Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File:                     itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier:          3vpHgPoRDP/D/4MAN3v8Dd9j8X1ay4lzD7WqkGP4UPk=
Subject key identifier:   9A:70:F8:84:ED:58:04:BB:F6:88:49:CB:0B:1A:57:F4:C1:29:25:23
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer:       /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial:       018F86A3EBBEC539109B14CDB86B6684636D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number:          033E
Signing time:             Fri 17 May 2024 13:00:40 +0000
Manifest this update:     Fri 17 May 2024 13:00:40 +0000
Manifest next update:     Sat 18 May 2024 13:00:40 +0000
Files and hashes:         1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: rlnQSALxy7quusiWei5LyEU5Ndr/mh0B8b0xi0i5BME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:eb:be:c5:39:10:9b:14:cd:b8:6b:66:84:63:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad60676432f68723662c932579a849352014b95
        Validity
            Not Before: May 17 13:00:40 2024 GMT
            Not After : May 18 13:00:40 2024 GMT
        Subject: CN=9a70f884ed5804bbf68849cb0b1a57f4c1292523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:26:2a:80:41:d0:4f:7c:9a:c2:f9:7b:7e:
                    f7:20:65:b0:c4:c6:b3:22:69:a1:77:51:fd:ee:1e:
                    41:2d:8b:47:1e:b0:d3:03:6a:e0:17:3e:09:34:b9:
                    9e:a5:ae:b9:82:49:1d:f5:18:e0:7f:5d:9e:43:7d:
                    0b:e5:ae:74:0d:cc:bc:78:f5:45:da:55:eb:11:92:
                    57:ee:02:42:91:1c:e3:8b:ad:6b:39:a6:2e:59:71:
                    af:ba:b2:58:ce:22:22:3d:a8:ec:74:a3:43:ef:50:
                    19:c0:6b:4c:a3:f9:3f:e1:a0:17:71:af:5b:a4:27:
                    dd:38:4f:3e:31:be:94:31:23:95:d2:3f:ea:c2:8b:
                    bb:53:83:fa:c6:88:aa:89:19:5f:63:c7:f3:6b:7a:
                    ef:68:26:38:36:a0:0d:ed:ff:17:d5:ba:63:b8:63:
                    9b:59:8d:56:ac:43:33:62:e6:6e:f0:10:6f:ed:5d:
                    f0:01:c0:d0:8b:4e:ae:5a:75:46:af:06:d8:f4:e9:
                    d1:dd:11:24:3d:ac:43:45:59:47:40:bb:2a:56:1d:
                    f1:64:9a:b6:fe:01:5b:7f:34:4d:bf:7e:de:cc:3c:
                    ae:ec:33:4b:c9:fa:1d:c1:59:1f:2c:fa:72:d7:a7:
                    b4:5e:6b:43:15:f7:6b:61:b1:63:f4:14:27:c3:f1:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:F8:84:ED:58:04:BB:F6:88:49:CB:0B:1A:57:F4:C1:29:25:23
            X509v3 Authority Key Identifier:
                keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:99:82:f7:61:68:86:14:0b:03:87:0c:9d:17:13:24:02:34:
         d2:c5:76:4d:25:ff:ad:1d:70:83:3a:c3:6d:c9:61:d5:00:86:
         30:96:c8:01:f6:78:31:b5:7d:da:f3:f2:d5:b3:58:e6:95:9c:
         bd:01:80:f3:16:50:6d:97:35:ac:19:73:cd:ce:c0:9a:8f:e7:
         21:d7:bd:29:bd:66:b5:2c:49:5e:0a:81:d6:11:30:d7:6a:ef:
         07:a2:da:8f:59:7e:83:47:05:77:ff:c9:02:c6:56:f6:3d:85:
         cd:d4:da:20:06:13:43:29:8e:19:28:b5:c4:7d:0f:a8:b5:65:
         68:35:b6:81:1f:0c:62:94:ee:d4:dd:52:8a:f0:1b:c8:5e:50:
         13:73:b9:9b:c5:ec:80:be:4b:b6:2f:c1:ca:2e:fd:5c:3e:f8:
         37:58:f9:11:64:b6:76:81:3f:d4:fa:0b:33:63:58:dc:d8:59:
         0e:1d:18:3c:99:9b:0c:ff:2f:73:dc:31:03:98:5c:5a:eb:37:
         3c:36:af:9a:4c:3b:3d:65:03:84:3b:44:5a:0a:b8:97:58:82:
         82:8c:ef:c2:79:cc:da:46:f2:1b:3a:88:07:e1:2e:db:53:81:
         be:a7:c7:36:8e:fe:87:b1:f3:8c:ba:4e:96:3e:f6:fe:20:6a:
         1a:b7:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:06 2024 by rpki-client on console-ams.rpki-client.org