Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File:                     YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier:          VHilx46OU4QKj1nyug632nYhcfa55RQGMSNI4WB4oFI=
Subject key identifier:   84:34:BA:62:11:51:86:14:30:CC:DE:3C:C4:43:C0:82:6D:D2:FF:4B
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer:       /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial:       018F96BE00A40ED66145ECC87A15871DA4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number:          0861
Signing time:             Mon 20 May 2024 16:03:05 +0000
Manifest this update:     Mon 20 May 2024 16:03:05 +0000
Manifest next update:     Tue 21 May 2024 16:03:05 +0000
Files and hashes:         1: ORxAK0thi8CGuPqMAqmrKnknvVE.roa (hash: oPnaCktvg/RaeRe7IjIAtXRp5ZtvhaEJRIJO2WJ038s=)
                          2: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: aG0GR/ypgfOq4RVn0XWZ46b0r2ClBqTKqSR00awWVUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:be:00:a4:0e:d6:61:45:ec:c8:7a:15:87:1d:a4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
        Validity
            Not Before: May 20 16:03:05 2024 GMT
            Not After : May 21 16:03:05 2024 GMT
        Subject: CN=8434ba621151861430ccde3cc443c0826dd2ff4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:8d:d1:b6:04:23:2f:00:44:d3:a1:d7:0a:
                    12:cf:9c:5c:d4:af:fa:4b:16:ea:4d:b2:2a:54:a6:
                    3c:ab:90:14:60:92:03:03:df:dc:5d:aa:19:fb:0f:
                    91:4e:b7:76:1f:c2:d7:30:bc:ee:55:f0:25:e2:05:
                    f1:64:a3:eb:23:f1:e2:47:93:49:8d:01:10:0d:0e:
                    17:b7:3b:a0:e3:37:01:ec:76:3a:de:77:1b:ea:c7:
                    96:8e:43:76:7d:d9:1c:a1:5e:c8:95:2c:a0:72:e9:
                    4d:ce:f6:03:46:85:d2:9d:91:6a:37:28:15:fc:6e:
                    8a:3a:9c:44:d7:7d:56:b2:c4:e9:bd:bc:a3:a9:06:
                    cf:e7:b9:2c:89:d4:07:b7:22:ea:f8:98:95:88:9c:
                    df:fc:69:9b:ae:fb:d9:c5:8e:6d:8d:4b:03:51:c0:
                    30:c2:c1:f6:4c:3a:9e:eb:27:ef:d5:ea:df:85:91:
                    d8:c9:22:2a:6f:1b:cb:49:e1:c6:3b:4f:52:b2:a1:
                    1e:a8:ae:1d:ce:60:50:a8:35:85:42:cf:c5:22:33:
                    a6:f7:30:d9:88:a2:1c:4b:d4:0c:a6:bb:ee:30:06:
                    d2:9a:5a:90:3c:ec:d9:68:8b:df:45:e9:69:6f:d7:
                    ff:c3:b2:ec:4f:fc:67:18:2f:89:2e:43:3b:7b:de:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:BA:62:11:51:86:14:30:CC:DE:3C:C4:43:C0:82:6D:D2:FF:4B
            X509v3 Authority Key Identifier:
                keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6f:a8:de:6d:bf:60:11:b5:3e:f9:db:23:05:18:8e:a2:27:
         4e:16:f3:e5:f7:57:21:57:76:22:c0:38:22:cb:1d:62:27:0e:
         11:10:8f:2b:e6:f5:8e:e0:dc:1b:3a:43:71:1a:8a:b0:cd:e0:
         41:9e:36:56:c1:cc:b5:95:eb:15:22:5d:15:44:42:8d:9a:af:
         e8:e8:38:13:e5:c7:ec:b2:5a:8b:1a:e1:1e:f6:c1:1e:9f:55:
         59:bf:f1:a9:c1:2d:85:2e:74:01:10:ad:b5:af:20:5b:2c:0b:
         9d:d0:9a:c5:10:2d:3e:91:f7:2d:94:fd:d7:31:f7:19:09:11:
         20:32:5f:bf:21:6b:37:dd:f4:43:c1:75:4d:f6:90:21:95:f6:
         48:97:a8:a6:35:03:dc:12:b9:13:64:a9:c1:4b:11:56:3d:4f:
         d9:e8:22:fc:5f:cf:ff:2f:45:0e:a0:bb:88:81:7c:64:fe:34:
         35:89:85:aa:0e:30:e6:f7:3b:bb:f2:1a:e9:7d:a5:fa:35:9a:
         8f:ae:e2:43:3c:b3:b1:94:77:55:a7:22:70:28:37:6d:c7:e7:
         b9:b7:42:36:66:de:db:cf:ce:18:7d:36:6b:5b:68:02:d8:97:
         71:c9:3c:12:c9:c4:83:4d:0a:e6:14:18:71:18:4d:23:9e:de:
         bc:8e:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 23:52:56 2024 by rpki-client on console-ams.rpki-client.org