Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File:                     l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier:          hzqL/M97CQuYV/9hQ35A/yXoUgWSFKk42f8qdYly0jY=
Subject key identifier:   3D:BD:EE:87:B6:8C:FE:70:E9:AC:8E:84:31:E2:8A:CF:C7:8C:6F:DC
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer:       /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial:       018F98AAE247A03A2D87DABCB282ABBD4442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number:          0382
Signing time:             Tue 21 May 2024 01:01:26 +0000
Manifest this update:     Tue 21 May 2024 01:01:26 +0000
Manifest next update:     Wed 22 May 2024 01:01:26 +0000
Files and hashes:         1: B_xpu8VUkU9hwJpcbQ6eGJbRuvM.roa (hash: JcF1EL4fnitMSr9BIKR6iZ9kIBT8KGVyBoxipLBqlVQ=)
                          2: FJoC5BPqEhG5RoMfGpm-W7-5dqI.roa (hash: WLShRver1oHnvQU1fdBY/a38xDQ4E7nrqCpO3AyYUnI=)
                          3: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: DHUVH7nT4Z9efH2bp4Gr7i++IvkGCWHiXkucpPDvXKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:e2:47:a0:3a:2d:87:da:bc:b2:82:ab:bd:44:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
        Validity
            Not Before: May 21 01:01:26 2024 GMT
            Not After : May 22 01:01:26 2024 GMT
        Subject: CN=3dbdee87b68cfe70e9ac8e8431e28acfc78c6fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:ea:f5:b1:31:8d:1e:4e:43:40:5c:1d:4b:
                    46:8a:db:05:9a:b5:96:af:33:bb:5b:a6:7a:15:94:
                    87:f0:7d:5b:cd:c7:2f:32:cd:6d:d0:67:93:b0:80:
                    6a:31:62:6a:27:3e:62:0a:b3:38:44:a2:a4:f2:ea:
                    46:f5:3b:4c:78:d8:4b:a2:69:ad:14:b7:69:d2:66:
                    4d:91:d4:91:2d:0e:d3:e2:64:ba:90:4c:19:08:df:
                    96:4e:88:b4:14:79:16:21:c8:bf:4a:39:b4:0a:6a:
                    6f:5a:32:a7:77:82:25:5d:69:5a:e0:dc:d9:ac:30:
                    f4:5e:67:21:65:46:9b:21:50:57:b9:29:6e:3b:79:
                    dc:4d:d4:83:72:54:35:05:eb:91:b1:b6:0e:70:65:
                    d2:17:a2:17:c5:14:5f:e1:7e:bf:33:70:25:8e:64:
                    66:a2:64:2e:bf:cd:05:2d:0d:c7:0b:ea:7b:1c:31:
                    a8:00:0c:96:ed:98:ae:91:e1:3e:b5:0a:65:df:8c:
                    05:19:c9:04:1b:61:33:5c:77:04:ce:94:08:d1:e6:
                    5a:d7:1f:2e:a9:80:f4:14:fb:29:e2:e5:23:c9:80:
                    c2:4a:fc:90:4e:73:7d:a8:3f:81:d5:a4:00:fc:d8:
                    94:b9:8f:44:43:91:0a:96:de:a4:f0:82:35:66:44:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BD:EE:87:B6:8C:FE:70:E9:AC:8E:84:31:E2:8A:CF:C7:8C:6F:DC
            X509v3 Authority Key Identifier:
                keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:61:4f:26:6f:0a:83:a9:05:a2:44:af:a6:a5:76:c2:98:a0:
         e6:cf:a2:6d:37:77:fa:d8:03:0c:1f:bc:5e:26:a1:19:66:a0:
         bf:31:5b:53:34:19:08:b0:9c:a2:ba:e5:33:ad:6c:e0:32:ce:
         14:7c:00:80:59:4a:8c:12:0d:22:82:7b:5a:bd:16:03:88:d5:
         10:01:c9:10:65:03:cc:e9:3d:53:01:60:7f:e9:59:4f:a1:bb:
         5e:6f:44:56:16:17:52:f3:95:80:f4:a5:c2:76:1d:87:80:e2:
         90:43:2a:fa:a5:dd:c4:43:6f:3a:dd:48:23:6b:39:66:32:5d:
         0d:ca:70:7f:cb:b4:4e:25:86:f1:2f:23:32:09:3c:21:c9:05:
         39:09:db:e5:ea:c4:12:4c:1b:46:93:cb:f8:68:31:51:83:6f:
         65:42:89:39:eb:a2:b8:55:80:3b:24:68:bc:61:7f:c4:e6:7f:
         64:69:c5:27:83:1e:64:db:2f:47:c0:ec:1b:92:a0:ae:ae:3a:
         6e:f4:ae:5c:17:f9:e3:f4:3a:0f:01:84:af:72:38:05:c9:65:
         5e:01:4b:94:05:af:a7:62:0c:c4:09:72:48:b7:38:83:4e:33:
         a5:6c:ae:9d:f1:ad:ad:77:61:f1:91:ac:ed:c4:83:08:51:d2:
         b7:6a:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:38:36 2024 by rpki-client on console-ams.rpki-client.org