Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          tkZ6VRI0uiU9wJTVAeaQl4WrkUhpl8AlFS9J1t8jVgI=
Subject key identifier:   D1:4D:14:74:76:39:C7:7E:8C:9E:82:59:E3:A6:64:EF:24:B9:69:3C
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       018F87ED95131B5F1F013AB4B55E311B6257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          0889
Signing time:             Fri 17 May 2024 19:00:45 +0000
Manifest this update:     Fri 17 May 2024 19:00:45 +0000
Manifest next update:     Sat 18 May 2024 19:00:45 +0000
Files and hashes:         1: J1y3F9e6U0dH77am77zchEdJBQc.roa (hash: 6BOepdIm1uxsg5VLKl5Z/tsxcFotv1bcemNhS5jW12Y=)
                          2: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: 66OxMbViVkr9L/Zv7PanoNNbxRxIU79/kTl8K64pbbE=)
                          3: usG4bKE3qwZ5Noh47bnc8Qmw89s.roa (hash: YRXSURaDe5prEiyT5gC3U02Wq8teggk1MprQExzhZFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:95:13:1b:5f:1f:01:3a:b4:b5:5e:31:1b:62:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: May 17 19:00:45 2024 GMT
            Not After : May 18 19:00:45 2024 GMT
        Subject: CN=d14d14747639c77e8c9e8259e3a664ef24b9693c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:98:3d:12:8a:be:ca:ef:56:ae:8b:06:52:
                    34:29:61:a2:77:ca:7f:09:9d:a8:00:01:29:c1:e4:
                    01:d5:e1:46:08:5c:9d:d3:5d:e0:14:2a:ff:e9:cf:
                    ba:6e:66:bd:d8:b4:90:ee:2f:21:f7:ad:2d:a5:01:
                    17:14:42:e3:2c:48:15:27:f6:db:91:3e:20:67:2e:
                    40:72:ec:7c:cb:21:0e:da:a3:ea:ef:e8:58:3a:fa:
                    51:80:d3:2f:a9:ad:db:c1:35:4d:05:21:d4:11:5e:
                    ea:45:00:01:08:29:94:dd:d9:7c:c4:f4:b6:ad:9e:
                    03:eb:d4:53:28:8e:87:db:67:c3:7c:6e:4f:c0:09:
                    1a:5f:9f:08:88:e6:71:f1:bc:3d:19:41:8a:c9:3b:
                    c5:e3:7c:d6:bb:7c:d5:9b:39:ea:c6:bd:2e:d5:f7:
                    2e:4a:b2:69:3c:bf:43:2b:1d:f6:73:64:15:ad:11:
                    39:6b:f3:aa:22:e4:bf:61:cd:72:e3:77:f7:91:d2:
                    58:6b:09:e6:ef:c9:21:b8:e6:5a:67:eb:11:6f:4f:
                    a6:e5:d5:e7:ec:68:f3:bb:f4:53:bb:87:9a:89:fb:
                    09:e8:0b:24:d5:e5:11:0c:1a:52:f4:59:8a:c5:75:
                    b7:90:77:c9:c6:9c:1b:38:79:6c:3c:d7:7c:75:e9:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4D:14:74:76:39:C7:7E:8C:9E:82:59:E3:A6:64:EF:24:B9:69:3C
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5a:83:f1:b2:0e:ba:d3:e0:68:72:b4:2f:2e:b1:ff:e1:19:
         91:74:ba:9f:04:e0:8a:ae:7c:56:5e:c7:fa:b6:5b:1e:89:0b:
         f7:f7:be:8c:a2:2a:1f:b7:af:a4:86:c5:91:f4:e7:f6:27:45:
         a8:1d:fb:a7:66:82:29:eb:81:41:ca:77:26:87:51:84:a5:a2:
         80:4b:1d:e6:f4:69:de:b1:51:21:36:ca:3d:e7:3b:95:18:4d:
         d8:0f:3a:5d:3d:07:a7:a2:8b:18:2c:7b:44:2a:e0:45:9f:8a:
         f0:d4:47:26:63:13:68:83:15:2d:24:ab:e3:4d:86:54:fb:52:
         96:6f:51:0f:a3:db:30:b3:28:96:1b:22:1d:9d:09:26:f8:59:
         36:37:73:06:d4:25:c5:86:22:4d:6c:e5:24:04:1e:14:40:70:
         13:8b:ae:6d:2c:46:6a:02:a0:39:e3:ce:13:5a:f1:05:6e:19:
         d6:3a:43:49:ce:12:c4:2a:49:b4:1f:5e:0e:66:2f:d3:65:09:
         8c:bf:df:84:ff:8d:9f:aa:85:68:e9:63:4a:45:09:38:27:b5:
         a7:34:90:87:1c:55:d1:39:5c:e5:4f:ed:7b:3d:2e:32:a0:f5:
         d7:7d:2f:87:11:e7:7a:52:dc:10:cc:6e:ff:04:92:86:95:68:
         a9:fa:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:05 2024 by rpki-client on console-ams.rpki-client.org