Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File:                     s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier:          Zd6zQP3jQVgCIKKfeB1sSRUSIB0j8jJHEpKQwGwYXIg=
Subject key identifier:   64:69:E2:45:C8:EF:7C:AA:A6:06:2E:5A:22:83:15:5F:25:11:3F:A4
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer:       /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial:       018F97296EA050FBEC4494B672634674EB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number:          045F
Signing time:             Mon 20 May 2024 18:00:25 +0000
Manifest this update:     Mon 20 May 2024 18:00:25 +0000
Manifest next update:     Tue 21 May 2024 18:00:25 +0000
Files and hashes:         1: Y34UvuzGHVn74JlMjR9mij0J_ZI.roa (hash: Hj/FjB07FtGoGCvdQBlvGTW1jCsfWBGe3HmnzW7s7VU=)
                          2: h2dLY13-umH-t1DUwP1_o-Th3Xc.roa (hash: jgV5fAYcJ/+JV/6/7jLxhEk8NWfHM9uyKvOrC7kjgLA=)
                          3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: HYB4fPTksXvMZRMnU2jrJ7h/4tOV2bMCu6yRQe7wWqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:6e:a0:50:fb:ec:44:94:b6:72:63:46:74:eb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
        Validity
            Not Before: May 20 18:00:25 2024 GMT
            Not After : May 21 18:00:25 2024 GMT
        Subject: CN=6469e245c8ef7caaa6062e5a2283155f25113fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:ad:30:8e:f1:da:b2:de:17:bc:1c:05:a3:
                    c7:ea:f4:c7:75:2f:7b:31:84:14:4a:1d:32:83:a4:
                    8d:42:b0:90:13:cf:c4:e3:46:bb:9c:e2:bf:4c:c8:
                    11:ca:2b:7e:87:95:a4:49:c0:6d:89:d3:2a:a7:84:
                    c3:94:21:34:8d:1a:d0:cb:f5:4d:df:24:7f:3e:21:
                    c6:47:69:0d:39:57:2d:f0:a7:6f:cd:cf:85:fc:1b:
                    de:3f:c3:d9:a0:cb:8d:97:1b:0f:41:c7:c6:f6:97:
                    be:ec:6d:51:f9:4b:94:c1:f5:4a:30:d7:dc:7c:f4:
                    c8:55:6e:d2:2b:89:04:cf:8c:3d:d1:31:19:a3:a4:
                    17:93:e1:c1:3d:56:58:af:9b:aa:7a:da:8f:31:59:
                    88:b5:cc:23:15:82:b8:ed:09:44:73:68:1a:ad:83:
                    b4:36:af:7a:81:ec:ac:51:99:7e:74:4c:24:f5:07:
                    28:76:2e:96:81:39:13:c3:af:84:fe:f5:2f:9c:d3:
                    fb:be:45:81:2d:71:c5:6e:d7:74:f9:67:97:89:6a:
                    7d:80:c8:52:30:66:72:2a:17:f9:b9:16:56:7f:2d:
                    58:52:b9:17:2b:3e:15:eb:c5:2a:d6:14:06:63:59:
                    05:20:fc:8e:9c:75:3b:8f:53:c7:39:9d:b1:98:11:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:E2:45:C8:EF:7C:AA:A6:06:2E:5A:22:83:15:5F:25:11:3F:A4
            X509v3 Authority Key Identifier:
                keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:c5:04:4f:a4:ba:ed:3a:08:1f:45:f9:06:81:cd:c3:9b:
         c8:52:90:97:58:7f:e4:40:c4:c3:a6:6d:ee:f3:38:85:2e:c5:
         e1:d9:e4:86:18:b5:03:ab:c8:5c:80:af:ff:44:7c:8f:31:a3:
         13:44:a6:17:66:95:d6:5b:62:94:83:90:ba:c8:d2:87:96:dc:
         4a:1f:57:82:0d:20:af:63:db:9c:7d:53:f7:ea:dd:39:91:2e:
         b6:12:65:a1:36:13:f7:86:4c:4b:0b:db:96:15:fa:98:03:10:
         f3:3b:be:56:88:6b:a9:5a:57:f4:70:14:b0:27:a6:00:33:0a:
         ab:5b:32:24:ff:3c:e2:a4:9c:49:2e:f1:c8:fd:41:12:c5:e1:
         a7:61:a9:00:25:aa:3f:d0:98:ba:bd:e0:20:38:0c:ac:f5:ef:
         ab:12:c7:26:62:b7:f2:d3:e5:56:38:5d:ee:c0:a4:e3:f0:5c:
         d5:03:54:99:7c:a6:d1:14:4f:be:5a:58:96:98:c4:fb:b1:2e:
         fa:62:5b:04:e6:4b:ea:61:d6:e2:b3:d8:70:97:17:3f:46:bb:
         61:fd:07:39:ac:e1:a7:a0:84:e5:47:0c:db:5c:34:92:b4:64:
         50:1c:d7:de:4e:0b:b1:eb:04:d5:3c:eb:12:5b:ed:31:45:16:
         b0:4c:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:07:09 2024 by rpki-client on console-fra.rpki-client.org