Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File:                     yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier:          qIN35PRJHj786JDnqqjMC97LSMVGhTp3fgbZjHvHLOw=
Subject key identifier:   01:51:26:61:9A:13:2A:D8:18:61:AB:8F:99:CB:0D:37:42:92:80:48
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer:       /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial:       018F874AD25C455885FA0A2566FD9276657A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number:          01C8
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: 3TI8QNIVOC1peJNzKtg_qp8ganc.roa (hash: 3BxNZc5F7uGt7N1EJxeuatW9D9yVGpujjmyC+idntb4=)
                          2: y1HEhbSslgw7lcwLwCrVYusjtP8.roa (hash: 9+QzUqzlMREZLVoxt0NdknNmC6MSkSEuuhm5eKNc3xA=)
                          3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: GgGykBRqnkJQ30FPAO2WFmG3hT98SSnnVKid/M+o5r4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d2:5c:45:58:85:fa:0a:25:66:fd:92:76:65:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=015126619a132ad81861ab8f99cb0d3742928048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:ff:14:b8:f4:46:ce:30:f9:6c:cb:be:ec:
                    4c:fe:ca:68:41:53:a9:6d:d9:33:28:fe:a1:09:b5:
                    09:09:14:7e:09:2a:d4:58:6d:c8:d8:31:99:c1:25:
                    1f:04:e2:37:b9:cd:04:78:02:1c:49:6b:6d:ad:4e:
                    cf:c1:b0:ea:bc:b3:f3:e5:ae:17:4d:bb:37:0c:33:
                    73:21:8b:2f:9a:e1:bb:29:e1:15:c9:c2:d6:ab:04:
                    17:5b:15:0e:b4:64:8f:e4:53:1b:89:a4:6c:39:03:
                    ba:76:09:21:94:d5:31:62:17:5a:98:d9:49:2b:ef:
                    9c:93:57:44:03:39:03:ff:f4:3e:a6:57:c5:31:c9:
                    13:0f:14:35:23:db:e1:b2:43:bd:36:89:63:92:a0:
                    c7:c4:c6:a9:45:3c:1f:3b:f2:db:7a:fb:8c:45:87:
                    10:a2:ad:fe:f4:aa:4b:14:b3:1e:d9:37:cb:f5:0b:
                    20:7a:5e:30:68:8e:8c:51:21:11:24:f6:f9:96:2a:
                    33:7b:d4:ac:b2:15:25:85:78:d0:2c:15:6c:0a:9a:
                    d4:e9:86:cc:19:db:06:ff:d1:47:cc:5b:e4:aa:9f:
                    df:c6:c3:53:cf:30:d7:c2:d1:f5:29:7a:8b:11:b5:
                    1b:b5:bf:3f:d6:3e:41:b0:5f:64:17:e1:e3:3c:1b:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:51:26:61:9A:13:2A:D8:18:61:AB:8F:99:CB:0D:37:42:92:80:48
            X509v3 Authority Key Identifier:
                keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:00:c0:c2:78:71:6d:9a:64:7a:33:0b:d2:2e:24:8d:6f:
         3a:bd:47:2f:a4:61:af:a8:cd:53:3c:cd:21:49:ec:03:84:21:
         2f:af:d6:ff:b6:d1:fc:63:5d:07:26:2e:0b:c9:5d:8d:94:72:
         c8:cc:c9:5d:00:42:37:3a:d0:75:3c:d6:d4:a3:bd:b8:67:c7:
         4c:f8:ac:8d:84:0b:66:06:6c:b5:d9:bc:34:d7:7c:83:8d:4e:
         06:b0:df:29:15:76:b6:18:f4:7a:46:fb:63:f4:d7:42:06:52:
         ac:ed:79:e4:53:d4:3d:86:96:6c:c6:83:16:c9:88:0e:d4:13:
         59:3b:77:6c:3b:84:1a:66:5b:26:96:4c:37:fd:c7:17:68:0e:
         dd:90:f3:3b:16:8f:97:c4:4e:6a:99:bc:7c:d2:c4:68:0c:e1:
         f1:9f:c6:cb:a7:44:29:1c:3a:cb:c9:88:6c:c7:cd:8b:28:f8:
         45:f9:fb:f1:01:5e:08:1c:28:54:ec:dc:5b:d4:6d:ca:7c:3a:
         06:bb:a8:15:cc:d1:8a:fa:f9:27:79:1a:0f:52:b2:27:2f:5e:
         17:32:32:08:0f:dd:19:07:56:ab:ec:e4:cd:04:79:5a:08:7e:
         61:80:4a:53:0f:24:55:a9:32:43:4b:7c:ff:0b:84:81:b6:23:
         15:ec:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:38 2024 by rpki-client on console-fra.rpki-client.org