Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          bzhXLWFYHvfe8W6Pct1Sm4Lx92bbL3ZfIP1g+GQKmv0=
Subject key identifier:   79:5D:EA:AA:89:39:A1:05:61:53:C0:F4:61:BD:E8:FC:92:5A:AA:8B
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       018F874ADB6FB27DFA0F4178CC3F4DDC7700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          0906
Signing time:             Fri 17 May 2024 16:03:00 +0000
Manifest this update:     Fri 17 May 2024 16:03:00 +0000
Manifest next update:     Sat 18 May 2024 16:03:00 +0000
Files and hashes:         1: lkf0miEJnerSM4PYEEzH4htCKS8.roa (hash: YmP4AeorZW1NTGhEgsXqH9FgTcJRWYFmiE20v//ouzc=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: WYSvypfMwnCgUaCu43O/avgwFvoebkzUCWZTTCuodQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:db:6f:b2:7d:fa:0f:41:78:cc:3f:4d:dc:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: May 17 16:03:00 2024 GMT
            Not After : May 18 16:03:00 2024 GMT
        Subject: CN=795deaaa8939a1056153c0f461bde8fc925aaa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:06:ef:24:67:aa:a3:7b:f7:f8:b8:4e:d8:
                    23:50:fa:90:4d:fc:31:30:6d:2b:09:0c:5b:0e:19:
                    f9:d6:09:b4:01:c7:fa:b8:86:10:6b:23:a0:29:55:
                    92:b4:cc:e0:a3:84:71:1f:87:79:b7:84:42:86:01:
                    5d:40:97:85:c8:99:23:07:40:84:e4:de:db:c6:9a:
                    d3:f4:73:a8:b3:0f:50:ba:57:5f:0f:42:e6:99:40:
                    c6:fb:9f:35:d3:b2:c5:7f:46:bf:f3:ae:db:97:d1:
                    55:15:8a:f0:4a:8e:af:c2:d4:93:6c:7e:df:45:f2:
                    68:d1:2d:dc:56:f2:dc:43:95:76:a6:e8:7a:f0:93:
                    34:0e:84:6b:06:47:6a:42:13:0f:f9:91:54:11:b0:
                    b7:f7:1e:d0:f2:bb:fb:c0:2b:53:92:60:36:42:d3:
                    6f:19:d3:f0:ce:83:e6:d0:4e:f9:03:cc:df:c7:ae:
                    25:10:fb:ce:ee:89:b9:2a:44:83:80:83:96:a8:ed:
                    0d:aa:18:56:63:5d:75:e9:d6:fb:d0:84:1d:3c:2f:
                    f4:53:fd:23:5f:65:f7:49:d4:40:2d:66:0a:ce:52:
                    93:ab:b6:7c:96:30:31:66:11:a9:71:57:73:bc:77:
                    c9:6e:83:9a:89:c2:d7:4d:a9:e3:e0:51:44:e7:77:
                    00:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:EA:AA:89:39:A1:05:61:53:C0:F4:61:BD:E8:FC:92:5A:AA:8B
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:05:4e:d2:71:8b:93:3b:26:8f:b7:17:e4:6a:89:f8:41:78:
         85:c4:00:98:cc:2e:aa:d9:ca:74:5d:bf:b4:eb:c9:2a:72:14:
         47:dd:9e:f2:9f:57:aa:76:72:ea:64:f9:3a:ae:a8:36:9e:d8:
         32:68:b1:3d:19:da:9f:e9:a2:56:43:fe:4e:fe:4a:3c:5b:28:
         4d:96:bc:4e:15:fd:a2:73:17:30:4f:68:2d:6d:7f:eb:e3:12:
         b7:b6:3f:42:18:4d:82:39:20:20:68:69:cd:75:2f:98:7d:5e:
         9b:48:15:59:b4:aa:95:e8:87:0d:a7:fc:e5:60:f1:27:2c:7f:
         4d:eb:dc:5e:bf:37:35:13:e1:e9:3f:23:67:36:30:e1:96:2b:
         6e:09:e4:c5:6f:a9:0e:e1:d2:7b:be:07:7f:21:85:cf:5a:be:
         54:ae:0f:3e:14:31:86:ce:79:48:05:d0:3e:39:e4:d9:4c:60:
         46:e4:b4:12:5b:c4:fe:b5:d9:76:41:e7:12:b9:95:7f:c7:71:
         d2:2a:88:b0:bb:17:a1:0c:9a:b6:02:7f:08:f2:41:22:44:8e:
         77:bf:7e:95:58:40:c4:27:5f:1a:43:77:47:b4:49:cf:e6:26:
         c1:06:b0:be:8b:a1:3e:2f:9a:cb:98:81:97:88:c4:88:ed:07:
         6b:d7:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:06:42 2024 by rpki-client on console-ams.rpki-client.org