Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File:                     y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier:          MIrAmCBi8awGM0uzzPP+F0uKVUirVKFCihU/jJX/gtk=
Subject key identifier:   C0:58:19:7A:A1:47:6D:1D:0A:32:D9:60:44:4D:89:B4:37:33:4A:8A
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer:       /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial:       018F885B5D67856C7D7291F2C32A1883FA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number:          0E92
Signing time:             Fri 17 May 2024 21:00:40 +0000
Manifest this update:     Fri 17 May 2024 21:00:40 +0000
Manifest next update:     Sat 18 May 2024 21:00:40 +0000
Files and hashes:         1: 1dRmF_rNBpFs8-PcJjc6CElUt_8.roa (hash: nDNp2FccgQS+Tyi4FS/6mB/oA1EH0NDHZ06bicbLTTg=)
                          2: rx5qQx72tRDplC-FA4HaURhRKGQ.roa (hash: v858skannHLTOOr9y25wvEk/5vu7eQ0oNGXS+BT7uGI=)
                          3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: UIXATiGULYh99WRpf07ZYKBpUcFe74bjE/EEKCagZhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:5d:67:85:6c:7d:72:91:f2:c3:2a:18:83:fa:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
        Validity
            Not Before: May 17 21:00:40 2024 GMT
            Not After : May 18 21:00:40 2024 GMT
        Subject: CN=c058197aa1476d1d0a32d960444d89b437334a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:b9:9b:98:d0:bf:1e:54:0c:f3:b3:86:62:
                    f3:7c:6d:cc:62:17:f2:fb:3b:34:f7:96:21:05:0b:
                    7a:a7:04:d7:09:70:cc:47:7b:5f:ce:a5:df:7a:af:
                    7e:0e:f0:58:8b:20:54:3e:d4:87:59:cc:0f:35:3c:
                    e1:ca:d5:11:8e:e4:c8:35:08:a5:dd:c7:6a:c6:45:
                    c5:7d:d3:2b:d7:7e:da:34:1f:97:dc:a3:fc:37:29:
                    88:5f:d5:5d:73:c6:91:69:57:a3:1f:47:9b:dd:24:
                    28:af:d0:d7:e4:ff:92:07:df:e2:d2:4c:17:45:cd:
                    c2:35:2f:3c:b9:2a:e3:6d:0b:9d:43:85:d1:6e:57:
                    9d:09:5d:9b:75:65:8a:a4:3a:24:5d:43:49:e5:33:
                    63:af:32:44:ba:d2:43:7c:6a:55:e0:29:fc:f2:cd:
                    ad:22:3f:c7:21:e0:ce:85:a2:f3:d2:42:23:f5:53:
                    6e:4f:be:c8:32:ff:22:e2:f9:68:46:5b:97:ef:f2:
                    64:ff:d9:da:de:cd:1a:42:0e:70:25:44:ed:9b:2a:
                    4e:6f:f6:d4:59:3f:d1:fd:6c:00:ce:bd:1f:28:03:
                    1e:4f:c0:9b:4c:b3:74:aa:f9:d9:44:f1:cc:71:f0:
                    f6:05:91:19:82:fd:0d:a8:57:02:70:97:b9:66:95:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:19:7A:A1:47:6D:1D:0A:32:D9:60:44:4D:89:B4:37:33:4A:8A
            X509v3 Authority Key Identifier:
                keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:72:12:0e:12:81:db:d6:93:d3:65:00:fb:0d:25:94:c0:
         fa:6c:7b:14:97:d5:42:13:ad:40:dd:be:bf:33:10:a2:4c:21:
         4d:fa:4b:4a:d7:5a:86:5a:93:43:96:86:00:1b:c3:2e:45:9d:
         f7:6d:11:2a:c4:be:3b:7a:f9:63:5a:15:bf:ab:5f:c2:66:5c:
         40:73:ef:9a:59:8d:88:e4:5a:31:8f:c8:6a:59:11:57:a3:e8:
         51:24:90:71:c2:c9:29:09:18:a1:cb:bc:31:65:a7:a8:92:58:
         35:b6:68:0f:ab:91:ee:58:c5:97:e6:bd:33:8f:69:36:38:80:
         0d:7b:69:0c:28:2c:35:36:33:41:bc:d6:1b:e2:2a:93:bb:42:
         ca:55:c0:c2:5e:6d:9b:66:39:4e:3c:60:cf:45:96:51:0f:3d:
         d9:13:77:17:fd:91:e1:a8:07:53:33:24:4e:fc:80:ae:d2:b9:
         94:96:91:b0:c5:26:7a:cf:7a:b3:e9:04:07:a3:b8:18:89:f8:
         59:d3:bf:dd:63:8b:b6:32:1c:97:8c:37:9d:b3:d4:7f:48:04:
         1f:1b:8c:91:9b:46:50:d6:89:b0:95:d4:68:e5:bd:c9:34:99:
         13:cb:44:dc:38:9d:c0:ce:7b:2c:e4:b9:63:55:b0:e6:78:6b:
         a2:88:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:55 2024 by rpki-client on console-fra.rpki-client.org