Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File:                     YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier:          BKt6yoI1jb9iPpbQVuvsmRZVUoH4n9dSBVuiTTA/Oj8=
Subject key identifier:   CA:2B:86:49:CA:31:2A:6C:17:51:35:F2:93:05:29:45:0A:81:82:48
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer:       /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial:       018F87B696A78741C9BE8A46A9703F014671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number:          0386
Signing time:             Fri 17 May 2024 18:00:41 +0000
Manifest this update:     Fri 17 May 2024 18:00:41 +0000
Manifest next update:     Sat 18 May 2024 18:00:41 +0000
Files and hashes:         1: 90E-1oTk3dbxIsnj45nACUWMVUo.roa (hash: UL6Hr2SbciyU2lqvmZZqhDtA1GGNt9C3cDIhD+6opk4=)
                          2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: BeAoMnjioDDS9W5WW74hM7M8ssmr4w7A1waYm6n3BgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:96:a7:87:41:c9:be:8a:46:a9:70:3f:01:46:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
        Validity
            Not Before: May 17 18:00:41 2024 GMT
            Not After : May 18 18:00:41 2024 GMT
        Subject: CN=ca2b8649ca312a6c175135f2930529450a818248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:a3:06:17:c3:c5:d2:21:d5:66:be:36:1f:
                    9f:e6:6d:c6:d3:23:20:2d:23:da:11:46:aa:d9:ae:
                    36:25:02:0a:c4:2e:43:22:2b:4f:4c:f4:be:28:48:
                    a9:2e:70:16:56:a2:d7:d6:6c:b3:54:96:76:04:d3:
                    74:9d:5f:fb:0d:0e:c2:95:71:7b:3a:3c:4e:6c:2a:
                    66:73:5b:9e:73:ac:1f:22:df:6f:11:a5:bc:8e:09:
                    a2:b2:85:43:2c:c6:fd:61:2a:82:ab:de:54:6f:d3:
                    7b:77:ad:86:d7:ae:60:f0:b5:0e:7a:3a:1a:b9:f9:
                    b9:14:f3:78:7a:2a:f1:eb:3c:67:2b:07:59:60:14:
                    58:2b:71:95:8d:f9:b4:71:17:c6:f2:eb:eb:17:7e:
                    68:28:17:5d:3e:79:90:c9:96:a1:a6:7f:5f:8b:bc:
                    31:1a:aa:82:7c:23:b8:ac:a6:34:73:58:bd:74:d4:
                    20:22:e5:f9:60:65:73:a6:b1:23:cc:b7:cc:d7:44:
                    28:20:34:00:f6:30:a7:8c:e6:ee:72:2f:a6:7f:eb:
                    1d:51:83:4c:48:41:a0:aa:29:e3:03:d8:bf:00:a0:
                    91:66:15:d7:d0:aa:c1:01:50:03:b5:3d:70:96:d0:
                    e7:a7:83:9e:48:68:86:58:ca:e9:c1:f9:b8:06:29:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2B:86:49:CA:31:2A:6C:17:51:35:F2:93:05:29:45:0A:81:82:48
            X509v3 Authority Key Identifier:
                keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:2e:a7:a7:ae:e0:d6:27:ad:f0:17:59:86:15:4f:2a:7f:
         e5:a0:5b:b4:2a:8c:b3:84:ce:1a:d8:f9:6c:3a:c5:43:db:1d:
         76:70:8b:24:39:26:63:6f:55:1c:ff:8b:39:28:fe:ae:51:14:
         5c:3e:6d:d9:85:1d:5e:3b:40:24:4f:41:e3:ff:98:c7:4a:be:
         e2:7b:68:df:d0:b4:41:5f:20:fd:d8:bd:db:23:26:bc:9b:67:
         9b:cd:6f:db:b1:3a:21:b4:25:86:f5:43:bf:48:26:9e:1a:51:
         39:3e:ce:35:30:4f:fa:ff:b7:ad:7c:77:c1:c8:fc:d0:6c:28:
         26:ad:8b:b8:be:99:ae:ea:87:78:be:5b:64:83:cf:66:1c:13:
         84:9f:11:41:b4:36:a7:1d:a0:75:4d:7e:18:16:92:61:15:db:
         15:3b:16:3e:9c:3f:fb:c2:01:13:f8:80:17:cc:0c:ad:e0:48:
         ea:e9:bd:52:54:a4:53:93:c0:1e:1c:d2:4d:d4:bf:b9:0a:f5:
         e4:dc:09:06:04:b0:2e:9f:4c:e6:b8:56:98:22:75:d0:2b:4d:
         9e:7b:00:5b:97:2a:d4:55:12:dc:5d:db:83:99:93:b1:3b:63:
         f4:47:3b:e8:df:d2:fa:07:c0:cd:be:34:a1:b1:26:03:9e:99:
         9a:9f:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:28 2024 by rpki-client on console-ams.rpki-client.org