Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File:                     YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier:          Vwy2D7g6J8gTydq8itVzfj2m6QxcGHwo1xdd4Aek0R0=
Subject key identifier:   C8:A3:E4:F6:6F:05:41:14:8F:45:D7:FD:8A:00:E3:78:3B:41:B6:58
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       018F68646555B6708FF661958D2255595D4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number:          0563
Signing time:             Sat 11 May 2024 16:02:40 +0000
Manifest this update:     Sat 11 May 2024 16:02:40 +0000
Manifest next update:     Sun 12 May 2024 16:02:40 +0000
Files and hashes:         1: 0mQdWOcS1-uJk94c9HPjJzdthSs.roa (hash: lSM5Tntk1j1q/h/UItZ1Yb+tbKlYF2GoDTitR/6kVBs=)
                          2: F_jkUE40owlaFTYWzTdy0NPMW8s.roa (hash: Qv9RRblCjOLEIAD7xFIfeCZqfMJcoaYRW29RZmqCfCE=)
                          3: IIQZ-ySUK9XoJ2dV15IClA7FaUA.roa (hash: nGLc0ebTgm+QWcsdgsj8t+ccdTVSYH17v7BJeRLJcl0=)
                          4: O42GN3qSpAMObjTxEq_cPiUkyLc.roa (hash: dFf9JKrUmfD/DpUQ42D8thWR14x18BziQcdyzELJDxM=)
                          5: WaewYlzk27mH232DQy2xmYT8lIY.roa (hash: Wer13rCR1JpjD2sFksmt7uQcVJ3E6O/uZbl/+l1VHtc=)
                          6: Y6vQpPznG2PH5LzqcwC1OV-yd7s.roa (hash: hFC5WxrKdWMCDM10uUR+fOHz2K7qz2XWBduoW4X/ANs=)
                          7: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: 7BmipeNASt+QjTGtEsxEYKZnttOswSN7p8mOuGQSkyI=)
                          8: d62EyT1qyHeNfHbOuXjCAS5ux0I.roa (hash: 2V/byosoCOkR1XR0g1oCGpA50TLIpVe4O1lxKZLNKZM=)
                          9: gDcoTTlqDyRMf85_1jOJRJIN8-8.roa (hash: pVLo8eck/8B3sXEky2ZyPI6wBinsDWT/o8srbxoxzEY=)
                          10: k20m0m4S8jJQRFHprxTGNKZyOF4.roa (hash: Ewz1ZbBxd+4ZE+0VRsJ0LWX+nh/r8Jy8LCU84ZU+nvI=)
                          11: tE3f954vSl0Dkc7bIwL841MQEvk.roa (hash: 7cPLOrOrjCGKKCdwGGBI6tVF8oHMPSQmwC3VI5Qy/P0=)
                          12: thK4vD78f8v4gCWxj_Ei1IwyzJo.roa (hash: RvhClnjfOvWeN70cTFrBXZrHMmqGwq79TOo0pXOS1IA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:68:64:65:55:b6:70:8f:f6:61:95:8d:22:55:59:5d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: May 11 16:02:40 2024 GMT
            Not After : May 12 16:02:40 2024 GMT
        Subject: CN=c8a3e4f66f0541148f45d7fd8a00e3783b41b658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:f7:61:c2:11:eb:68:f4:72:21:71:ec:19:
                    14:6b:cd:bd:f7:78:5a:9d:c9:f0:04:91:de:e5:b9:
                    81:01:cb:a0:1b:d1:03:30:5b:6a:13:65:8c:68:ad:
                    df:22:a2:b9:5a:89:09:93:4e:ad:d6:7d:cc:c1:18:
                    a8:11:c3:ba:99:80:2f:3a:9b:c9:57:ef:f0:24:0d:
                    44:bc:ae:be:2e:b9:41:ac:66:ec:8f:b5:7e:a1:31:
                    af:07:1b:c3:e2:42:cb:df:91:44:60:94:a3:f7:a6:
                    56:e0:ea:65:79:6a:3d:1f:9e:a5:39:5e:78:35:b5:
                    5f:97:10:ff:7f:fa:02:9b:f6:1c:0d:37:be:9e:ac:
                    c6:ce:09:4e:b3:3b:a1:a3:43:0d:33:2f:b8:0e:eb:
                    b7:dd:ef:35:c8:6e:1e:77:ae:28:bc:21:51:03:1a:
                    6b:6d:08:21:08:f0:dc:a1:ce:ce:f7:dc:0e:e8:96:
                    b6:ba:87:13:5c:3d:cb:62:c7:7f:23:e8:eb:79:9a:
                    ab:b2:40:f0:0d:9a:63:4b:bb:b1:55:64:ed:b1:8d:
                    66:ff:99:61:6b:16:1a:b4:5f:3f:4a:4b:8c:94:85:
                    96:97:b2:23:42:db:49:06:7c:63:3a:d3:fe:43:39:
                    86:71:ed:22:9e:a3:60:71:df:ff:82:ba:21:7f:b3:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A3:E4:F6:6F:05:41:14:8F:45:D7:FD:8A:00:E3:78:3B:41:B6:58
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:37:cb:4e:3a:63:ce:8f:af:66:23:6e:10:c5:41:7f:ae:32:
         61:6c:ec:22:05:6b:ad:40:05:04:21:b3:25:5c:1e:4f:51:9d:
         8d:99:1b:c4:a2:3b:d4:db:56:54:83:2f:68:ee:f9:65:38:32:
         57:56:53:92:58:90:4b:85:e9:3a:7c:b6:4d:3a:ec:d8:95:52:
         3e:b1:0e:27:3b:f6:9d:2a:73:69:83:d8:99:97:47:35:19:97:
         75:e6:db:29:4a:ef:d0:dd:c8:0c:18:4a:e7:1e:17:88:4a:c8:
         69:9f:47:c3:45:02:d2:35:75:f2:81:12:ab:19:c7:7f:d3:6b:
         38:5e:ca:66:13:fc:13:3e:d2:de:be:f9:f6:af:ff:30:b1:98:
         e7:b7:ad:44:90:2c:3a:40:62:3c:1b:20:e8:43:94:6d:80:ca:
         80:be:ce:4a:df:e9:bd:9d:bd:c9:bf:57:39:95:e0:7a:33:35:
         bf:66:68:47:4b:2e:cd:df:5b:62:0a:58:e6:5a:6e:12:a2:11:
         1b:d2:77:9d:17:4a:20:05:7b:cd:b6:5f:67:b3:f7:7c:97:eb:
         a4:8e:1d:f0:c6:96:62:e0:ba:d0:36:eb:b2:9d:94:01:d2:e4:
         a9:c1:51:11:5f:3f:81:2f:14:53:8e:69:1d:38:47:5b:61:63:
         fe:21:7f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 18:52:00 2024 by rpki-client on console-fra.rpki-client.org