Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
File:                     YbcgLJIwwolFDtWmKxc2mgZZvGs.mft (raw, json)
Hash identifier:          5PGt3Ou+e/Z1kOkGM8TeqNrnxStSGRp5S1nNMGOpusM=
Subject key identifier:   CF:77:44:B0:05:9C:A3:2B:9E:87:F6:46:A9:FB:45:B6:68:56:3F:DF
Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
Certificate issuer:       /CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Certificate serial:       018F874AD6FD9C75D94D23128702577FDFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
Manifest number:          041C
Signing time:             Fri 17 May 2024 16:02:59 +0000
Manifest this update:     Fri 17 May 2024 16:02:59 +0000
Manifest next update:     Sat 18 May 2024 16:02:59 +0000
Files and hashes:         1: YbcgLJIwwolFDtWmKxc2mgZZvGs.crl (hash: kZ8cjzhcsAzup4k/u4bdJOoJ53Rfj/Jt5hpP6lxlD0o=)
                          2: ogw06bC9fSA5JtwbxjqBTwB8S7M.roa (hash: vrhz7RBPhJfh55j3s/uctrpkU981dgPSyM1irPhVjqk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d6:fd:9c:75:d9:4d:23:12:87:02:57:7f:df:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b
        Validity
            Not Before: May 17 16:02:59 2024 GMT
            Not After : May 18 16:02:59 2024 GMT
        Subject: CN=cf7744b0059ca32b9e87f646a9fb45b668563fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:84:21:89:34:a1:e9:20:ae:d7:1a:0c:31:
                    f5:5e:96:f3:84:b7:b9:63:87:c8:58:c3:d2:77:ef:
                    d8:8c:c8:44:df:65:2a:ee:02:87:ba:14:8f:75:d7:
                    61:0f:60:36:cb:ac:8b:0c:f1:6c:f5:bd:ee:11:4d:
                    27:cb:1d:48:c4:06:ff:6c:b0:18:fb:9d:d2:3e:37:
                    73:cb:7a:e4:0f:4b:f2:02:39:80:b7:6b:ac:7d:10:
                    3a:72:10:24:3c:75:99:d3:ee:16:04:23:ae:67:19:
                    8d:29:0a:f8:69:7e:98:51:29:54:fa:eb:d1:59:d2:
                    51:20:e1:83:43:6c:19:67:97:09:1d:49:4a:a4:9e:
                    be:f3:9e:30:c9:33:fa:9c:70:56:18:f8:38:e9:09:
                    26:95:6f:2f:34:77:16:f9:a8:f3:fc:8f:08:66:93:
                    87:44:b4:d2:5b:e7:fa:91:4a:38:1f:76:b1:07:e8:
                    50:dd:20:a4:30:ce:56:d4:f0:55:a9:de:d4:d4:1d:
                    55:72:75:b1:89:24:c8:3d:1e:1a:9d:d0:f3:a4:6c:
                    01:16:3e:6c:3b:f3:87:1a:f5:8d:f2:b1:4a:27:45:
                    d9:1d:7c:61:c7:f0:d6:d7:ea:4e:dc:62:77:76:19:
                    e2:7d:c7:cf:bc:84:45:18:d3:5e:96:e5:47:00:44:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:77:44:B0:05:9C:A3:2B:9E:87:F6:46:A9:FB:45:B6:68:56:3F:DF
            X509v3 Authority Key Identifier:
                keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:30:c4:e4:6a:ec:3a:d9:7c:3a:48:d4:78:f5:13:18:b8:c9:
         ad:e5:93:7c:c7:c5:c5:ef:03:2a:6b:70:0d:db:b6:de:08:48:
         c8:ee:3b:ec:de:d0:46:7b:da:e9:9e:11:b4:a2:86:63:f9:c9:
         4e:5f:27:d3:08:09:84:97:39:74:b8:7e:31:3b:a9:2c:76:c2:
         a8:6b:5f:89:f5:aa:05:ac:ee:8c:fb:d2:58:b3:6b:48:84:69:
         bf:94:30:00:8e:1c:23:0e:e0:d0:1a:66:1e:f0:a9:08:53:72:
         42:1b:41:92:7a:d4:e0:77:06:fd:82:23:6c:c2:5a:9e:e1:72:
         77:e9:f9:09:82:4e:4d:93:75:5c:83:b4:16:02:74:75:f1:db:
         e4:45:9c:dd:3a:b6:36:64:95:b2:1d:df:4e:17:fc:69:89:72:
         26:c0:71:bb:bf:ab:04:39:fa:40:a8:aa:3c:bc:8a:97:62:dd:
         a1:fa:54:31:2e:7e:83:4e:6e:89:61:b0:37:07:13:2b:b1:5a:
         02:6e:d6:ba:a3:73:e8:31:42:22:46:d9:6e:95:0e:84:44:e5:
         a5:68:29:df:2b:1e:66:b1:21:79:f8:76:5d:81:d6:53:7d:40:
         b5:23:0f:b4:ac:0d:ff:2e:a5:f1:0c:21:28:fe:5e:30:f6:0b:
         87:1d:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:03 2024 by rpki-client on console-fra.rpki-client.org