Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File:                     YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier:          CLFfjpArhpWExbuDgOE7T0qlWmI+HpxcAtkOP+1llk0=
Subject key identifier:   A0:8E:CA:01:EE:D7:1B:FE:B7:18:72:F9:98:18:2B:32:59:67:8A:FD
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer:       /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial:       018F874A6F2B9B19C285A61253443E650FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number:          1122
Signing time:             Fri 17 May 2024 16:02:33 +0000
Manifest this update:     Fri 17 May 2024 16:02:33 +0000
Manifest next update:     Sat 18 May 2024 16:02:33 +0000
Files and hashes:         1: 9x3_U8qx79TNaJPCp0afPKP4Hb4.roa (hash: CkrabCoWdesDOSOLYAo0hz7o6pe4BOkSgLSNmRieaVw=)
                          2: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: /5ha4+9nPxTxbKzlpahFphoIP5ZfrmWvMf2RYecDU4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:6f:2b:9b:19:c2:85:a6:12:53:44:3e:65:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
        Validity
            Not Before: May 17 16:02:33 2024 GMT
            Not After : May 18 16:02:33 2024 GMT
        Subject: CN=a08eca01eed71bfeb71872f998182b3259678afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:bb:ab:76:8a:b3:bc:f4:e3:87:3f:07:0e:
                    41:8f:70:4c:d6:79:f9:21:c0:bf:4f:e4:7f:08:61:
                    94:f0:ae:21:79:10:19:9d:37:b5:b4:c0:1f:d8:26:
                    4d:50:fb:10:e6:86:79:e6:f1:ee:9e:91:7f:ea:a5:
                    88:25:cc:3c:58:ab:a1:b9:cb:b5:08:49:c0:34:cb:
                    70:f2:d9:61:18:a3:15:15:86:e0:dc:9b:d1:da:07:
                    6a:11:fd:88:9c:d3:51:9e:3b:55:90:ea:dc:f2:1a:
                    91:c0:d0:7a:98:c5:3b:f8:e5:f7:00:5b:dd:96:33:
                    a5:43:0b:de:70:c1:59:e2:b0:c2:c8:99:da:9e:b9:
                    98:34:e3:6a:79:cc:af:59:d6:5a:89:4f:1a:24:60:
                    b6:77:a9:36:63:74:29:99:1c:99:68:7f:35:06:37:
                    af:1f:25:29:e7:52:d2:36:75:79:b1:b9:b5:be:e1:
                    ce:d1:e5:7a:c1:c5:ed:fe:4a:2a:ca:79:65:87:80:
                    6c:d2:72:28:7d:1b:66:97:03:83:eb:22:88:60:be:
                    03:4f:7f:f9:47:d8:95:d9:0d:e0:b6:b4:dc:e3:45:
                    1a:eb:e6:9c:ca:04:2a:24:64:84:bb:ea:19:71:d6:
                    93:7e:70:f2:9f:8e:63:52:ef:60:6a:4e:ee:55:d5:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8E:CA:01:EE:D7:1B:FE:B7:18:72:F9:98:18:2B:32:59:67:8A:FD
            X509v3 Authority Key Identifier:
                keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:8d:56:ba:7f:44:b7:b4:1f:d3:69:3f:d4:1b:f9:1a:00:
         b2:d7:8e:49:2d:e9:97:97:35:af:de:e2:76:8c:f1:46:b4:7d:
         47:cf:42:c9:06:8f:4c:5e:4d:e4:c5:2e:e1:56:a8:a9:d8:01:
         a4:79:d1:57:b6:ad:be:63:66:a5:d1:6c:60:96:6b:10:42:f6:
         94:19:a6:79:6f:51:6e:41:5a:9f:0a:38:bb:cb:a4:a3:09:80:
         b9:7d:88:a1:d4:28:69:52:ba:5b:06:f2:62:2e:de:f8:e7:a8:
         cf:f5:9d:a2:6b:61:4d:7d:79:94:fd:a6:3a:35:24:51:51:b9:
         6b:f2:26:72:fe:44:f5:eb:28:da:8b:9a:62:8d:35:a5:56:0c:
         f6:be:fa:0b:39:de:0b:6f:db:c8:e8:bd:02:84:b1:9c:7a:d0:
         df:6a:6d:18:1a:50:9b:eb:2b:8e:4e:a7:83:d1:67:c0:1e:b6:
         6d:94:c4:5d:6c:c7:21:d6:93:98:b4:d6:4d:18:3c:ca:70:a8:
         0f:1a:6e:f8:46:16:2f:b1:61:5b:07:0e:a0:a5:52:77:92:65:
         e5:f9:9b:b3:c4:f4:a8:dc:2b:3c:bc:35:15:f6:74:f7:22:a9:
         8f:d9:e0:04:87:af:bc:f0:dd:c9:5f:55:6d:3d:76:73:ba:72:
         af:45:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:05 2024 by rpki-client on console-fra.rpki-client.org