Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File:                     f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier:          WGlq4sFrjiZ+unLHiEuSU2/Rv5vZDJ7olVd+oKMjKo0=
Subject key identifier:   2E:8C:00:74:0A:73:25:03:91:BE:16:57:94:DD:7A:86:84:A7:C6:2B
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer:       /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial:       018F87ED8EB357FD728A154604EAC40E0438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number:          0D4F
Signing time:             Fri 17 May 2024 19:00:43 +0000
Manifest this update:     Fri 17 May 2024 19:00:43 +0000
Manifest next update:     Sat 18 May 2024 19:00:43 +0000
Files and hashes:         1: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: h6aqOyFomWbIXcxdUNWUDfJk+nh3dumfgwZVAz4c9Pw=)
                          2: i7BfYqRMXB_vWbCstPnD1RScV_I.roa (hash: 03oWpbIMvRi8GZM/J9J2nrFBHAupfmV82nywbW/j1IQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:8e:b3:57:fd:72:8a:15:46:04:ea:c4:0e:04:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
        Validity
            Not Before: May 17 19:00:43 2024 GMT
            Not After : May 18 19:00:43 2024 GMT
        Subject: CN=2e8c00740a73250391be165794dd7a8684a7c62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:42:5d:3b:0c:75:11:b2:75:1b:d6:6b:e8:
                    db:1b:1f:52:8f:92:6a:89:cb:fb:88:2d:f3:88:8d:
                    f6:56:e7:11:16:2d:fb:06:d7:8a:51:74:e0:90:5a:
                    23:f4:42:fc:11:f3:cc:fd:93:8b:db:37:84:d8:fc:
                    82:77:bf:e2:46:cb:2b:94:bc:59:48:43:94:a2:99:
                    da:55:45:ab:f9:89:4c:aa:e9:ab:d9:1d:06:a5:b0:
                    70:c1:8a:37:43:b0:24:6c:b2:68:ca:d9:4e:95:7f:
                    b6:00:65:52:17:ab:c0:83:85:91:09:ab:c2:26:a8:
                    12:4a:49:90:8f:31:5f:be:09:d4:b3:09:9a:bf:b6:
                    55:da:ee:10:69:3f:87:9a:45:7c:e4:24:ce:cd:9c:
                    bc:94:07:7b:c1:87:95:45:5e:f7:ec:c2:b6:d7:85:
                    bd:3c:54:04:2e:27:9b:b4:a3:d1:ea:8a:d6:1f:c7:
                    e4:e7:90:8e:bc:5d:ce:e0:89:a2:2d:e7:aa:e2:a4:
                    3d:bb:ea:94:56:51:59:f0:ac:10:59:10:60:03:09:
                    43:90:7e:c0:60:1a:29:67:ea:af:4e:4b:ea:41:8e:
                    6d:d4:1c:9a:4b:76:ca:fd:cb:fb:90:03:dc:54:6a:
                    5f:ee:ea:df:d8:95:f2:0f:77:f5:c3:25:03:af:98:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:00:74:0A:73:25:03:91:BE:16:57:94:DD:7A:86:84:A7:C6:2B
            X509v3 Authority Key Identifier:
                keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:07:07:fe:9c:59:3e:8e:95:41:01:d6:6c:28:a7:75:24:a7:
         c2:83:bc:85:0d:b5:06:14:4c:49:e1:d3:a2:91:74:6a:c4:3f:
         0d:c0:13:ea:e4:37:41:96:ef:da:e1:06:33:fd:38:e0:ac:18:
         21:d3:63:f0:21:64:77:9a:c1:7a:6a:66:8d:f7:41:76:a5:87:
         bf:34:da:b5:42:47:85:4f:fe:34:7e:fc:02:12:39:d1:94:50:
         e9:7d:b3:1b:57:0f:91:c5:5c:5e:78:ac:3f:9d:70:0e:f5:af:
         6e:6e:21:2c:41:26:a3:ed:b9:4f:84:dd:08:9a:26:d7:f9:b6:
         2b:3a:7d:df:9d:09:2f:12:21:c7:5d:fe:00:91:e1:6a:14:28:
         4d:af:7b:3c:d3:18:78:6c:4d:c8:aa:df:ef:bb:73:73:81:44:
         2d:ad:8c:6f:d4:c3:29:82:99:2a:aa:4e:a1:41:77:17:6c:f3:
         0d:7a:4c:7f:da:5a:85:de:96:72:d5:07:af:cc:3d:93:c2:af:
         bb:62:f3:60:63:99:12:c8:07:3c:96:0d:e3:b3:0a:6d:fd:f6:
         90:b7:f7:d3:f1:89:4e:0a:41:66:84:ca:34:f9:cb:ac:6b:2b:
         c7:9e:01:49:bf:89:80:58:c0:cc:47:e7:86:0e:16:4f:f2:c9:
         93:7f:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:47:26 2024 by rpki-client on console-fra.rpki-client.org