Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File:                     _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier:          yuQlK84zpD19t92PI/Ur0RqbyGmTNSvU7JbvCJ1uDWk=
Subject key identifier:   01:4B:A6:27:1B:6E:86:1F:C4:A1:C6:61:EF:45:C0:CD:85:D2:34:0B
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer:       /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial:       018F87ED391ECB01C8A79812C8CB5F25D690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number:          05B0
Signing time:             Fri 17 May 2024 19:00:21 +0000
Manifest this update:     Fri 17 May 2024 19:00:21 +0000
Manifest next update:     Sat 18 May 2024 19:00:21 +0000
Files and hashes:         1: PVZ09klvErDRn9wn1k_qVB3Q53g.roa (hash: 8mhrg4u9cP77UnDzGIAIXklqqXlZiw1+Ek93xSp9Euo=)
                          2: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: liV6TDG372qNpy/Y5W+FeOAdb5WqVyA0jf7VkbvXG+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:39:1e:cb:01:c8:a7:98:12:c8:cb:5f:25:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
        Validity
            Not Before: May 17 19:00:21 2024 GMT
            Not After : May 18 19:00:21 2024 GMT
        Subject: CN=014ba6271b6e861fc4a1c661ef45c0cd85d2340b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:b1:ce:59:0c:b1:10:5f:c6:06:d0:88:b6:
                    b3:ea:0a:7f:0c:d0:1b:9c:81:c1:ec:56:b3:5b:41:
                    6f:75:c4:34:38:7e:ba:d3:32:b5:9f:77:4f:19:e9:
                    ee:50:6b:9b:22:95:e2:3f:78:47:4b:90:23:88:be:
                    c4:ff:ba:0d:40:17:e0:b6:b4:a2:ee:a6:e1:37:a5:
                    0d:c3:db:91:ea:97:3e:05:bf:bc:56:fa:31:6a:d5:
                    42:4c:19:49:d7:df:73:07:a4:68:69:ae:3e:ee:3d:
                    96:e7:57:ec:30:ba:dd:1c:10:ce:ce:5f:b2:47:47:
                    85:eb:5c:1d:8a:ef:29:18:a0:8d:6a:a0:e6:eb:2c:
                    19:be:e7:29:a0:28:9b:6e:d5:b8:34:cb:91:39:05:
                    db:06:07:bb:0b:eb:16:f6:f0:c7:c6:10:20:80:45:
                    5d:98:45:a1:19:16:2d:d1:55:5c:69:df:ea:7a:27:
                    8e:ca:09:a7:ec:04:1d:84:fa:c4:ca:80:02:50:49:
                    59:8e:3d:5c:23:52:0d:54:04:25:f7:3d:b2:62:d8:
                    4c:cb:b7:c9:2b:4b:35:8a:53:8c:55:a6:fe:e9:24:
                    95:91:c0:ac:43:22:4f:9a:a5:dc:8c:dc:31:53:02:
                    c2:cf:07:96:4d:3f:b6:d1:3d:63:bd:ae:04:78:d3:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:A6:27:1B:6E:86:1F:C4:A1:C6:61:EF:45:C0:CD:85:D2:34:0B
            X509v3 Authority Key Identifier:
                keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:67:68:29:d2:b0:0e:b6:98:e8:f9:1d:88:e8:12:af:59:ee:
         d9:92:ad:a3:14:be:77:c4:7d:25:21:82:b3:fd:60:17:88:1c:
         e3:87:4e:00:8b:f1:36:51:d7:79:2a:cd:5e:88:83:9b:20:56:
         b8:d1:08:14:4d:d8:2c:94:d7:f0:00:bb:16:ec:86:04:17:45:
         e9:98:b8:7e:42:b5:eb:f3:e9:38:50:42:18:aa:75:0f:4a:b0:
         77:43:ab:d3:06:35:68:64:a2:d6:e0:87:11:d1:da:9f:35:bb:
         e7:0d:54:cf:ac:a8:8e:02:75:68:d5:b5:b1:1c:5c:69:7f:b6:
         a4:f0:a1:94:94:25:80:de:0b:ca:76:2f:fd:00:3f:b0:0c:d8:
         4f:4f:97:b7:20:29:c0:b6:6d:22:f8:36:f3:42:50:30:2e:d7:
         b6:3d:b8:f6:6b:d3:4f:fa:17:b2:7e:e2:d0:aa:00:fb:a2:a1:
         c2:d1:b6:f5:b6:e7:74:f4:89:29:a9:2f:a5:e8:3b:14:b8:67:
         6d:be:cc:54:f0:3a:63:d0:a5:8f:b3:07:7d:d2:ce:99:f8:8d:
         fc:85:86:a6:20:d8:d1:00:be:c5:81:c4:4c:9e:e2:83:6c:f7:
         84:96:f5:d5:2e:ec:e6:0a:89:91:80:a2:57:9b:3c:cf:91:05:
         4c:0d:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:58:07 2024 by rpki-client on console-fra.rpki-client.org