Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
File:                     Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json)
Hash identifier:          PXMTuKm90abgeEx4qQ5HeGPVijb2fvHkepUBwCso9ss=
Subject key identifier:   20:74:2B:33:03:06:0A:94:AE:2C:A5:60:3E:63:6B:6E:F9:94:3F:3B
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       018F86A3E67F147931C1655EB88B38E03C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
Manifest number:          032C
Signing time:             Fri 17 May 2024 13:00:39 +0000
Manifest this update:     Fri 17 May 2024 13:00:39 +0000
Manifest next update:     Sat 18 May 2024 13:00:39 +0000
Files and hashes:         1: 7hTrY8jKOPUBvSLyeZexZsueC6Y.roa (hash: B1k41N3DhpkZILMztEhL+/zC67TYZB7cCZSCiscBiWo=)
                          2: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: hXWURn99y2TqrOofvf4PaFPyW++QCa7RkW05WJiI3cg=)
                          3: bCH348E03rmWXRVgXl4UwQ81fK0.roa (hash: CyQP5qWaavjwSoSW6VH4WFNTKVvMYiVvSUUsbscu1Jo=)
                          4: hkQnQu3ytxvbogokQPqS6t5FD2I.roa (hash: 9/yWoT85UgOjAV0UUujPSWr6yH4fMO1vauXQnYT0Hy8=)
                          5: hmC13hUzXkVq8EunKRHIomdNkck.roa (hash: NBnb7FJtDDW11gAMdbF3Y2bbawQ25R0U+dmUuPJ2IPU=)
                          6: vrbQCqqDYrVd6-mowc1kSHtO7CQ.roa (hash: WTAFn9EJAY2m5+8TaretNvMN7pCjcUsV3MQkjl/+tU4=)
                          7: z_9gXWNFkj28zBKUiwUu2A2fFro.roa (hash: AtVvvnoSFk+CuYxGGKK/3/clfokycbjVkWR1Oqw04iY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e6:7f:14:79:31:c1:65:5e:b8:8b:38:e0:3c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: May 17 13:00:39 2024 GMT
            Not After : May 18 13:00:39 2024 GMT
        Subject: CN=20742b3303060a94ae2ca5603e636b6ef9943f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:2e:22:32:68:22:ff:cd:5a:d5:c2:49:a8:
                    b9:0c:bb:f8:70:3c:26:e7:1e:67:09:6c:d1:a2:f2:
                    55:ed:74:6b:2a:98:27:c7:b0:b1:72:43:24:cd:7f:
                    f1:13:af:f9:4b:72:83:27:2e:0b:03:dc:fd:33:66:
                    cf:04:12:04:a2:a3:a7:d6:38:64:e8:ca:11:30:c0:
                    34:42:94:00:b6:ac:f5:00:76:b5:c0:4a:f8:9f:a2:
                    32:d6:b7:dd:a8:bb:a7:fe:66:c3:28:43:a1:07:33:
                    6c:32:28:3f:0c:8d:cc:df:b9:fd:9f:d1:a6:83:ed:
                    1b:6d:42:dc:c3:27:65:54:bc:9e:bf:0e:f4:2d:1a:
                    4c:1e:2b:cb:e5:72:ed:f4:e9:a4:08:dc:c7:81:2c:
                    ff:bd:52:c8:c9:ba:10:e3:68:9e:f2:ad:70:4b:30:
                    f4:10:9e:f8:df:90:43:57:f8:41:4d:d4:7c:80:e2:
                    ba:fc:eb:34:be:24:f9:30:96:8b:f5:d9:af:ed:6b:
                    5a:56:3b:4d:5b:f4:85:a7:cb:6d:46:ed:d6:f5:af:
                    e1:e2:b1:72:4a:bf:c4:fd:98:73:49:d9:27:af:3c:
                    42:13:48:13:2d:1f:e4:12:11:fd:84:2a:18:20:ae:
                    68:e2:f3:78:9a:61:91:aa:5d:3d:2e:d7:f2:9a:a4:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:74:2B:33:03:06:0A:94:AE:2C:A5:60:3E:63:6B:6E:F9:94:3F:3B
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:d5:b2:8f:d3:2c:b1:83:14:6b:11:8f:8b:25:2c:5e:04:
         0b:16:e0:db:3f:8e:30:90:d7:f5:3c:ff:31:20:70:70:49:5a:
         33:e3:33:4a:20:70:73:f1:0f:aa:1e:a5:70:7d:6d:41:0b:cb:
         4f:ff:85:aa:8b:52:57:c7:71:bd:c1:5e:ef:96:71:38:76:7b:
         c4:6e:6e:93:04:08:a1:71:a7:f9:99:27:b9:63:98:ce:7c:ac:
         5e:bc:9d:0a:db:7a:03:66:dc:6d:d2:f2:2d:97:a9:61:13:72:
         39:c6:a3:8b:7b:16:ce:9d:d1:5e:46:0e:92:72:6e:3d:56:e6:
         d8:ac:2b:41:ab:71:60:14:5b:bc:0a:d2:93:c3:a1:a6:43:bc:
         63:65:fc:8e:ab:93:06:38:21:a5:b2:ef:c4:4a:9f:7e:88:2d:
         0b:91:9f:4f:36:5f:f5:e6:aa:65:0d:35:87:1d:06:c1:f5:bf:
         67:1c:4f:d9:16:a3:ca:27:6f:7b:81:4b:d4:7d:00:bd:6d:ec:
         58:96:f5:ba:9e:54:12:d1:58:a0:c8:2f:bd:b6:27:44:82:12:
         76:64:5c:1a:97:6d:6a:d2:a6:16:90:af:f9:e2:e4:b1:1c:61:
         49:a5:df:53:e7:74:71:df:70:08:d3:a8:56:56:12:c4:9c:2c:
         00:98:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:24:08 2024 by rpki-client on console-fra.rpki-client.org