Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          Pvo+MbAGhm12qK0ENfruySY8N7ZrdjFUc64AljoK+lo=
Subject key identifier:   D5:FF:A8:77:1C:82:04:AC:3A:17:6E:55:51:19:D5:A1:8A:2A:E8:6D
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       018F89371A7215D4D384D2E4A06FEE829811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          0AAB
Signing time:             Sat 18 May 2024 01:00:40 +0000
Manifest this update:     Sat 18 May 2024 01:00:40 +0000
Manifest next update:     Sun 19 May 2024 01:00:40 +0000
Files and hashes:         1: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: G8NYSAsd3K16/gHGMH/mavWZfCgZYmnu8zRq81bLmyc=)
                          2: P1QxCjECv4gluNGA6Q1l56ZgVsM.roa (hash: RM3wXuRQ4Ja5KWuVpoKZw7cAYWJsiJwH037T0srVHOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:1a:72:15:d4:d3:84:d2:e4:a0:6f:ee:82:98:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: May 18 01:00:40 2024 GMT
            Not After : May 19 01:00:40 2024 GMT
        Subject: CN=d5ffa8771c8204ac3a176e555119d5a18a2ae86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:f0:b8:50:2d:53:80:e7:d7:0d:c3:86:83:
                    4f:7c:e4:05:0d:fd:5b:23:7a:11:78:43:e7:83:61:
                    5c:0a:ff:4a:86:12:6b:d3:d5:d1:db:76:4d:40:2a:
                    40:6d:03:19:46:09:64:04:9e:1d:1c:fa:4d:c8:30:
                    c6:c3:5a:98:26:37:c4:2d:77:71:92:ed:a6:df:49:
                    c7:62:ca:a5:c5:c6:94:4a:23:40:87:9f:70:51:f6:
                    e4:ec:87:f0:e9:bd:f6:60:19:49:ea:36:40:dd:f3:
                    35:6b:24:7f:79:67:ed:27:5d:de:18:b2:49:cf:24:
                    42:7f:df:ee:2d:16:dd:26:72:6b:0a:dd:ce:e3:13:
                    65:3a:8f:7e:cf:b3:eb:01:47:46:03:35:6b:d7:e2:
                    28:48:76:29:c9:80:cd:25:ed:cd:54:4c:b4:c4:6d:
                    ff:59:62:07:81:dd:82:f2:67:be:d0:0c:c7:64:f0:
                    bb:16:c0:34:d4:18:fd:28:4a:d6:1c:14:02:d9:bb:
                    c4:13:30:11:98:cd:58:09:0d:78:a4:0a:f0:60:d3:
                    21:8d:9a:d2:0f:5a:7b:f0:81:bc:b4:30:94:af:5b:
                    fa:04:03:2f:81:70:c5:4b:6e:b8:64:8f:c4:e3:a9:
                    a1:1c:1f:8b:cf:93:d5:50:e2:b3:30:10:1b:47:f1:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FF:A8:77:1C:82:04:AC:3A:17:6E:55:51:19:D5:A1:8A:2A:E8:6D
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:d6:d8:15:01:5a:4f:18:ad:ba:1e:9a:06:0d:5c:6b:af:
         ef:31:4f:db:1d:67:62:d8:4a:89:ee:86:77:6c:f8:6d:6d:ab:
         58:3a:6c:14:cb:9f:fa:a0:22:40:21:1b:65:d8:a6:d5:19:07:
         b8:ca:b1:98:44:e9:f7:42:48:fe:04:4e:ae:42:a1:a4:70:ba:
         d0:92:94:d3:d3:97:50:37:87:31:0a:f0:93:e5:f8:7a:55:bb:
         23:23:ae:e7:14:7d:9c:f5:14:f4:40:e9:07:0e:77:50:8e:6c:
         48:5f:24:64:23:7c:da:ae:3b:ef:87:99:27:13:5d:c8:bb:25:
         29:5f:46:0e:09:33:bc:ed:ee:66:9b:50:0f:bd:8a:9f:be:44:
         3d:91:01:84:5d:7d:e5:21:e7:a8:70:26:fa:75:88:15:a4:d9:
         39:56:74:dd:8c:87:b9:56:c2:05:7d:a1:a3:e8:a4:a5:93:c8:
         62:60:16:c5:7f:8a:d4:c1:00:c8:7b:ec:6a:2e:6c:54:15:09:
         8d:c6:d7:1b:9e:9f:70:e4:0c:b3:a9:41:8f:f6:12:95:28:75:
         eb:a9:97:e9:26:7a:33:29:74:98:44:ff:75:cf:03:9f:ef:db:
         38:5d:39:c4:d9:a3:f4:64:8c:61:f1:56:50:c3:8a:f5:5d:91:
         4f:37:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:48:32 2024 by rpki-client on console-fra.rpki-client.org