa:92:a6:c1:25:71:77:43:f6:c6:54:42:55:e8:ed:0d:e3:c9:
         6e:ac:7f:3b:ce:a1:e0:a8:01:32:d8:a0:41:63:ab:1c:bc:3b:
         b2:48:47:44:57:37:50:98:17:1f:20:55:3e:ad:06:ff:48:38:
         fb:a7:38:2f:0c:b9:f1:48:34:fc:44:b7:74:07:3a:01:64:89:
         3c:16:12:9e:1e:c1:63:d6:eb:23:33:33:ea:46:7a:67:f5:7f:
         06:3c:95:ed:e5:fb:90:ed:32:1d:8c:8e:e7:a7:5c:1f:a2:04:
         d7:cb:c6:66:28:d0:8b:02:52:50:a0:99:28:1f:7b:71:9f:ed:
         70:df:65:89:d6:c8:23:d5:09:a7:52:d9:6c:a0:db:38:74:b8:
         86:b9:a6:dc:af:17:cd:4c:6e:0b:ad:3f:12:66:21:77:5f:5d:
         8c:8d:b3:53:12:78:76:23:3f:37:00:17:39:a6:38:d1:b3:4e:
         ae:4c:08:7d:7a:46:1d:39:20:2e:9d:ad:48:6f:a7:19:76:98:
         61:c9:cb:e8:a5:ad:2c:18:70:7b:69:3a:18:5f:2d:00:0d:22:
         ca:f0:06:52:4a:e9:10:59:7a:97:d3:7d:fe:15:df:a1:05:33:
         3a:6e:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:40 2024 by rpki-client on console-ams.rpki-client.org