Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File:                     ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier:          as/a6ezj19y/k2fgOdTzmwtEDGPGlXqQLWbw3qIQWLM=
Subject key identifier:   97:24:02:FE:82:47:7B:26:26:97:C0:DF:67:76:41:3B:BE:74:2C:19
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer:       /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial:       018F8823FD7FA132FBDCD5B9ADFF634EF814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number:          0E1E
Signing time:             Fri 17 May 2024 20:00:11 +0000
Manifest this update:     Fri 17 May 2024 20:00:11 +0000
Manifest next update:     Sat 18 May 2024 20:00:11 +0000
Files and hashes:         1: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: 30w6xmIrdWGWeFtEwZ5V5J7YVMNyjP3eiKP9stcNSzU=)
                          2: slEVNhUUXB4-GhFIS0vj7DriG6Q.roa (hash: H//hd4sL1mLGuG7Tk+EwlPC/CspdPKEr4uZ4w/4voBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:fd:7f:a1:32:fb:dc:d5:b9:ad:ff:63:4e:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
        Validity
            Not Before: May 17 20:00:11 2024 GMT
            Not After : May 18 20:00:11 2024 GMT
        Subject: CN=972402fe82477b262697c0df6776413bbe742c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:d3:c4:7d:05:05:09:fa:56:b6:fd:5a:59:
                    c0:d0:9a:30:4d:28:3c:c8:cd:f5:a2:89:f9:3b:cb:
                    3e:0c:24:7f:f7:38:72:0d:b4:c6:f0:2d:ec:76:34:
                    1f:33:67:71:53:8d:57:3c:69:b7:fe:ff:6f:49:96:
                    46:4b:57:4a:36:2b:58:56:43:26:05:0f:96:28:2c:
                    30:4c:1c:eb:71:46:56:af:60:3d:75:2d:18:3b:b4:
                    0b:5d:13:76:4e:a4:38:60:f0:a0:64:ee:59:7e:c0:
                    b6:dc:0a:4c:75:9a:c8:14:7d:63:74:f3:43:3d:15:
                    2e:c5:f5:92:2d:82:5d:db:a6:c9:89:0e:48:f4:4b:
                    c8:8e:fe:ca:03:24:c7:3d:7e:61:a2:a3:48:ed:f7:
                    5a:9e:e5:70:6c:94:3a:ca:05:b5:4e:ad:d5:cb:86:
                    b0:48:e9:fc:b0:40:87:3d:c4:76:e7:6f:22:bc:c9:
                    49:c1:0e:16:8b:7d:02:54:1e:d4:84:40:9a:6d:23:
                    d2:7b:9f:20:f2:27:4f:e9:53:63:b1:5d:99:f2:d1:
                    4f:d0:5b:e8:d1:87:67:6e:09:4c:ef:e5:f0:e4:84:
                    d6:60:06:88:39:d1:5b:b7:71:05:04:d8:4c:d0:64:
                    82:af:e9:c4:8c:4b:17:1f:08:7f:db:e0:0c:9c:08:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:24:02:FE:82:47:7B:26:26:97:C0:DF:67:76:41:3B:BE:74:2C:19
            X509v3 Authority Key Identifier:
                keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:44:8c:01:e9:e9:bd:33:6d:4c:e7:25:59:6c:57:4a:f5:
         79:11:9a:39:c1:65:77:47:a6:62:c1:f0:c0:f1:e1:11:e1:0e:
         e1:56:85:8f:fd:bc:70:f1:02:23:6b:a0:4c:9e:54:df:5b:82:
         e2:c9:bf:b1:b3:8f:42:43:15:1b:fd:0a:36:56:f5:49:25:43:
         27:b2:c4:fb:b4:4e:f8:21:fc:ae:4a:e5:28:59:86:f7:07:af:
         5b:18:30:92:a5:78:5c:2b:d5:13:c4:2f:0c:76:62:33:e8:66:
         a6:5e:e7:fc:73:de:8e:0d:ba:2c:53:10:51:f0:f4:45:3f:31:
         d4:3f:f2:23:43:96:13:f0:31:f8:10:20:5c:3f:d1:cc:4c:9b:
         17:7c:26:00:de:89:64:b5:34:51:3e:f8:aa:78:97:28:cd:d1:
         8f:4d:52:d2:28:8f:37:e8:46:6d:d7:c5:c5:f6:97:cb:89:08:
         bb:e2:36:3c:04:68:0e:67:6e:0b:54:e4:0c:a8:73:ef:68:46:
         45:1d:1d:01:a5:c3:71:4b:d9:bc:d5:1b:39:e7:55:57:df:a3:
         c0:d5:9c:fd:de:83:08:2d:f7:97:ad:d4:ae:0d:9d:d5:a2:f9:
         23:16:af:8e:fc:f1:19:0c:d7:17:d3:ce:5f:c2:2d:7d:9b:35:
         b2:d8:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:40:53 2024 by rpki-client on console-ams.rpki-client.org