Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft
File:                     Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft (raw, json)
Hash identifier:          hrIWrCaTdbTbOSmkZ0GfbmyRGXSpGkI/AxqK+fnPa+E=
Subject key identifier:   15:84:DA:A9:2F:3D:DC:DD:3B:4B:EE:29:3D:EE:AF:83:C0:3C:B6:68
Authority key identifier: 63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D
Certificate issuer:       /CN=637108e0d19992fdc0bfb6e27137304fd543436d
Certificate serial:       018F8749A08D7F5C7A494DDB733176E5A27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft
Manifest number:          1068
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl (hash: aTa9sdrtvQAqDSAVebJPAV/KrMwjVZhv8GhhdU3wssI=)
                          2: zosmpKcLQNGkscPW8tKE7PBQSyk.roa (hash: fxmp6kgoB1x7HBzudnwiHB17kPjYswX/Pg9n2OgaTJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a0:8d:7f:5c:7a:49:4d:db:73:31:76:e5:a2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637108e0d19992fdc0bfb6e27137304fd543436d
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=1584daa92f3ddcdd3b4bee293deeaf83c03cb668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:16:b9:0c:36:42:1f:6d:d3:73:34:e9:02:
                    2f:64:72:c3:9e:bf:26:3f:26:e0:ed:10:73:a2:7d:
                    5f:da:44:fa:eb:78:2a:2f:3c:28:03:74:a9:83:14:
                    da:c0:96:df:ac:24:ac:36:1c:26:81:28:46:93:c6:
                    c0:3f:47:54:3b:66:10:79:2c:4d:d4:5b:f1:60:82:
                    ef:27:8a:5b:18:6f:8c:ca:62:4b:9f:bb:83:39:2a:
                    2b:77:e6:67:fb:77:d0:bb:e7:02:b2:f5:70:8e:c3:
                    01:4b:df:c0:65:04:cd:7e:c0:f5:da:b8:3e:8e:f8:
                    05:99:c3:7d:d6:5b:b4:cd:b4:79:4a:09:cf:52:f9:
                    95:1d:df:f6:e0:27:52:7b:b7:94:2a:20:4b:e0:19:
                    2c:7c:fd:83:e2:f6:bf:07:78:9e:b3:bc:4b:47:85:
                    7a:d7:1a:a1:f5:69:94:0b:e8:a8:04:d8:b6:3f:7d:
                    ad:e2:6e:36:0d:8d:28:bd:80:98:1e:41:0a:94:7d:
                    1d:c0:2d:3b:90:fe:45:65:1a:d1:da:38:14:3e:44:
                    19:cb:1d:0e:e0:8f:5c:df:fc:9e:9e:53:3d:6d:c4:
                    09:a5:c0:ef:8a:aa:53:16:c5:64:86:65:fa:dc:a3:
                    f9:41:1d:3d:47:66:8e:17:fb:c5:49:57:7f:87:2f:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:DA:A9:2F:3D:DC:DD:3B:4B:EE:29:3D:EE:AF:83:C0:3C:B6:68
            X509v3 Authority Key Identifier:
                keyid:63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:90:ca:a7:42:00:39:4c:b9:4e:8b:24:ec:35:18:2a:50:b5:
         3a:37:8c:b7:12:30:32:4a:f7:1f:13:7c:db:93:ec:82:32:37:
         5f:a8:03:6f:6e:96:47:2f:41:f5:f9:6b:7e:4c:59:59:a3:e6:
         9b:30:fe:84:ca:f5:a9:14:ea:f2:8d:e1:81:8f:6e:5c:a7:69:
         6c:9d:cd:e3:5f:99:57:b0:c6:0e:69:e8:9b:11:e8:be:a1:eb:
         48:8b:96:f5:b4:82:1e:af:f2:27:25:39:7c:0b:5a:15:96:56:
         bb:ec:41:ed:59:fb:4b:35:09:fd:f4:2f:61:43:49:43:c1:7b:
         43:7e:78:8e:a5:82:72:03:ed:ba:cc:65:82:d6:91:01:9f:27:
         c0:d8:d3:21:bb:a8:25:e4:5c:c8:ba:d3:0b:f2:ab:19:40:4b:
         26:03:ed:e6:3a:c0:6d:c6:00:ee:b2:6d:4f:38:65:0f:3b:55:
         6b:40:73:c9:c1:8e:64:ca:cd:4d:e3:58:fd:2b:b3:6e:cd:ef:
         45:f7:ad:7a:c2:db:ae:18:6d:92:27:d4:f9:3e:fd:38:18:79:
         77:14:56:fd:73:6e:5e:0c:d6:55:71:3f:fc:49:74:3e:ee:6b:
         e6:ae:93:f5:25:d1:a0:92:a8:de:5b:bd:dc:74:f8:1e:c2:48:
         e5:65:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:05 2024 by rpki-client on console-fra.rpki-client.org