Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File:                     yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier:          cWP8N6Zqbni5oH/+iNP+5r/dwma3xw3QA4SCwTrEkCM=
Subject key identifier:   B6:1A:9C:53:5F:27:2D:BA:D2:10:89:CD:9F:EB:D5:F2:CD:D8:D2:A5
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer:       /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial:       018F874A264D9F7F07117CA4229CC89CBE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number:          10BC
Signing time:             Fri 17 May 2024 16:02:14 +0000
Manifest this update:     Fri 17 May 2024 16:02:14 +0000
Manifest next update:     Sat 18 May 2024 16:02:14 +0000
Files and hashes:         1: vMRCb0xi2nAEG3XGA9HF_XE5tQs.roa (hash: 1d+9iAvjXwnGurURC8874eDjJUjebc7Bt7cJ6SRxuF4=)
                          2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: Ww203FGqpCwVQUHD/3xIGng9IzsoUvELxe6t58BLU5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:26:4d:9f:7f:07:11:7c:a4:22:9c:c8:9c:be:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
        Validity
            Not Before: May 17 16:02:14 2024 GMT
            Not After : May 18 16:02:14 2024 GMT
        Subject: CN=b61a9c535f272dbad21089cd9febd5f2cdd8d2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:bc:84:bb:13:d1:67:94:1f:8c:10:4b:25:
                    f1:ec:44:f8:e1:d6:3a:0f:82:fd:b9:e9:0f:d0:54:
                    49:b1:d5:c5:56:e1:a8:bf:83:f8:11:b4:5b:37:2a:
                    ea:9c:56:2c:8a:86:a9:90:c5:a3:bf:96:2c:75:c2:
                    0d:8a:37:60:ce:11:5c:bc:27:38:76:ab:6b:8c:65:
                    08:91:68:6a:b1:09:1b:87:7a:c7:a8:c1:c6:3d:85:
                    6a:5d:ad:e8:28:80:71:a9:58:98:23:1a:17:af:2e:
                    2e:36:1e:40:ff:2f:68:e5:05:a1:ca:7d:fc:85:df:
                    9f:78:71:0a:5a:79:8b:a5:3e:4c:c2:df:97:21:47:
                    51:2e:e7:56:96:f1:0a:03:86:d1:c4:09:07:40:91:
                    ed:ab:aa:29:2e:f8:9d:ec:da:cc:30:2f:61:8c:f3:
                    90:5e:37:61:b7:b9:6f:d1:a9:30:99:69:7c:56:46:
                    99:66:3a:0e:39:83:db:b4:04:cc:61:4c:40:36:05:
                    48:4d:55:58:1e:c9:8d:d9:ff:40:a2:64:d1:0c:b7:
                    1b:78:0f:42:cf:1a:b9:da:b4:d1:4d:11:8d:8d:76:
                    de:ab:38:6a:ad:a0:a8:fd:42:33:4f:43:73:9f:8a:
                    ed:e8:f1:80:fb:7f:10:20:d5:d7:81:7d:dd:d2:e4:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1A:9C:53:5F:27:2D:BA:D2:10:89:CD:9F:EB:D5:F2:CD:D8:D2:A5
            X509v3 Authority Key Identifier:
                keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:88:c2:3c:79:76:8f:13:a9:09:0a:47:07:87:70:79:a9:
         5b:e8:e9:70:6d:57:5e:f9:2a:44:a7:13:68:f0:c1:57:e8:df:
         6e:18:09:e0:1e:20:49:f8:ac:78:cc:9f:58:ad:b3:9c:a9:4e:
         6f:5a:82:64:b5:56:08:13:36:95:d3:b8:96:33:92:c7:95:bb:
         10:6c:45:da:82:3b:a0:7b:1b:01:bf:5d:c7:c1:a8:88:3d:bf:
         ee:bf:27:30:49:ff:bc:71:57:60:3f:c1:ec:14:f0:90:40:c2:
         cf:02:e7:78:4c:22:2b:93:15:21:cd:11:a5:5d:d0:75:d5:88:
         3a:c3:d7:f6:da:5a:cb:af:fa:84:5c:9c:8b:40:2c:41:11:89:
         70:28:52:44:4d:83:5e:0f:7e:79:84:b3:66:92:83:60:d2:e5:
         0e:6f:57:45:4a:82:a8:34:4d:23:e2:81:4d:5d:6e:44:5b:2b:
         fe:ab:a7:e1:0e:3d:f1:04:a0:c2:85:f6:4b:a2:37:40:75:f8:
         d7:88:ed:c8:62:8d:11:63:b3:c4:a7:d6:fc:90:a1:be:7c:0e:
         c5:d9:3c:ab:72:81:47:5e:75:df:0b:71:75:b5:2a:2a:fd:b9:
         c1:03:b0:fa:be:fc:88:3f:ee:4f:7d:3e:02:b6:da:a4:06:2f:
         4c:31:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:20 2024 by rpki-client on console-ams.rpki-client.org