Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File:                     yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier:          Fys6xwdNK/qrm8k0AsgV8esEiKXjM1wIDhO49NQ4Zso=
Subject key identifier:   AB:61:77:F2:25:C2:3E:4E:90:5B:07:73:42:99:61:33:1D:91:66:77
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer:       /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial:       018F86A4091948EBD9BE97F8A8F7A569C102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number:          059A
Signing time:             Fri 17 May 2024 13:00:48 +0000
Manifest this update:     Fri 17 May 2024 13:00:48 +0000
Manifest next update:     Sat 18 May 2024 13:00:48 +0000
Files and hashes:         1: sg4Dd2EGiQo5aaFf1IoxM4S3wWs.roa (hash: 661IlzTtFdknNrykJ/kjVnQsFr/7ujaDfgvH33xo6ss=)
                          2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: c+pJX70eSpBMxV6x0bvHIYAPn3eOs9JLzIOL8XVeto0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:09:19:48:eb:d9:be:97:f8:a8:f7:a5:69:c1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
        Validity
            Not Before: May 17 13:00:48 2024 GMT
            Not After : May 18 13:00:48 2024 GMT
        Subject: CN=ab6177f225c23e4e905b0773429961331d916677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:fa:ec:63:d6:35:55:1c:f7:7b:2e:e4:a0:
                    aa:b2:7c:c4:56:85:71:fc:b0:ad:a7:97:7c:11:46:
                    33:34:13:4b:99:7b:9a:1a:71:7f:18:ce:be:43:92:
                    ef:2c:79:95:91:f3:b8:fb:28:37:de:ea:23:9e:e3:
                    16:40:81:8a:29:e1:b1:ab:58:d3:e1:e2:cc:f5:99:
                    89:76:ba:3b:af:86:26:78:bb:fe:1d:ba:28:9a:bf:
                    18:ae:b5:0f:29:e3:1c:77:6a:b1:3a:85:43:6d:0a:
                    0f:a8:d3:ae:a0:ee:41:c2:ea:d3:69:8d:a2:4b:dc:
                    69:9a:60:67:2a:d9:55:06:f2:63:c6:c9:13:93:0c:
                    28:33:d1:d1:45:fb:6f:10:b4:84:2a:e9:37:34:cd:
                    3f:98:69:7a:01:b5:d1:d8:24:9d:b7:c3:2c:2a:c0:
                    cb:7c:ea:fd:05:63:fc:f2:28:e4:ca:35:54:1d:04:
                    9a:7c:8c:e7:58:3f:36:e6:62:7c:3d:0e:aa:20:e3:
                    10:4d:bb:ff:44:53:56:62:07:f9:48:7b:cf:85:98:
                    89:00:9a:bb:3c:cf:dd:3d:1c:42:e1:ae:0a:e9:1f:
                    e5:e8:9b:cd:d0:7b:d9:b3:da:c2:5f:22:a7:9b:87:
                    f9:4c:34:4d:20:ac:69:14:12:5a:08:96:50:e4:92:
                    1b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:77:F2:25:C2:3E:4E:90:5B:07:73:42:99:61:33:1D:91:66:77
            X509v3 Authority Key Identifier:
                keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:38:27:07:3a:4c:72:63:02:58:f0:f8:78:fa:7e:c0:87:
         15:b0:07:c3:25:21:68:f5:c2:0d:96:03:e7:75:0f:9f:d4:66:
         27:2b:12:2e:7f:b7:90:22:2d:5c:5a:83:13:99:ce:f6:9e:25:
         79:3b:f1:b2:1c:21:2e:69:1f:75:6d:37:88:0d:de:5f:69:6a:
         67:a9:cf:8d:46:79:ba:a0:9f:18:69:45:70:5d:4f:ad:1e:59:
         67:97:94:91:da:15:4f:ff:2e:54:52:e0:d3:72:75:e2:df:66:
         8a:cb:71:e2:11:a3:b9:d0:ba:5b:a5:75:e6:55:6c:f8:d8:f1:
         d1:00:fc:26:91:d2:db:b7:59:4c:55:54:a1:22:a9:8d:6e:33:
         33:d9:48:f9:fa:c2:b1:a6:8e:53:80:ae:72:fd:5e:38:83:cf:
         2f:8a:12:6e:49:2d:7e:82:c2:8e:af:98:64:e6:46:05:a9:4a:
         67:16:38:6c:dc:61:36:0e:45:83:69:e9:b8:bb:b4:47:16:25:
         b4:5d:eb:72:f7:03:7a:a1:79:32:84:1d:29:9f:47:64:c6:25:
         25:2e:14:8b:cf:a0:80:81:3e:a2:e5:ba:df:b4:a7:c6:96:4e:
         ac:96:67:e3:eb:19:a8:86:87:67:3d:59:ee:d7:ac:e4:9c:35:
         6b:a5:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:05 2024 by rpki-client on console-fra.rpki-client.org