Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File:                     YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier:          XLopeI9mgDnKHtluJoBzDRem2Hvp9KIqMFSB3ry5pUY=
Subject key identifier:   7D:B4:58:26:FA:A0:10:5B:50:F5:AC:F3:52:64:1A:4B:9A:0E:57:A5
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer:       /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial:       018F5CCCFC39191803B3A35FA479B847255C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number:          1161
Signing time:             Thu 09 May 2024 10:01:28 +0000
Manifest this update:     Thu 09 May 2024 10:01:28 +0000
Manifest next update:     Fri 10 May 2024 10:01:28 +0000
Files and hashes:         1: BDE_Y1J54qZ3PY51ktBQD0BFzd8.roa (hash: 2kw9S/uz7Jh5xhJ0qiUnrV7tvxNd0zP1OifQLFIKryI=)
                          2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: mu88B+QmP4cZDMXb7S6q+XS5H9NdygGS8TllAo1JjeA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5c:cc:fc:39:19:18:03:b3:a3:5f:a4:79:b8:47:25:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
        Validity
            Not Before: May  9 10:01:28 2024 GMT
            Not After : May 10 10:01:28 2024 GMT
        Subject: CN=7db45826faa0105b50f5acf352641a4b9a0e57a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:b6:63:17:ef:f6:ec:44:f2:4b:f1:61:e4:
                    10:cb:69:f9:3f:67:35:e7:e1:e3:3e:0b:ea:10:8f:
                    86:c8:94:3d:8c:b0:c5:d6:bb:d7:40:6d:ce:46:34:
                    88:16:57:bc:10:30:0b:5d:1b:33:96:03:5f:0a:02:
                    17:29:92:b3:90:bf:76:cc:a2:8d:15:26:6d:fc:c4:
                    3e:fe:8c:bc:86:09:0b:81:b5:40:04:fa:ac:40:66:
                    43:5a:77:97:9b:0d:c9:e7:3c:fc:06:4a:9a:d5:ee:
                    7c:06:29:e9:3b:0e:2f:1e:58:af:bb:70:58:61:36:
                    62:b4:bf:fb:d4:46:7f:07:60:60:43:23:0b:72:ca:
                    00:50:ce:51:89:7e:24:16:88:0f:5b:bc:b9:e8:34:
                    b5:0a:1a:de:f6:ca:93:e2:e8:8b:f4:1d:41:9a:19:
                    28:c3:7d:8e:d6:d1:49:01:8e:a2:5c:8e:c6:23:af:
                    c6:8f:3a:f6:c4:3b:77:0e:ab:dd:3f:1a:fc:9d:b7:
                    d9:5d:53:e5:d9:d8:17:bd:73:4c:7e:7a:5f:aa:4e:
                    30:d9:dc:c8:6e:71:4b:f3:31:61:c1:f5:ab:4b:56:
                    f9:b6:f5:57:6a:1f:23:5f:9d:35:eb:f7:3c:ea:33:
                    52:dc:e8:12:e7:e3:c9:3b:ba:6f:7a:3a:ac:4f:e5:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:58:26:FA:A0:10:5B:50:F5:AC:F3:52:64:1A:4B:9A:0E:57:A5
            X509v3 Authority Key Identifier:
                keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:34:e9:7e:54:d3:69:63:43:9d:71:56:bd:69:75:48:fa:
         14:97:1e:3f:db:e4:76:a1:cb:30:fb:98:9e:81:2e:79:72:54:
         7d:cf:e9:61:26:76:e6:44:29:33:40:ab:66:05:ea:c6:a8:ab:
         dc:af:60:52:6a:32:54:3b:e1:74:0e:5c:67:45:ff:9d:c9:c5:
         00:9e:fc:a3:17:ba:bf:ac:bc:55:a3:b5:ec:f5:d2:71:3e:e7:
         f1:93:7d:60:33:be:15:1f:58:90:44:06:bf:3f:67:30:4f:e5:
         11:29:09:1b:a8:d5:39:68:ca:7f:f7:23:8b:a2:fa:ce:3f:ef:
         48:4e:5f:60:c3:88:f9:62:c0:c5:59:2e:b9:3b:bb:1f:f3:87:
         f5:f1:5a:26:ab:a2:dd:fb:5b:b7:da:dd:cf:fc:a9:4e:80:ca:
         fd:6a:6b:35:73:20:41:2f:bc:43:66:85:45:e7:a0:2b:71:9f:
         4e:84:f7:99:37:9b:e9:1f:8e:64:a0:e3:b0:46:69:03:e8:cf:
         6b:80:77:c1:18:a5:96:2d:21:c3:a9:2e:c3:50:40:b0:dc:98:
         6c:df:f3:06:e2:28:76:30:b4:4b:72:5d:d0:55:c0:7c:8d:c5:
         88:76:8c:9b:7d:99:68:8b:ec:ae:7f:43:49:7e:5b:c0:53:dc:
         0d:c2:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:51:22 2024 by rpki-client on console-ams.rpki-client.org