Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
File:                     YnswW6G6vvS_7GhYHkA51BtfcfI.mft (raw, json)
Hash identifier:          N4tWASuzsPvXLFOHNP5IuDKNvqdG30Swz7NhE0kIwcU=
Subject key identifier:   34:27:38:A5:AF:2C:FB:12:62:80:11:74:0B:CD:FD:BF:43:8A:4F:36
Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Certificate issuer:       /CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Certificate serial:       018F87485D99784B670F9940A806DDC5D7AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
Manifest number:          088A
Signing time:             Fri 17 May 2024 16:00:17 +0000
Manifest this update:     Fri 17 May 2024 16:00:17 +0000
Manifest next update:     Sat 18 May 2024 16:00:17 +0000
Files and hashes:         1: BvywEoccrJ60jje5eBOAjf8Tvx4.roa (hash: yDGjpZriJffKRoKb1THMV0HS0cOk1cu91BBIIbAdZdc=)
                          2: YnswW6G6vvS_7GhYHkA51BtfcfI.crl (hash: yiMchp2RwJLHNTrX/pj7xMg29J8Q0C0k8bFLxuRlaVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:5d:99:78:4b:67:0f:99:40:a8:06:dd:c5:d7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
        Validity
            Not Before: May 17 16:00:17 2024 GMT
            Not After : May 18 16:00:17 2024 GMT
        Subject: CN=342738a5af2cfb12628011740bcdfdbf438a4f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:a5:ce:30:0b:3e:35:58:99:d3:aa:3d:39:
                    25:e3:f8:99:2d:3b:c2:ba:f4:3c:3f:07:60:d3:b2:
                    8f:a7:56:70:8b:dc:81:88:d4:98:13:9b:a9:7b:0a:
                    5b:80:0b:ea:2b:5f:05:52:d3:74:0e:7f:10:b0:34:
                    53:82:17:18:9a:b2:fb:ed:f0:a9:a6:f8:ff:b8:34:
                    d4:f1:e3:cd:43:cf:f1:26:47:52:1b:4e:10:a8:15:
                    ac:a0:fa:bc:33:4f:90:44:a5:de:43:d3:ec:20:47:
                    f7:6e:6a:7d:06:3a:59:58:5a:bd:dd:f9:68:a5:2e:
                    85:bf:8a:c7:6d:d9:5f:bf:89:91:09:c8:d9:c5:3d:
                    13:7c:15:69:92:0d:da:99:d2:1b:14:68:a8:e0:dd:
                    c9:95:99:e3:06:25:de:a7:82:1b:2b:51:e4:c1:93:
                    91:97:8c:2e:87:18:09:08:7f:54:63:5c:18:8a:1b:
                    c8:6d:fb:eb:2a:8b:d4:09:92:62:03:33:9e:82:da:
                    86:f0:39:7e:a8:5d:2f:8d:d4:a0:ce:17:85:22:94:
                    94:68:e1:a2:46:68:c4:b4:c9:f3:22:8d:4b:02:94:
                    cf:ff:01:ee:41:b1:6c:ec:79:33:3d:3a:88:ee:37:
                    cd:6a:1c:54:8e:2c:3c:15:cf:b6:61:e7:b8:4d:1a:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:38:A5:AF:2C:FB:12:62:80:11:74:0B:CD:FD:BF:43:8A:4F:36
            X509v3 Authority Key Identifier:
                keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:3c:2b:38:6f:75:8e:e0:d3:03:85:e2:58:e4:c7:1f:d6:
         cc:7d:5f:42:c4:70:3c:a0:ec:46:b2:c6:82:c8:b8:d3:da:b6:
         02:a6:5a:0b:0d:f8:76:b7:55:fd:1a:1b:3c:2a:0e:fd:1a:b0:
         80:1d:5d:d7:3f:85:aa:b3:41:74:a7:d6:b0:a5:39:b5:e9:db:
         22:fb:b3:d9:52:79:16:1c:8e:b4:2d:75:cd:de:2a:fc:3f:be:
         2a:8c:a5:c2:65:20:11:3e:da:3b:8f:19:88:84:4f:64:a3:23:
         75:ee:7d:5c:9c:80:37:31:9c:97:cd:c8:cb:05:48:9c:17:a4:
         1a:e8:43:7a:a2:cb:26:89:9e:41:38:67:9f:da:39:ab:6e:6c:
         a5:b5:bd:20:81:a3:b0:35:eb:51:ff:4f:8c:f5:bc:39:df:90:
         cf:35:11:d2:7d:46:0b:57:63:42:f1:14:30:d8:a9:0d:9e:2d:
         20:3c:be:a3:a6:ca:69:eb:86:3c:98:12:a6:bc:6d:98:82:24:
         de:1e:29:bb:b8:14:4b:1f:ac:eb:37:49:9b:46:f3:ba:80:09:
         09:4c:a9:10:db:98:a2:e6:b7:54:e2:35:69:a2:14:d6:8b:d9:
         46:b3:20:dc:31:71:69:25:36:50:a6:3b:d4:af:e1:be:be:00:
         a3:b0:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:17 2024 by rpki-client on console-fra.rpki-client.org