Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File:                     YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier:          bblkXr+Lr/AFEmuyCoFeo7frz8Y0qZ29Pd3V1FAlqMU=
Subject key identifier:   E0:C8:24:C7:AD:2A:FB:F2:C0:68:20:76:3E:BB:37:0C:7C:AD:89:AC
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer:       /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial:       018F8748BC65191BF40731FD3FDCD5CD4285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number:          070A
Signing time:             Fri 17 May 2024 16:00:41 +0000
Manifest this update:     Fri 17 May 2024 16:00:41 +0000
Manifest next update:     Sat 18 May 2024 16:00:41 +0000
Files and hashes:         1: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: 5xY37xU29d3NRuXsinO15CkCdugLBqJfS8EXBizUbPM=)
                          2: y9mgZIZmw7mMYyegRqVVO-xeN6c.roa (hash: xKeAaRilnhjxmZGTSCsr0pgEFxbJBQ80Sr6b/1Y7OAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bc:65:19:1b:f4:07:31:fd:3f:dc:d5:cd:42:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
        Validity
            Not Before: May 17 16:00:41 2024 GMT
            Not After : May 18 16:00:41 2024 GMT
        Subject: CN=e0c824c7ad2afbf2c06820763ebb370c7cad89ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:5a:cb:25:d3:14:e7:49:0c:54:d4:7f:2b:
                    c1:13:0c:e8:f9:e2:2b:7b:b1:89:68:5b:ed:d2:64:
                    06:d8:37:0c:69:19:08:00:ab:9a:96:e9:b8:b3:90:
                    2a:63:5f:f4:a7:f2:4d:44:29:1e:af:12:44:b3:54:
                    62:60:d5:f9:04:36:b0:f4:f1:20:86:14:9c:ef:cf:
                    d6:f0:83:b5:ea:d5:68:d8:2c:d3:32:c6:ad:49:37:
                    ce:23:83:6c:5e:1e:6c:a7:3f:7d:48:14:8e:6c:04:
                    b7:01:61:68:be:a1:52:c0:13:02:4e:fa:bf:2d:42:
                    eb:66:e1:cc:3a:67:1c:24:59:77:dd:fd:23:e1:49:
                    a2:83:b4:13:c0:22:d1:aa:e6:b1:21:d4:e1:ff:f0:
                    66:be:b0:5c:ea:75:b2:04:a3:ec:46:ae:0b:68:be:
                    10:dc:46:df:b5:59:51:d5:20:3e:2c:64:13:53:a9:
                    7a:66:9f:5a:2d:6c:46:f1:3d:69:c9:37:dd:c8:93:
                    4c:3d:be:3d:eb:cf:dc:e1:20:f3:6b:3e:1c:17:14:
                    86:c9:c0:64:34:64:b0:59:c0:7b:aa:4e:cd:e9:29:
                    75:58:b1:44:db:8b:86:37:13:a9:0f:ae:6f:14:62:
                    ca:38:b9:aa:00:99:59:18:a6:ba:62:bf:6b:9e:c6:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C8:24:C7:AD:2A:FB:F2:C0:68:20:76:3E:BB:37:0C:7C:AD:89:AC
            X509v3 Authority Key Identifier:
                keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:03:2d:7b:ad:a2:23:94:9d:c7:79:f9:eb:fb:fc:fb:b2:2b:
         ef:3d:ff:51:64:34:11:82:f1:3a:b7:91:e4:94:82:d1:4a:c6:
         2e:f8:21:99:6c:69:9f:ea:f8:b2:e0:6c:0e:4a:7d:2e:74:77:
         f0:35:c2:d2:1b:1f:bd:96:12:91:23:5f:28:8b:8e:25:83:86:
         c6:d7:0a:5f:7a:dd:2a:8c:e0:ff:26:f6:58:1b:04:3d:97:68:
         02:78:be:fd:65:1d:46:13:d8:84:37:f3:98:06:92:48:50:6a:
         3c:30:57:2c:b3:5a:9b:e9:1d:ee:cc:30:4e:f4:b9:97:47:8c:
         c5:00:a5:df:1d:1a:18:a8:74:4a:9c:5b:84:9c:0c:3c:f2:2f:
         42:b6:b3:f0:54:34:0e:22:08:e7:54:0c:fa:78:9d:63:26:d1:
         6c:e1:bc:7a:db:d9:00:0d:c2:b7:a2:61:f1:35:62:b4:f8:45:
         2c:d7:1c:05:aa:41:a5:79:cc:4f:39:c2:20:b2:a5:2e:30:31:
         af:f8:be:cc:96:a1:13:d0:f2:d8:6a:e1:c7:16:c7:6f:d3:7e:
         61:bf:06:80:74:64:06:61:7f:8e:a3:1f:61:38:03:16:18:7f:
         f9:6b:29:cd:63:b6:93:2d:8c:a1:1b:b1:79:d2:eb:f9:b8:25:
         c0:a2:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:42 2024 by rpki-client on console-ams.rpki-client.org