Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File:                     YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier:          FMBCZpNeFk1lcP+lMBSGYZUgGUV6NsXHVQ4eZ6zB/s0=
Subject key identifier:   35:36:6A:2B:C7:78:AC:48:6F:39:40:8E:8C:01:62:8B:2A:49:F2:BF
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer:       /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial:       018F87EDBB96BE52E350E4EF0802016DB852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number:          0562
Signing time:             Fri 17 May 2024 19:00:55 +0000
Manifest this update:     Fri 17 May 2024 19:00:55 +0000
Manifest next update:     Sat 18 May 2024 19:00:55 +0000
Files and hashes:         1: 1-2pE2Aa9_dOAiB_nJryWevSZKdQ.roa (hash: L/lXU2WDmECnI8OPzx/JdlN1Cn4hH1DnFCWtvWcSAxg=)
                          2: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: Skj1lUAFctcbPlj3/ukVSuiaWxIqlub78Q3A87L1lwY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:bb:96:be:52:e3:50:e4:ef:08:02:01:6d:b8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
        Validity
            Not Before: May 17 19:00:55 2024 GMT
            Not After : May 18 19:00:55 2024 GMT
        Subject: CN=35366a2bc778ac486f39408e8c01628b2a49f2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:67:5d:c9:1d:b8:ee:e3:1b:7e:ab:9d:6d:
                    8c:fa:a9:f7:d1:63:72:4c:d6:43:47:a4:5d:fc:2f:
                    e3:2e:6c:0e:f8:7d:93:65:71:d8:c3:a5:13:23:6c:
                    4c:88:94:9b:d2:8b:52:a9:c9:13:fa:6f:26:16:48:
                    3b:6f:10:8a:f9:16:48:7b:95:f9:75:41:82:d7:54:
                    f3:43:67:c9:49:70:f6:c6:fd:62:9e:ed:08:c6:de:
                    76:77:c3:a8:e5:57:93:98:b6:0f:ad:0d:1e:5b:4d:
                    52:ff:22:c9:ba:79:09:dd:29:c3:6f:19:a6:28:66:
                    4e:26:d0:aa:0b:a0:e9:28:9a:8d:be:b4:c5:71:9f:
                    e1:b0:40:47:89:8f:4e:da:66:1c:4f:05:d1:36:c5:
                    cf:b7:ab:49:0e:ed:4e:17:e9:1c:95:c6:36:87:70:
                    7d:0a:1b:a2:90:fe:48:92:73:1a:02:12:2c:56:ee:
                    55:16:b3:9e:2e:df:05:71:4f:b0:60:9e:01:d5:6c:
                    d6:8b:b7:72:e3:94:6b:82:22:38:b3:be:13:54:c1:
                    60:b9:aa:0e:bb:91:99:92:66:1b:3b:21:33:fb:77:
                    e9:e5:a1:96:44:33:9b:2f:a6:e0:ee:02:e3:4f:e1:
                    ef:b3:43:d3:36:be:d0:8e:d4:6c:9e:9a:3b:d5:95:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:6A:2B:C7:78:AC:48:6F:39:40:8E:8C:01:62:8B:2A:49:F2:BF
            X509v3 Authority Key Identifier:
                keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:78:af:33:aa:67:f8:87:7c:06:1a:32:9d:e0:ed:ba:b6:f5:
         10:e6:a2:c1:da:05:b6:1a:4b:8b:44:48:80:88:cd:41:21:d4:
         b2:eb:5b:24:17:15:c2:53:60:e4:de:ee:d9:d0:39:0f:fc:24:
         bd:18:0f:45:47:39:a4:d6:80:b6:6d:12:8b:fd:96:99:a8:dd:
         1a:26:64:92:50:a0:85:38:9c:36:6e:ce:6c:8d:a8:a9:68:3e:
         d4:64:8d:52:c5:8d:00:ae:1e:5b:cb:dd:34:b7:77:a7:27:cc:
         4f:15:7a:c5:77:d4:91:5b:ab:d3:c6:e8:d1:9e:cd:74:44:5e:
         ad:72:a2:32:79:7c:56:35:42:86:ae:76:81:c4:bd:be:ee:0e:
         fa:a3:9e:bd:0c:8c:8a:7e:e5:62:e4:83:73:c2:c0:a1:de:a1:
         73:78:45:2d:1f:81:6e:16:6a:6e:da:41:9d:25:a9:ca:93:d6:
         35:b6:e3:23:2d:13:60:48:39:48:7e:2a:60:e0:22:bb:32:b7:
         ae:34:0b:ca:1a:2e:15:78:2d:d4:52:db:06:70:9c:fe:95:82:
         39:a1:a5:74:94:76:36:38:5c:f2:e5:c8:06:ab:d4:52:9d:3f:
         ba:f3:d5:a8:9b:ab:7d:3f:9f:09:39:f4:58:1d:4f:94:0b:7b:
         b8:3c:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:08:15 2024 by rpki-client on console-ams.rpki-client.org