Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File:                     yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier:          UIzMD/56npR6R6VwD36nvvUo6lqDX5rnEoyJOsC0tB4=
Subject key identifier:   3E:BE:08:6D:BC:FE:64:48:1B:90:F7:4C:B7:47:C7:50:DB:D7:37:8B
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer:       /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial:       018F87491BF30A27DD2852FD43907A888418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number:          0BBE
Signing time:             Fri 17 May 2024 16:01:06 +0000
Manifest this update:     Fri 17 May 2024 16:01:06 +0000
Manifest next update:     Sat 18 May 2024 16:01:06 +0000
Files and hashes:         1: IUV5-kGGlh5DxjRjhIOAS4M_qNs.roa (hash: bU0MccGsaA4o+ckpQPfrtuXVSEfuCEHt1pgy583SMaM=)
                          2: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: 7LQJhWKo4XZ4tgLLRKibvz4fI/v6WaZq2RXvLisiKaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:1b:f3:0a:27:dd:28:52:fd:43:90:7a:88:84:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
        Validity
            Not Before: May 17 16:01:06 2024 GMT
            Not After : May 18 16:01:06 2024 GMT
        Subject: CN=3ebe086dbcfe64481b90f74cb747c750dbd7378b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:37:39:8c:c8:f2:29:a7:32:9f:55:04:1b:
                    a1:3d:33:af:00:e2:9c:20:dd:c7:e7:43:38:a7:37:
                    81:80:69:78:85:c6:54:f1:6b:ef:b6:31:11:95:15:
                    4c:d5:75:6b:f3:50:ab:ef:11:31:25:02:39:33:c4:
                    18:23:b9:94:34:64:a3:eb:ee:9f:ec:6b:33:70:df:
                    83:c0:e5:59:b9:12:cc:82:af:8a:c1:3c:cc:fd:cf:
                    ae:7d:d9:19:20:eb:b7:02:b0:f4:c4:99:13:37:27:
                    b5:d9:68:0a:4d:24:45:6c:43:8e:9c:39:bc:e0:36:
                    ad:ac:19:b3:85:2c:5a:82:3e:b9:1f:a2:f0:f2:54:
                    da:1e:f3:30:ac:b0:2e:2b:53:db:19:1a:37:99:94:
                    39:ff:d8:55:29:74:15:38:cb:ed:df:ef:b4:a7:57:
                    11:06:14:34:9c:7e:01:85:40:bf:1e:29:83:80:87:
                    8e:72:82:18:76:b9:6f:3f:56:6e:49:67:8c:fe:c1:
                    f6:c3:f4:34:5e:df:53:ea:e2:46:c0:a4:38:6c:aa:
                    ad:87:48:db:92:76:84:a0:ad:9d:06:32:21:0e:37:
                    c5:4c:3b:a7:76:03:ea:27:16:71:e2:8b:b7:bc:44:
                    99:ef:b6:4c:99:d8:e8:47:a0:96:1d:9c:69:eb:78:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:08:6D:BC:FE:64:48:1B:90:F7:4C:B7:47:C7:50:DB:D7:37:8B
            X509v3 Authority Key Identifier:
                keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:49:55:5a:48:b8:a7:22:16:34:d3:9f:75:49:6c:09:cb:
         5f:65:62:30:7f:65:89:ae:70:a2:3e:29:74:b9:af:17:b7:ae:
         0a:7d:a7:21:18:e0:e9:46:03:f3:3b:5d:dd:6f:8a:52:09:01:
         b5:48:3a:61:72:42:4e:6c:d6:bb:ff:e2:5a:f0:f7:82:68:2c:
         61:18:c9:fa:39:48:94:02:0d:92:63:8a:b4:39:7a:41:5d:e1:
         11:c6:ee:0d:3e:c9:44:0b:26:1d:de:3e:f8:e3:bf:03:dc:9b:
         50:04:97:54:da:81:38:03:e8:f9:bf:a8:34:5f:bb:34:93:ff:
         9e:8a:44:b0:49:d0:55:b8:bb:ed:a7:fc:14:97:38:8b:02:b7:
         6f:e6:8e:b1:d9:ea:5c:35:4f:1d:e2:39:34:52:89:a0:ad:a9:
         a8:f0:a9:82:d7:78:84:57:9e:fb:de:74:20:2f:ec:6f:4c:df:
         d3:5a:34:01:98:a4:3e:c5:48:2c:94:25:58:2f:42:47:67:90:
         f7:14:66:a4:92:0f:3b:47:57:9a:cb:f1:3d:22:0f:5d:0a:0a:
         bd:6a:d9:30:22:2d:b3:e9:22:3f:ba:04:e3:96:21:0e:36:3d:
         7b:80:aa:3d:ec:05:e3:12:45:34:c5:6f:15:81:25:7d:28:cf:
         28:32:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:55:48 2024 by rpki-client on console-ams.rpki-client.org