Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File:                     YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier:          xDTG8L03T+yaLYqW5WqHY1SZTYOdNIr9W7grLA9jaoQ=
Subject key identifier:   CD:72:21:46:92:7D:CA:0B:6C:1E:D8:DD:60:4D:8A:F5:67:AA:F0:CA
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer:       /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial:       018F8749ADDDA3035AD9AD01C1E21A5C32C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number:          025C
Signing time:             Fri 17 May 2024 16:01:43 +0000
Manifest this update:     Fri 17 May 2024 16:01:43 +0000
Manifest next update:     Sat 18 May 2024 16:01:43 +0000
Files and hashes:         1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: gzfvawfChrVywuOx5+SqWU2Eh3vZU9dSnywWJPqnLtE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ad:dd:a3:03:5a:d9:ad:01:c1:e2:1a:5c:32:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
        Validity
            Not Before: May 17 16:01:43 2024 GMT
            Not After : May 18 16:01:43 2024 GMT
        Subject: CN=cd722146927dca0b6c1ed8dd604d8af567aaf0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:06:c6:3b:61:cc:8c:4b:36:97:0e:5e:70:ef:
                    d0:af:76:c8:16:31:2f:1a:ea:59:48:21:cd:ae:9c:
                    56:2c:d0:2a:2e:eb:68:23:15:fc:4c:c9:bc:e5:aa:
                    d2:09:66:f2:43:a3:74:e1:fc:ae:bc:db:33:7a:b1:
                    53:59:a2:3c:c7:2c:53:64:5c:87:04:96:f9:2c:de:
                    17:69:01:76:9f:cf:6a:99:93:c5:ee:ca:12:db:a8:
                    2c:64:6c:92:93:2d:11:7c:62:8d:13:61:68:ef:0a:
                    98:da:a0:83:b7:a5:f9:32:bc:ab:ce:06:28:7b:6e:
                    1e:15:4e:a2:ed:56:a2:ba:53:20:9f:e0:40:10:9f:
                    08:6e:31:42:2c:7e:f9:66:38:4f:b5:e5:db:67:77:
                    28:1b:13:b5:20:4e:52:2a:5a:13:bf:89:86:cf:ba:
                    7e:47:24:d5:1f:55:8a:eb:6c:92:57:da:46:4c:47:
                    55:a3:0c:83:b1:ae:23:d3:27:5b:97:0e:9b:98:7f:
                    b3:b3:88:94:c4:85:6d:aa:8a:60:72:04:da:49:93:
                    d5:3b:2d:a0:cf:9e:71:28:1d:6b:f6:81:7a:f6:6b:
                    bd:48:98:6e:30:a8:3a:00:d8:df:08:05:3b:4f:d1:
                    ad:51:bd:0f:23:a9:4c:4f:e6:2f:99:47:38:bb:cf:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:72:21:46:92:7D:CA:0B:6C:1E:D8:DD:60:4D:8A:F5:67:AA:F0:CA
            X509v3 Authority Key Identifier:
                keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:de:ba:fb:e3:aa:aa:cb:c1:ac:9e:d1:ca:e6:23:6c:bb:cc:
         75:3e:fb:94:e2:03:13:ca:60:0a:18:59:b4:e6:09:92:bb:eb:
         d0:5c:7c:a0:b1:8d:37:7c:7e:a6:a6:25:a2:f5:fb:24:63:a3:
         a9:30:80:6d:1f:98:89:8c:b7:7e:c2:65:3c:d6:02:73:8b:7b:
         c0:36:5c:b1:51:92:33:3c:1b:59:68:5c:fb:15:68:3a:a3:3f:
         e8:1e:51:55:75:d4:a6:e2:a6:da:e6:b4:38:20:57:18:1d:87:
         eb:cd:77:33:5c:c0:0e:a8:1e:69:25:d0:20:db:17:17:1a:08:
         09:2a:92:87:49:08:9a:5f:cd:01:9c:b0:60:f3:bd:d9:6c:db:
         55:98:4a:72:bd:ef:17:96:03:85:f5:66:b7:3d:01:e2:2c:79:
         22:0c:c4:42:3a:d5:8c:a2:6f:f0:be:1f:fb:de:64:2f:e6:22:
         31:36:35:ec:25:2e:6e:04:22:ff:87:43:91:68:99:c6:75:a7:
         52:17:87:dd:e4:7a:54:b3:18:8a:d7:5d:05:b5:c8:3e:2c:be:
         ac:a6:d8:cd:e1:71:75:f6:d7:54:49:1f:4a:6e:67:ea:0c:de:
         b3:21:b9:07:58:85:0d:b0:1e:6b:17:c6:36:01:b1:c8:c5:e6:
         68:e9:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:09 2024 by rpki-client on console-fra.rpki-client.org