Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          HtnYcNQKC3MGPQYjlpZTQ2mX+c9SMbH3NpVAgn3HpC4=
Subject key identifier:   4D:A5:B2:FF:2E:B4:89:71:83:96:D8:34:89:E6:9D:EC:14:F9:BF:21
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       018FB07BFF02E52722C549B000664E43CBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          1191
Signing time:             Sat 25 May 2024 16:01:07 +0000
Manifest this update:     Sat 25 May 2024 16:01:07 +0000
Manifest next update:     Sun 26 May 2024 16:01:07 +0000
Files and hashes:         1: 1-JRrmTV1m8AhMM9EI1dhNl4GICE.roa (hash: WwKOTEUxI4jOelYINNfmqqYgQdlFWBJZ1vfdR8Z29YM=)
                          2: 82PO-bTMjGd8Mf7_lOsKuVviCQI.roa (hash: R+J+igw+3TYIug3/1zPlBRIiOxPH9LpyAfdWBOjxVYM=)
                          3: vfx78XlZiNPa--aMEoybiaP_FYc.roa (hash: ben6PYuFqd2CL+gRx55mNeAunx4qn66TTVoxPjxzVlU=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: Y6AMUJLLamKlRaT/wc784n2RJg6+zWURzwUNZtIG+Mc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b0:7b:ff:02:e5:27:22:c5:49:b0:00:66:4e:43:cb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: May 25 16:01:07 2024 GMT
            Not After : May 26 16:01:07 2024 GMT
        Subject: CN=4da5b2ff2eb489718396d83489e69dec14f9bf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:95:b2:3e:e1:85:b5:de:af:59:6e:4e:25:
                    28:b7:0d:7d:65:49:80:a9:b2:fb:a4:20:a6:94:01:
                    d6:c7:2e:f9:16:11:46:a6:af:92:0a:fa:23:00:73:
                    d2:a7:87:56:c0:f2:47:32:99:c5:2b:f1:34:4c:ca:
                    70:a4:17:e6:67:fd:4d:d2:eb:f3:37:a4:ab:a8:4a:
                    ca:3c:21:20:1f:ac:53:6d:e2:a3:d9:a0:6e:1f:59:
                    13:d8:c7:a4:64:65:43:17:2f:6a:0a:0f:a4:d0:12:
                    2e:5c:e8:b0:d5:60:ec:4b:d0:85:1b:4e:4d:04:a6:
                    ee:d0:48:00:2f:38:c9:f8:c8:2a:69:13:e9:ac:ca:
                    04:ea:08:80:7a:18:ac:2d:d9:c4:97:f9:50:ed:df:
                    f8:9d:af:c9:b8:24:fc:9b:88:fc:d0:23:12:93:6b:
                    14:0f:8d:ec:c4:ec:82:f3:cf:7c:ee:e2:30:7d:50:
                    99:08:ec:aa:70:ae:f0:ef:87:09:e6:f8:af:b8:f7:
                    31:8c:f7:f6:37:30:a2:ef:6a:cd:3f:b8:ac:2c:0a:
                    1e:d1:b9:0a:e3:4b:4d:84:b3:73:cf:43:c6:5b:a7:
                    d3:de:71:60:0d:81:74:7c:e0:6e:f8:f7:f8:ea:7d:
                    6e:0e:14:73:fc:59:8f:ed:1f:bc:e9:c5:14:51:94:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:B2:FF:2E:B4:89:71:83:96:D8:34:89:E6:9D:EC:14:F9:BF:21
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:81:5e:a5:e2:43:fa:28:5d:9e:f9:34:dd:57:71:a6:f8:
         82:79:57:11:2e:76:37:00:54:d8:89:3c:91:ff:aa:85:78:c1:
         b4:a4:1c:25:54:11:3d:bf:6d:95:c8:96:d3:db:da:1f:c4:0a:
         db:1d:8b:48:b0:a6:82:4f:e4:53:86:d8:42:0c:64:c7:13:3b:
         6a:1a:d7:62:62:20:67:e3:ff:97:1e:a3:d5:05:1a:c3:bf:12:
         60:3c:14:5c:0d:a0:48:66:7d:3d:9d:ee:a7:4b:48:f9:ab:49:
         3f:ec:d6:e4:dc:13:5f:2a:bc:33:37:4b:6e:9f:75:30:c5:56:
         5e:2a:05:35:a0:5d:1e:53:c3:9c:85:c6:18:fc:8a:6a:8b:e9:
         f1:ba:42:ef:e7:34:51:16:6c:5b:f7:de:f2:17:14:16:a8:66:
         7c:36:1a:ab:e7:9a:c0:21:9a:b4:d1:bb:da:1b:ef:6e:02:6c:
         31:df:93:2c:dd:74:06:d4:9e:b8:7b:ca:46:a0:c4:e0:35:5f:
         14:84:72:16:51:de:77:07:92:0a:c4:07:29:9c:c3:bb:88:19:
         0b:f3:21:65:f7:0b:b5:5c:ec:4b:28:d4:be:67:f3:1a:e8:e8:
         19:97:47:2a:c3:ce:f0:0c:ae:b4:b2:be:9a:19:46:41:dd:d3:
         2f:c6:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:48:49 2024 by rpki-client on console-fra.rpki-client.org