Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File:                     yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier:          eRQbvyPSFEynuMEJqJ9NKdJJGAj2ycMHy+W6pr0r0ok=
Subject key identifier:   36:96:E0:D2:85:D9:28:67:A0:77:F5:FA:93:8F:61:5F:04:69:1C:6C
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer:       /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial:       018F874B13448741B8F31CD2ACA90BB0D12D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number:          0C81
Signing time:             Fri 17 May 2024 16:03:15 +0000
Manifest this update:     Fri 17 May 2024 16:03:15 +0000
Manifest next update:     Sat 18 May 2024 16:03:15 +0000
Files and hashes:         1: PiIYyFf58wkPCh3lOVNYEfuB8Tg.roa (hash: 09Bk7lJURyrRrlgiw5NUmefeHzuCGTGQf3tx/Ec7fvs=)
                          2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: eNzjenIVjPiiTRtsu3v2y7h4quUoP/nPn0Q5B9dm6js=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:13:44:87:41:b8:f3:1c:d2:ac:a9:0b:b0:d1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
        Validity
            Not Before: May 17 16:03:15 2024 GMT
            Not After : May 18 16:03:15 2024 GMT
        Subject: CN=3696e0d285d92867a077f5fa938f615f04691c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:52:ac:fc:70:10:e4:4c:37:f1:b7:95:a3:78:
                    9e:be:ab:74:a6:ce:80:f8:87:52:5c:57:12:11:a6:
                    9e:d0:f5:6b:29:f0:ed:07:8a:c2:c5:1b:f8:6d:b9:
                    b2:91:8a:cb:42:62:1a:50:0c:ed:fe:15:70:87:dc:
                    c7:56:6c:12:15:a3:fe:f0:82:4c:a5:3d:c0:43:eb:
                    27:9d:f5:8a:f3:d3:5e:e4:ca:f8:6d:b9:09:61:4e:
                    f9:c0:d5:a4:15:66:d2:da:37:12:c5:c2:db:4f:1e:
                    a7:de:20:15:e5:55:fa:08:ef:1f:02:03:a2:48:e7:
                    63:9c:28:69:04:45:77:c2:d6:d9:f8:08:72:b9:54:
                    ab:83:9d:44:e2:d0:a9:1d:fa:a3:41:8f:da:f8:82:
                    2c:86:d7:ed:79:97:c9:15:6c:aa:5a:d6:33:e5:2b:
                    ef:78:5c:de:e6:49:43:4b:bb:77:d3:4a:60:39:93:
                    ea:29:d8:27:db:0a:4e:eb:2d:d9:72:6a:7f:45:a9:
                    c0:a4:0c:6d:5f:10:ef:af:67:13:ab:41:ec:cd:a7:
                    fd:66:9f:a9:39:89:ae:65:5d:49:ab:ef:b2:b9:6b:
                    87:88:c2:4e:df:6a:1a:94:18:d3:58:d1:9d:e7:0f:
                    94:47:38:cf:82:2d:44:b0:e7:6c:db:f8:f2:7a:95:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:96:E0:D2:85:D9:28:67:A0:77:F5:FA:93:8F:61:5F:04:69:1C:6C
            X509v3 Authority Key Identifier:
                keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:e9:55:df:ca:49:58:58:b5:f2:cf:0c:27:10:53:41:c7:
         eb:17:72:dc:a9:9c:92:87:9b:3f:e8:e4:8f:40:da:17:d3:5b:
         7d:dd:21:fe:dd:a0:f9:9f:cb:bd:ff:3f:b4:43:39:a8:87:11:
         c3:c0:8a:83:79:0c:78:3f:df:6d:d0:1d:dc:c9:79:64:23:aa:
         68:b0:3e:3f:60:43:10:cc:65:0c:a6:38:5a:18:5d:11:16:2b:
         cb:f8:40:fe:4a:e6:95:51:0a:d0:cd:e3:ed:5b:90:e2:f5:2a:
         7c:31:06:be:f1:77:a5:4d:be:66:27:d6:75:a3:ab:0d:9f:80:
         00:8a:b7:9d:20:34:68:16:8c:77:ae:22:13:6a:5b:bd:78:04:
         b8:fc:9b:6b:64:96:d4:ed:b5:bc:1e:23:b8:0d:a0:57:1e:74:
         b3:33:aa:1f:26:ea:17:1d:db:ca:0e:4a:bd:47:fb:85:e7:cb:
         6c:85:e7:4d:31:7d:cf:d1:f1:5a:0e:c4:91:bc:d8:d1:91:f2:
         17:21:f9:7a:0e:06:2b:92:26:ef:a3:99:aa:bb:c0:50:7c:08:
         ba:c2:80:24:af:10:9f:86:13:c4:91:fe:6e:10:8a:5f:25:19:
         44:39:73:13:23:1e:c7:ab:a4:36:49:4b:d1:78:46:1d:68:aa:
         7e:a6:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:58 2024 by rpki-client on console-ams.rpki-client.org