Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File:                     yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier:          oXSr7fct8SkD8nU3z7+tUr1E4xDQ/6YPdRErNGqjECw=
Subject key identifier:   82:E1:28:48:EF:02:5D:B1:E1:AA:28:5D:9D:47:3E:CD:84:97:88:CB
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer:       /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial:       018F86359DD4C6942FD19CD1C94F68FDB2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number:          0B36
Signing time:             Fri 17 May 2024 11:00:11 +0000
Manifest this update:     Fri 17 May 2024 11:00:11 +0000
Manifest next update:     Sat 18 May 2024 11:00:11 +0000
Files and hashes:         1: hjCgM-ystt0Xy0OhGLt3SQGJKvg.roa (hash: FatDd7lOPUBvMlYhasNW5rlsyqegCbAlWwJuCxUa240=)
                          2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: y3UpE2Ac98td/+iqUNKe1JV7E13Id0qVRw+0TcxWPAo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:9d:d4:c6:94:2f:d1:9c:d1:c9:4f:68:fd:b2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
        Validity
            Not Before: May 17 11:00:11 2024 GMT
            Not After : May 18 11:00:11 2024 GMT
        Subject: CN=82e12848ef025db1e1aa285d9d473ecd849788cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:16:c8:0a:9a:ce:cf:b9:26:57:11:50:9c:
                    80:1f:71:55:b0:76:b4:b8:ca:dc:aa:e7:e4:32:91:
                    de:4c:e9:10:16:d5:24:97:61:e8:20:23:3c:66:e8:
                    b2:09:52:c0:26:8b:fc:3e:9b:6f:a8:8c:62:2b:8f:
                    ac:18:ba:21:33:0a:84:5f:0a:f1:2d:02:96:46:10:
                    5c:98:5d:2a:06:0a:c5:bc:c8:ed:c2:d8:ad:f4:53:
                    a0:7e:a6:c2:b9:25:3f:15:30:2c:e1:7a:23:33:68:
                    be:1d:6e:35:e8:7d:5f:5d:38:4d:a0:cb:ac:3c:c4:
                    8c:13:a4:62:6e:52:7a:a0:df:8b:b3:a6:ee:a1:7c:
                    53:c9:be:06:ff:31:e2:2d:69:04:03:e9:12:7f:16:
                    c7:dc:da:ee:2a:79:85:40:f1:74:c9:8b:59:09:7d:
                    86:44:3a:d3:12:b4:a3:f1:db:7a:af:ce:cb:e8:bf:
                    cd:f2:2b:6a:ac:38:aa:81:e8:c2:3f:c1:39:13:26:
                    ae:5a:59:f9:ea:8c:ef:ec:41:7d:48:14:50:28:27:
                    4f:31:7e:7f:52:08:0c:c2:77:86:bf:a4:c0:72:f8:
                    e9:19:e1:77:57:37:47:8c:4c:83:9e:f2:cd:4c:26:
                    9a:c2:b7:5e:b9:51:95:e5:e3:30:78:9e:94:d2:12:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E1:28:48:EF:02:5D:B1:E1:AA:28:5D:9D:47:3E:CD:84:97:88:CB
            X509v3 Authority Key Identifier:
                keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:86:7a:f2:ed:0a:d3:29:2f:b0:f1:a0:26:ff:08:da:a8:cc:
         98:d9:41:fa:0f:00:a9:14:f6:0f:2d:24:38:ba:e3:5e:f3:c7:
         7e:6a:f8:9e:de:aa:2b:32:96:68:8b:5d:06:50:44:ff:3a:fd:
         a9:34:0b:bb:43:74:d2:f0:1e:e0:d3:26:36:bb:e7:5c:3b:2c:
         70:f1:a5:52:a5:bd:3c:c4:51:8f:e8:81:83:1d:6b:48:5c:c4:
         82:3e:e4:ee:ee:e0:f8:57:ce:a6:ca:ee:98:51:e8:f8:ae:4d:
         da:7c:38:60:9b:02:bf:cd:d2:ca:69:94:60:8b:d0:5e:f6:0d:
         fb:fd:e3:1b:b7:09:3f:fb:dc:8c:9a:cd:b7:b2:9b:a9:46:87:
         ae:11:f2:5b:b9:13:8f:13:8b:d8:d6:60:d2:fc:90:65:15:bb:
         54:0a:83:88:5a:f5:30:c0:b8:5a:55:71:06:e0:ec:c5:49:f0:
         8e:74:cc:de:a9:c3:98:74:4f:87:06:5f:19:5c:76:f7:3f:30:
         c8:76:15:09:1c:3d:40:9e:0a:c0:94:20:45:7d:92:aa:09:79:
         ac:c1:8b:28:f4:3e:b2:e2:2e:4c:6e:7a:76:c3:7a:77:0d:f1:
         d8:2b:48:5b:91:30:43:3a:98:9c:e3:68:4c:11:9d:6f:52:51:
         22:c9:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:25 2024 by rpki-client on console-fra.rpki-client.org