Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File:                     YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier:          Egh0526ai+q4xQ/BSXjXxpv6YOhQqJEt6f42kSVFGNw=
Subject key identifier:   1B:42:08:9A:F4:7A:67:DF:B3:C3:38:F7:BE:1A:8D:03:E5:67:1D:C4
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer:       /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial:       018F8635FD5BC0852A0EB5AB2EE73D90D030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number:          0A97
Signing time:             Fri 17 May 2024 11:00:36 +0000
Manifest this update:     Fri 17 May 2024 11:00:36 +0000
Manifest next update:     Sat 18 May 2024 11:00:36 +0000
Files and hashes:         1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: DAC0kMn2PwoD3H3E7Kwyl0HNm0d841/gK1T5zlfLgFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:fd:5b:c0:85:2a:0e:b5:ab:2e:e7:3d:90:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
        Validity
            Not Before: May 17 11:00:36 2024 GMT
            Not After : May 18 11:00:36 2024 GMT
        Subject: CN=1b42089af47a67dfb3c338f7be1a8d03e5671dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:48:35:1d:49:1d:75:6f:67:c0:cb:d6:90:
                    ac:67:a4:5f:51:78:d8:13:c2:3c:bb:2f:bb:3e:a9:
                    5a:f1:75:91:d7:e8:3a:68:50:37:1e:7b:dd:83:3b:
                    fe:2f:08:54:8f:db:6c:45:a8:c0:cf:f0:b9:c0:c4:
                    74:eb:f8:3f:5a:87:ed:5f:ce:37:1f:be:5c:05:cb:
                    4f:3a:f6:3b:f6:33:21:4b:a6:b3:ff:07:0d:c7:1b:
                    0e:5e:dd:2a:c6:a6:83:3d:74:a8:8f:67:35:b8:a6:
                    1f:19:47:2d:ca:3f:c5:f6:d9:3f:e1:a1:a6:65:f3:
                    5c:f2:f9:71:1a:24:3a:39:79:11:10:09:9d:03:85:
                    be:0a:b6:88:81:e4:22:f3:8c:f4:52:8f:f0:b6:e8:
                    6b:60:3b:a7:d0:1f:26:45:3a:d5:ea:6e:ad:ac:6c:
                    3a:3b:57:8a:6b:5d:68:9d:ac:c4:d8:f6:cc:63:d0:
                    10:1a:c0:48:85:26:79:b2:60:fe:0b:46:39:7f:b8:
                    08:7f:62:17:f5:da:9c:ec:fd:bd:23:63:d6:ce:ff:
                    23:14:82:15:11:93:19:3b:0f:31:8b:6d:a7:9c:57:
                    92:69:9b:ac:4c:97:ef:27:5c:ac:e6:f0:38:82:82:
                    2d:30:53:34:bd:be:ce:06:cd:f9:9d:ae:ef:db:8e:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:08:9A:F4:7A:67:DF:B3:C3:38:F7:BE:1A:8D:03:E5:67:1D:C4
            X509v3 Authority Key Identifier:
                keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e2:0d:e4:e6:b8:2a:b1:9d:c9:8e:5d:b2:87:38:cf:e9:7d:
         63:6e:4e:b1:0f:ef:e9:4a:78:8f:6c:df:3c:a8:65:f1:a1:aa:
         04:1d:52:50:b4:aa:9d:4f:34:ce:23:98:85:6c:36:75:e6:b7:
         e0:41:69:b6:7d:5e:f3:38:34:02:80:0a:d0:4e:c6:bd:87:40:
         4f:19:c3:ed:c8:80:92:e5:2b:12:dd:85:5a:9f:6e:4e:03:5a:
         bc:11:43:ad:c6:6f:a2:b2:33:b5:c1:41:65:85:2d:60:2f:ea:
         2e:48:6f:6b:51:9a:0c:09:17:0c:38:c7:41:29:bc:5f:94:6a:
         9e:05:fc:23:f6:c2:37:46:03:8d:58:b3:ad:4b:77:71:52:df:
         43:b6:21:0d:b3:b7:35:d4:4e:98:87:7c:d3:04:c7:4c:a7:09:
         ac:9b:0c:1a:59:46:41:a8:36:74:ee:0c:90:c7:6c:29:c4:44:
         9c:2c:49:a9:ef:4c:67:e5:91:6a:6a:92:84:fb:ef:82:be:a8:
         7c:54:3b:6d:e0:aa:82:ba:05:f3:5f:c5:f2:db:c5:2d:94:f8:
         41:fa:51:0b:90:30:96:d1:2c:bf:d9:bb:ba:5c:ff:22:1e:12:
         e5:fa:73:d4:7c:ef:34:b2:1e:1b:b7:1c:ed:4b:88:14:a6:c0:
         92:5a:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:52 2024 by rpki-client on console-ams.rpki-client.org