Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File:                     y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier:          /kLYuOkoiKBfsQ3CpC1EB2gqPsQW9HfN/UrEewTURBw=
Subject key identifier:   4D:24:EE:DE:5F:4B:71:CD:27:6F:7C:05:69:3C:3B:1F:D5:91:B4:20
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer:       /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial:       018F87B65CC11CB905231AE5ED07E156C6FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number:          02AF
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: 1oP30-n66JAbxzfbXjfsKSUCjwk.roa (hash: J35V7dlD3NbF5YwG6Gx4HPlOLJULXuBlS4ow9BNPLdY=)
                          2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: Zfn7z1xwoJ8DcnDvWphzwxvNe6XJxy5wTPUgohV4ma0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5c:c1:1c:b9:05:23:1a:e5:ed:07:e1:56:c6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=4d24eede5f4b71cd276f7c05693c3b1fd591b420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:dd:a9:82:c0:91:f9:92:e3:2c:0b:f4:37:
                    43:1f:75:42:82:67:c7:95:80:c3:77:62:90:55:8f:
                    18:96:16:e4:68:67:02:6a:18:81:a2:73:e2:91:a4:
                    cc:08:ba:e2:59:0d:7c:35:62:5c:fe:d1:b1:38:95:
                    3e:07:8f:9c:44:de:51:f9:b6:cf:b1:73:87:f1:ee:
                    6a:65:fe:f1:e2:1a:51:fa:3d:49:e1:c2:51:d4:9c:
                    32:ac:2d:a8:e7:f7:7a:63:bf:02:86:a6:a2:92:a8:
                    bc:25:7e:e3:3f:78:2c:a5:e0:0a:f0:34:7b:cb:16:
                    3c:97:80:e3:8c:a8:b3:20:c8:f6:54:d1:60:fe:03:
                    5b:be:9d:c7:d6:aa:65:96:c6:95:d8:e2:89:3c:17:
                    05:df:1c:46:c2:96:66:c1:f1:19:14:fe:5f:07:fa:
                    25:b0:d8:4f:73:70:3e:d7:3a:a4:b1:73:89:e6:97:
                    08:a8:b7:b4:76:27:d8:c4:bb:81:23:8d:f9:a9:af:
                    c7:e0:54:e1:6f:f2:0d:65:f7:88:dd:01:66:20:24:
                    f3:b6:2f:48:9c:97:60:03:32:43:4a:0e:b8:34:fa:
                    93:64:1c:e8:7d:a8:b2:8d:46:7f:71:f8:19:fc:09:
                    df:b9:d4:15:69:fe:67:43:ae:1d:b0:db:e2:f0:dc:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:EE:DE:5F:4B:71:CD:27:6F:7C:05:69:3C:3B:1F:D5:91:B4:20
            X509v3 Authority Key Identifier:
                keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:37:df:24:92:69:fc:d8:10:6e:64:aa:d8:d0:25:13:55:
         8c:30:1d:ef:7f:6e:a6:5e:44:20:cd:39:13:78:e0:68:78:34:
         00:d8:58:bf:9a:a5:44:18:f2:15:84:8c:40:2a:11:97:69:09:
         f1:19:73:56:0c:ba:f2:f1:d3:aa:95:7e:c5:8b:fb:e4:b4:82:
         b1:48:45:b2:eb:ac:88:9b:39:d5:4b:05:83:77:5c:c7:33:24:
         06:ef:52:30:6c:92:51:95:00:9e:a5:94:ef:19:7e:e4:8a:3e:
         bd:af:4c:94:3d:12:d6:47:96:80:5e:44:1c:95:27:43:c3:e9:
         8f:67:62:1c:23:4a:4c:9c:1b:b6:ed:b8:07:5f:79:37:fe:1d:
         45:c8:7d:b3:f6:11:68:8d:52:23:3a:4c:4c:00:ea:ec:8f:3a:
         a1:52:44:d4:b3:42:06:0c:62:0e:2a:ff:6b:73:39:53:b1:61:
         73:c7:6a:06:45:5c:6e:b5:e2:b8:1b:4b:19:de:f8:6c:2a:ae:
         ee:78:b0:56:33:6c:7e:0a:ea:dc:e0:0f:3e:61:56:a5:a7:4f:
         00:13:1f:fa:3b:4a:41:f0:c0:09:b8:93:cc:f3:8e:06:5f:96:
         3c:96:c2:4e:e3:36:65:6e:71:39:c8:e6:90:0e:7e:57:fa:4a:
         7f:9f:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:55 2024 by rpki-client on console-ams.rpki-client.org