Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File:                     YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier:          5O4YS0i7aIAEGS3gMTX1syjf55EowudFtIWgIdLfvsM=
Subject key identifier:   20:10:DE:11:45:91:EB:68:86:47:E9:B3:C0:01:3A:62:FE:0A:6D:4A
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer:       /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial:       018F96BD44355A027A0C81CDEF14B374C8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number:          1054
Signing time:             Mon 20 May 2024 16:02:17 +0000
Manifest this update:     Mon 20 May 2024 16:02:17 +0000
Manifest next update:     Tue 21 May 2024 16:02:17 +0000
Files and hashes:         1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: BaIcYVAydpWS0HbDe6ko8+rrcoDylZQxTAq4PU8JDzI=)
                          2: ri7gvn6JVD4kRWEpsdz9fU7qEoU.roa (hash: 9+XL2SkTYCs53ndW3uOfZlUbkSKoBlSHhXfgVltZeQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:44:35:5a:02:7a:0c:81:cd:ef:14:b3:74:c8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
        Validity
            Not Before: May 20 16:02:17 2024 GMT
            Not After : May 21 16:02:17 2024 GMT
        Subject: CN=2010de114591eb688647e9b3c0013a62fe0a6d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:1b:bf:f8:2e:21:47:b0:f5:41:03:3c:ab:
                    e0:b4:56:5f:cc:ed:2a:40:78:c0:5e:70:c2:9e:9e:
                    0c:c9:a2:e6:b8:d0:98:8a:3f:a2:38:34:2f:1e:6d:
                    54:86:a4:ea:a4:12:06:d2:fc:6c:8a:7e:b4:9c:9e:
                    48:62:1c:d6:68:1d:90:7b:d1:eb:d3:58:c7:10:25:
                    0b:fb:77:39:16:1a:48:46:d5:ca:33:2f:b9:c4:1f:
                    1d:42:47:89:fd:b5:57:5e:b1:9d:98:15:99:e0:0c:
                    2b:d0:cd:2d:6c:1b:1d:e3:2a:15:2f:6d:53:70:93:
                    1f:a3:9c:ac:7e:6f:00:40:20:39:ce:e1:4d:d5:bc:
                    55:de:d9:f2:89:73:e7:d7:ca:02:52:04:a9:b5:9f:
                    1a:9f:49:f1:c4:47:ed:af:8d:5a:8d:0f:d0:a9:53:
                    6b:72:97:26:a5:0a:3b:a0:2f:8f:4e:91:9e:59:5e:
                    b1:04:e3:7d:55:5f:38:33:5b:2d:94:3b:47:dc:38:
                    a0:fe:92:a6:d8:e5:a2:17:9e:29:7f:40:76:2b:2f:
                    e9:a2:35:e9:28:e6:9c:a9:5c:59:36:c5:90:3d:21:
                    56:e8:2b:77:51:0a:8c:c1:9c:3b:44:f1:33:dd:e1:
                    f7:46:f4:95:ed:bd:29:d7:7a:d2:d9:27:11:bc:f3:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:DE:11:45:91:EB:68:86:47:E9:B3:C0:01:3A:62:FE:0A:6D:4A
            X509v3 Authority Key Identifier:
                keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:81:6e:42:7d:96:66:98:b1:d0:6c:71:fc:d9:83:d5:ee:
         15:1c:6a:45:88:c3:40:8c:9f:15:61:8a:f6:e1:74:b0:76:d0:
         92:92:af:bc:14:8f:5a:df:b2:e7:fa:48:5c:9c:7d:9b:3b:7d:
         b5:1f:80:9b:86:10:b2:52:2a:15:f5:30:94:01:24:56:bf:86:
         e9:84:4b:3e:70:de:49:5f:5a:47:ce:79:e1:3c:18:f5:84:6c:
         e0:29:33:47:e2:4c:08:5c:25:8e:68:2a:a8:d3:56:6f:a5:98:
         8a:cb:17:f9:aa:ff:f9:e2:a3:09:9d:f9:29:7e:9c:b5:1a:8a:
         37:d4:c4:10:6a:f8:7c:5a:e5:03:52:c7:b1:10:9f:73:c7:61:
         f5:93:83:f5:4c:f8:32:27:db:17:ba:db:b0:bf:26:2f:82:71:
         ac:59:17:16:01:c0:f3:e8:6a:60:5c:73:65:72:a3:b6:06:46:
         91:49:54:10:09:40:59:80:17:42:93:e7:13:b7:b9:c3:bf:a0:
         6a:46:73:99:fc:7d:84:5d:76:49:a7:ab:9a:2a:5f:7c:56:54:
         e7:64:92:04:51:6b:3e:5b:a2:8c:9f:ba:7d:54:8e:74:c4:a3:
         57:b4:ba:47:eb:59:bd:d3:15:63:7f:2e:83:3b:d1:ce:72:e8:
         e6:e8:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:06 2024 by rpki-client on console-fra.rpki-client.org