Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          cMUtCm2XKjeBnSgAQ2WaQtkcrY1ATCcEjsQWGb7ZyWA=
Subject key identifier:   EA:CC:D2:8B:50:49:9C:41:AA:9E:80:21:BF:04:AB:55:79:14:6F:84
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       018F893959174AE0729FCC1E57B62F808AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          11A8
Signing time:             Sat 18 May 2024 01:03:07 +0000
Manifest this update:     Sat 18 May 2024 01:03:07 +0000
Manifest next update:     Sun 19 May 2024 01:03:07 +0000
Files and hashes:         1: 0NOTC247PrhBQHmb2YPUVeWDNWc.roa (hash: 3tcxg1NL3yz/lvX+2dtGqL6Z69rijdSkTORxLGvSv8Y=)
                          2: 9hamjLmK2l3r39mG00TR2Z5btdw.roa (hash: LwEgCD5LCkfabGRyrpd3P2MSWdWYU++X00mI1M/gO4c=)
                          3: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: U1KhzdKvFuaM575ly5j36IWu9ZEakSKiD/bpY+S/5S0=)
                          4: aKikpLgdOdnvBchwLvXXmomf1vk.roa (hash: YF/5R3OAuiWrsAiWYlXOdR2IdmdetIW3b4t7cB0vgLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:59:17:4a:e0:72:9f:cc:1e:57:b6:2f:80:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: May 18 01:03:07 2024 GMT
            Not After : May 19 01:03:07 2024 GMT
        Subject: CN=eaccd28b50499c41aa9e8021bf04ab5579146f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:3f:0b:ba:6e:52:95:ee:6b:16:c4:d2:55:
                    1d:bc:ec:24:53:63:92:78:ce:44:54:c1:f6:78:b3:
                    87:19:2b:cf:9f:21:18:88:db:fb:69:b9:3c:5e:1f:
                    db:23:46:fd:83:1d:69:a4:a1:61:29:df:e9:d4:86:
                    70:8c:cb:9c:2f:dd:89:5f:7e:bd:2b:ef:f3:13:83:
                    cc:53:bc:a8:54:93:c9:34:bc:f2:f5:5f:bd:9a:40:
                    b5:26:7b:ec:01:d9:c6:7e:2b:a2:85:fd:2d:ed:21:
                    e3:b4:46:0e:f0:f9:e4:af:98:0a:92:d0:96:8e:88:
                    af:8b:07:6b:d4:26:7a:55:54:06:ff:30:c4:5f:b5:
                    05:18:22:90:43:d2:27:3e:89:37:2f:3d:3f:3b:90:
                    6a:cf:25:f5:b0:8a:0e:4a:24:46:ab:40:90:ee:cc:
                    e3:9a:98:08:3b:49:7a:20:8b:83:7f:47:4e:d0:65:
                    2e:68:bc:ab:51:ee:26:20:36:ac:94:80:a8:21:85:
                    f5:a7:0f:03:fc:e0:b0:54:1f:cd:f6:b8:1d:0c:78:
                    96:fa:39:aa:58:99:d5:31:c8:aa:0e:de:52:a8:95:
                    c6:13:5b:c3:11:cf:f3:48:e5:0d:40:36:c4:ff:c4:
                    b3:b4:90:f0:ea:45:b3:ca:5f:62:e3:e9:87:c7:86:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CC:D2:8B:50:49:9C:41:AA:9E:80:21:BF:04:AB:55:79:14:6F:84
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:ae:42:20:68:bb:af:c9:35:17:ca:1c:48:45:2b:b8:cc:
         a0:02:89:4b:f1:ee:b0:26:b4:14:bc:48:71:37:ab:2e:dc:60:
         26:5d:f1:04:8d:0a:d5:fb:1a:1b:ae:81:12:08:4d:6d:cb:e0:
         15:64:e9:93:5a:5a:0a:4e:16:72:f4:8c:75:21:b8:ea:ba:65:
         7f:59:2e:cf:82:48:12:ac:71:4b:21:4c:ff:48:8d:71:cd:d3:
         c3:03:63:dc:78:09:db:7a:aa:bd:1f:be:52:90:8c:6a:02:e8:
         32:43:3a:cf:74:17:64:77:90:05:d6:b7:73:0c:de:81:ed:7c:
         5a:c1:34:f5:f7:83:1c:c3:22:a2:e0:9d:18:9e:4a:66:33:18:
         77:92:b3:fe:49:15:5e:53:72:2c:70:e4:e8:c2:b2:81:5a:97:
         00:b2:db:ba:0d:5c:20:f1:45:76:9c:52:8f:f2:18:b8:28:82:
         61:49:b9:a3:08:37:f8:48:7b:ab:d5:c1:f7:5f:b0:b8:17:8e:
         07:7c:cf:02:e3:00:a1:99:df:98:fd:ed:54:0f:86:dd:78:c2:
         10:b1:6d:f7:52:35:fd:d1:01:b5:8b:0e:51:12:72:56:25:ad:
         53:f7:da:1b:42:da:52:f6:83:cf:54:a5:f5:9a:ff:da:ec:8d:
         eb:e1:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:00:23 2024 by rpki-client on console-ams.rpki-client.org