Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File:                     YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier:          Jpgm5Xw35S8gbPgj24kON87ZRv5fvNYVFDty9XWBoUE=
Subject key identifier:   3E:6B:BF:DD:90:C5:03:AD:98:E0:54:56:D2:A7:0D:1E:5B:87:4E:EF
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer:       /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial:       018F86A3C6AD3C73A4B1DD67AC88DDC2BCAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number:          0D67
Signing time:             Fri 17 May 2024 13:00:31 +0000
Manifest this update:     Fri 17 May 2024 13:00:31 +0000
Manifest next update:     Sat 18 May 2024 13:00:31 +0000
Files and hashes:         1: 6U8Nvk2WYajtMYqPYsV72FHgfWM.roa (hash: KeEkh46fNyRm+xaTyY2HcsQzZDEsR2SCv/VrEmyODIU=)
                          2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: +EfhQycjtCyh9VqOHPktFqpnFONn4T1eTqhHkc9Qo0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:c6:ad:3c:73:a4:b1:dd:67:ac:88:dd:c2:bc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
        Validity
            Not Before: May 17 13:00:31 2024 GMT
            Not After : May 18 13:00:31 2024 GMT
        Subject: CN=3e6bbfdd90c503ad98e05456d2a70d1e5b874eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:1d:db:d9:f6:d2:78:da:60:1a:55:65:71:
                    92:22:6d:5f:1d:39:1b:85:04:22:fe:ea:39:4a:1f:
                    db:80:39:61:0b:b1:ea:0d:73:66:b3:e7:1c:2e:f4:
                    f2:19:66:ad:3f:09:a3:b7:f6:b0:b5:bf:22:66:f9:
                    99:1a:a3:9b:5d:b0:c0:45:80:b8:87:52:f1:22:99:
                    c4:e8:54:cc:4a:65:a0:bf:42:f1:62:7f:49:bc:cb:
                    aa:55:e2:a5:a0:12:22:4b:7f:9f:b4:ae:df:58:8c:
                    e6:5d:5b:6d:ef:e4:31:91:63:bd:35:70:b4:88:07:
                    39:92:0c:38:6c:b6:7d:62:e5:90:55:d2:5f:95:c0:
                    4c:ed:0b:70:ca:c9:1b:78:0b:08:2f:ca:cf:b7:ce:
                    6a:72:a3:00:5b:09:7b:71:3e:92:41:6b:99:f2:60:
                    54:9d:cd:24:9e:b0:fe:d2:b0:fa:22:09:3c:15:5a:
                    b9:9e:13:f6:55:01:f1:61:8e:fd:4c:8a:5b:4e:6a:
                    f7:3f:65:8d:7b:05:3a:bd:c9:f2:9f:cd:08:33:63:
                    84:d8:89:63:92:2c:98:85:19:56:48:76:4b:12:d7:
                    c7:3a:04:30:e7:01:f2:87:37:44:52:7d:99:f9:c3:
                    3c:0a:86:69:65:bf:1e:dc:02:fd:c1:38:c5:55:fb:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6B:BF:DD:90:C5:03:AD:98:E0:54:56:D2:A7:0D:1E:5B:87:4E:EF
            X509v3 Authority Key Identifier:
                keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:60:d0:3e:8d:a2:a2:ab:11:17:ff:e0:c4:60:8d:b1:36:
         6d:6c:62:7e:fd:be:97:32:78:3e:97:5b:aa:19:84:1f:28:dd:
         25:ab:ab:71:22:fa:0c:a8:50:4f:c0:67:e4:45:ea:4b:34:37:
         e4:d2:b4:d1:6a:b6:fe:dc:41:e8:45:19:d0:ee:79:f2:f0:fd:
         ea:10:cc:7f:5b:75:15:a8:98:93:eb:b6:7d:af:f1:03:57:9a:
         48:c7:ae:16:cd:72:4c:85:ea:93:0c:aa:27:f4:bf:1f:ec:b7:
         df:62:ed:40:24:3d:5d:d8:a2:b6:fd:34:e5:56:0b:cf:c0:e1:
         3f:5e:d0:24:36:7b:23:dd:4b:bf:30:f8:4f:0c:65:66:2e:b6:
         b1:e7:3b:fa:52:97:99:4d:ce:d5:44:ee:de:77:f9:84:40:d3:
         87:82:72:48:fd:45:ee:2c:2b:91:98:f4:07:1c:7b:9a:f7:dd:
         ab:14:4b:0f:ab:5c:59:a3:45:e2:64:cc:63:17:fb:e4:cd:a5:
         df:e0:86:fd:17:5e:eb:a2:55:ca:da:92:41:2a:61:b7:97:fc:
         6a:84:89:ec:e2:48:86:5d:1e:8b:9e:81:53:fe:3c:56:06:bb:
         c5:44:bc:f4:1e:d1:af:b0:ae:7c:42:7d:45:d7:24:6a:1a:68:
         0d:f6:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:48 2024 by rpki-client on console-ams.rpki-client.org