Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File:                     yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier:          i2BzVmd1vVL031KXrCOjD5IKjya0SimzgQf/S0YXkqo=
Subject key identifier:   41:9C:3C:F3:79:DC:99:31:9D:88:D9:BC:AE:8A:DD:28:85:BD:79:46
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer:       /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial:       018F8B92D85F974BAA83B0732836A007F829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number:          069B
Signing time:             Sat 18 May 2024 12:00:07 +0000
Manifest this update:     Sat 18 May 2024 12:00:07 +0000
Manifest next update:     Sun 19 May 2024 12:00:07 +0000
Files and hashes:         1: 2p7NoC24EW-Zg9OTCKVmMqobdF4.roa (hash: Vf/tx5ymjh8BcO2vz/6fds07CPbTxyw6YRORy8jqU4I=)
                          2: mtNULqQYD6M15y3iT2M6LxYNzB8.roa (hash: LsWiwT1k/KsKGX5bytznFeT6YJQ7FIkuFCe4cXIWIR4=)
                          3: usuxmxnRmJ2wxn21JqO8rPTzq0E.roa (hash: Rhl66hlVDRQA5d6a3/wIWgFFgaIFPyx6Phyb/3qoUzw=)
                          4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: FPl03P6+5XCMkzcTS7AklFQi/3UKFMhTp1KjaMPG/cc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:92:d8:5f:97:4b:aa:83:b0:73:28:36:a0:07:f8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
        Validity
            Not Before: May 18 12:00:07 2024 GMT
            Not After : May 19 12:00:07 2024 GMT
        Subject: CN=419c3cf379dc99319d88d9bcae8add2885bd7946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:64:8b:30:63:75:ff:fc:47:70:81:89:9c:
                    47:ce:4e:5f:1c:e9:7a:6a:b4:5e:3f:c0:db:c2:59:
                    73:36:5b:5a:5a:4f:77:67:31:33:17:cc:72:24:68:
                    f5:a2:75:75:ca:3d:2a:c5:d5:7d:be:4f:3c:50:ce:
                    ec:1d:40:0b:1f:bd:9d:80:19:05:1c:b5:af:79:86:
                    9f:a2:a0:ff:2d:83:a2:2f:20:82:e9:ab:0a:55:e8:
                    df:69:f3:39:45:cf:f8:6c:92:e0:d8:bf:1e:85:6c:
                    0e:4a:ce:cc:26:1d:4d:15:25:41:08:61:3f:cf:3c:
                    21:9b:08:10:29:ef:71:09:ff:67:1a:66:42:03:ee:
                    3b:7f:5b:34:47:64:d6:48:ca:3a:c6:65:ff:3f:52:
                    29:6a:97:1d:54:6a:ff:51:d4:9b:7a:eb:1b:7a:ce:
                    c1:d8:c6:36:2e:5e:ac:22:7a:5b:f8:07:ca:62:d6:
                    4f:26:36:75:55:2a:58:25:29:56:eb:d9:cd:b4:11:
                    65:31:14:b9:f4:aa:cb:77:67:e8:b1:c5:b7:b4:4d:
                    a3:f3:6f:80:5b:a1:a3:ec:b0:7f:0b:b8:6d:f3:7b:
                    ed:e9:61:ed:a0:c6:76:f7:bb:8d:74:44:53:a7:16:
                    70:6e:2a:25:47:2d:f8:8c:82:e4:b2:52:4b:a5:12:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:3C:F3:79:DC:99:31:9D:88:D9:BC:AE:8A:DD:28:85:BD:79:46
            X509v3 Authority Key Identifier:
                keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:b1:70:47:0a:84:e8:ca:43:c6:a3:6c:a7:06:82:14:2e:
         66:4d:72:44:5e:ba:69:a0:09:9f:d0:28:66:50:9f:50:44:f1:
         4a:03:22:5f:e7:cf:42:e6:21:23:f9:20:83:e2:15:6b:1e:2f:
         6a:a0:a8:16:6b:f0:c4:09:25:a9:52:fe:0b:3b:dd:68:83:50:
         d8:b7:4d:43:e2:2d:77:06:b6:92:f6:85:2f:7c:25:f4:6c:a3:
         ae:3b:a1:13:61:88:0d:84:67:76:52:f0:94:3d:fc:75:00:12:
         f1:52:2d:62:d4:8f:ec:74:22:f4:95:5f:14:47:39:33:af:fd:
         19:0f:dc:70:bc:60:fb:e3:c8:3f:34:84:92:45:3c:16:89:3e:
         76:eb:80:d1:3e:8f:c0:7d:7f:d9:ee:fd:51:b1:71:ed:0f:2f:
         03:3c:68:ee:17:f4:b5:d7:1f:41:98:40:a4:b8:e0:c9:d6:f5:
         9f:6f:e3:51:b1:54:fc:5e:08:e1:14:3f:94:22:a4:a7:d8:6a:
         2f:d7:9f:92:8c:9b:70:cb:f9:5a:cb:e6:f6:08:e4:12:d2:0e:
         e0:43:36:14:28:56:f9:61:8b:07:96:ac:a6:8f:56:4b:a1:ce:
         cb:3e:2e:64:92:d8:36:8b:20:4a:2f:87:b7:09:75:75:5e:9d:
         91:03:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:58:29 2024 by rpki-client on console-fra.rpki-client.org