Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File:                     YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier:          aeih/MI42DdrpGiZpP7VzkmXAjAUufk2INJ+bmXebHY=
Subject key identifier:   B6:64:3E:08:07:36:67:27:D8:9F:4F:35:AB:81:68:18:E8:62:75:51
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer:       /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial:       018F8824142407A133A2EB7B1CB571EFBAA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number:          08CF
Signing time:             Fri 17 May 2024 20:00:16 +0000
Manifest this update:     Fri 17 May 2024 20:00:16 +0000
Manifest next update:     Sat 18 May 2024 20:00:16 +0000
Files and hashes:         1: 0uZZcmWDCbANRCKso6dcF-UTZwM.roa (hash: p8AFs4jfLc24qitJc+FO4Xczh4lCV0z5v9r25Jf8LCE=)
                          2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: 4xziHBSdZhwCzKsUtpK9ecHLKOQnJNTpJ8G74ckyPwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:14:24:07:a1:33:a2:eb:7b:1c:b5:71:ef:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
        Validity
            Not Before: May 17 20:00:16 2024 GMT
            Not After : May 18 20:00:16 2024 GMT
        Subject: CN=b6643e0807366727d89f4f35ab816818e8627551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:06:22:54:c7:71:d3:f1:c3:3e:29:bd:9a:96:
                    8c:a8:b9:1c:66:70:30:5f:d7:d7:a7:5c:da:18:ad:
                    c5:c7:15:8f:63:6a:58:37:3d:df:00:15:6d:f6:e4:
                    8e:81:39:26:bd:e5:8d:9d:eb:5d:e3:3f:21:69:21:
                    d0:a8:26:22:51:53:c0:ea:f6:61:92:51:c8:bb:ee:
                    9c:bc:c2:86:1a:19:9c:9f:31:97:ab:88:66:32:b7:
                    58:c1:88:20:8a:51:eb:a1:de:6c:03:5a:cf:1f:ad:
                    f2:a1:31:c6:66:98:82:58:0c:5a:1c:73:90:f7:23:
                    51:0a:9b:2a:1e:af:66:7e:a4:ed:a0:de:61:52:1d:
                    17:75:b7:5d:e4:78:e4:5c:49:1c:5c:e3:04:c3:11:
                    27:ac:34:ed:a5:4e:55:ee:64:58:9e:cc:19:4e:32:
                    77:f7:60:e4:05:dd:3e:ec:1f:54:2a:2f:2b:3b:53:
                    24:66:0d:75:f5:18:e9:1d:9b:4b:97:87:a0:48:8f:
                    fe:b1:fd:bf:e1:3c:4e:fa:bb:7c:a2:44:ab:8f:3e:
                    b4:e5:6b:9d:63:57:0a:60:6c:16:ea:bf:12:91:e8:
                    ad:6e:ec:c8:61:c6:b4:d4:65:79:8a:7c:ce:39:b7:
                    62:ee:e6:cf:72:64:37:f9:b5:0b:fc:b3:0c:01:8b:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:64:3E:08:07:36:67:27:D8:9F:4F:35:AB:81:68:18:E8:62:75:51
            X509v3 Authority Key Identifier:
                keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:a8:ae:b2:65:4c:b5:fe:84:69:ea:bb:30:f3:96:37:4a:
         f1:af:17:c7:49:b2:7b:19:25:ce:04:bc:d5:bb:0b:47:b2:6a:
         f8:82:47:f9:70:c2:1e:26:d2:f4:d2:b2:04:45:b8:39:76:03:
         94:b3:35:e2:13:bb:f7:2c:5a:e5:51:6c:8b:8e:c9:0a:3c:b2:
         8d:30:a9:56:5c:7b:cc:54:73:05:4f:93:6e:49:a6:5e:b7:82:
         a5:22:48:56:ea:45:43:79:7a:b4:6e:a4:47:2c:8d:53:66:59:
         8f:9a:be:1c:f5:99:9d:2c:ce:ae:11:84:de:c7:2b:be:92:c9:
         b6:3d:11:66:da:a9:ab:44:1e:5a:65:6d:59:53:3e:7e:17:00:
         d2:b7:80:4e:9e:e1:61:fb:80:79:02:b4:1b:44:58:7e:a3:08:
         b1:70:8f:e3:a2:0b:d5:6b:97:1e:d8:06:be:1e:60:a8:e8:31:
         91:dd:10:96:b5:46:54:26:23:b8:5e:27:1d:0c:36:58:1d:36:
         d2:3d:1e:85:b9:c7:6b:18:aa:87:90:5f:3c:34:01:9e:74:3a:
         c1:95:12:52:79:13:18:fe:5f:78:49:37:5b:fc:40:ab:52:5d:
         d7:63:25:1a:a5:c3:99:55:55:07:66:02:fb:2e:63:0c:69:5c:
         92:f5:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:17 2024 by rpki-client on console-ams.rpki-client.org