Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File:                     YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier:          VtlyhJbWpOlKiPE6zNgRvkVKzJWv2RVD4VjiSSGw4Nc=
Subject key identifier:   EC:81:3A:F7:98:A3:1A:1A:51:5B:05:93:0D:65:25:16:DA:72:91:FF
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer:       /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial:       018FB3B41729CAF2EC69D86CAAD0AC33636E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number:          0A32
Signing time:             Sun 26 May 2024 07:01:15 +0000
Manifest this update:     Sun 26 May 2024 07:01:15 +0000
Manifest next update:     Mon 27 May 2024 07:01:15 +0000
Files and hashes:         1: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: SRHeTUdZZ1vtEY/IYIMPittKtMAY3Kn/23C4GDntS2I=)
                          2: yTG1HGe96lVROkg8NB6pCycCzNo.roa (hash: Uy2KuINZrZY9cFX9QCKS95rCI3vH9nbdSgMF7sU0uw4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b4:17:29:ca:f2:ec:69:d8:6c:aa:d0:ac:33:63:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
        Validity
            Not Before: May 26 07:01:15 2024 GMT
            Not After : May 27 07:01:15 2024 GMT
        Subject: CN=ec813af798a31a1a515b05930d652516da7291ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:89:5d:98:00:32:43:76:f0:b1:9e:e3:99:
                    e8:83:bb:aa:c2:02:d1:f0:20:5d:1f:2d:e6:87:f6:
                    b1:f6:45:4e:a0:d7:ed:10:1c:5f:29:97:db:10:ee:
                    f9:ee:9b:58:40:02:7c:b7:e3:d3:1d:7e:ea:0b:00:
                    75:ea:40:dc:98:25:ae:3b:df:d1:63:b5:53:8c:6a:
                    6b:00:96:c1:bd:a6:4d:b1:08:84:86:18:a6:c5:26:
                    9c:5b:61:b6:77:3b:41:3d:44:f7:2f:02:f8:ac:be:
                    3d:00:0a:14:1b:30:9d:6c:14:f5:77:6c:30:99:f0:
                    cb:49:e9:51:04:56:ee:ed:dc:91:ce:bb:38:69:01:
                    77:fd:7f:d6:28:b6:a3:b7:f1:87:dc:f3:c1:31:41:
                    1f:60:67:ef:65:af:cc:5f:bf:a1:70:3c:eb:b1:3f:
                    50:40:e6:39:2e:cb:57:a4:e9:c1:13:43:95:45:40:
                    52:21:f8:7c:d3:5c:87:76:65:d8:40:26:1a:e5:7b:
                    f2:42:fe:7c:7d:41:75:7e:bc:86:f0:d9:da:27:f1:
                    3f:de:0a:97:3a:6d:6d:87:01:ee:50:22:96:34:ee:
                    cb:1f:fb:c5:2d:56:f2:0a:81:1f:f1:cd:47:f4:f2:
                    25:ac:a3:03:f7:a6:79:e8:29:0a:6d:3f:ef:91:a8:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:81:3A:F7:98:A3:1A:1A:51:5B:05:93:0D:65:25:16:DA:72:91:FF
            X509v3 Authority Key Identifier:
                keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3f:53:ce:52:d5:bd:6e:3a:e2:cb:d1:ef:07:05:ff:b6:bb:
         f4:b8:ca:b9:f7:96:42:ea:12:9a:3f:bd:c8:2f:42:83:de:bb:
         b7:23:7e:ba:d9:ff:79:69:6e:9a:69:bf:ab:9d:cb:f2:f5:63:
         66:37:b4:c8:e4:fc:d6:69:47:7b:01:50:7d:1b:6f:69:6d:b9:
         22:c4:d5:b8:6c:f8:4f:2e:e1:ec:cd:d1:00:0d:cd:2c:4a:37:
         01:fa:b2:ec:6d:ff:c1:16:fa:33:42:a7:9f:ce:29:67:9e:3b:
         b1:12:00:5e:7a:01:36:1e:27:16:5a:bd:6d:ff:08:04:21:e2:
         23:3f:1c:5a:a9:07:72:0e:ed:04:38:47:08:4b:28:b9:38:00:
         97:7e:16:29:23:c2:59:d4:2a:68:5f:68:d7:07:4c:2d:bf:37:
         cf:ad:83:34:46:e3:7b:61:2d:64:61:71:63:10:a8:6a:24:f7:
         51:00:e0:d1:ac:e8:8d:72:61:91:ee:b6:e1:b2:49:43:53:31:
         44:c0:d1:c8:17:f8:0d:91:84:f5:5f:85:e0:c1:5c:b3:77:54:
         06:31:d5:b1:1a:08:17:24:18:a0:3e:f3:e7:b9:59:0b:94:64:
         f6:95:ec:dd:2a:bb:6d:f6:a0:cc:2c:14:b3:41:a5:67:b5:c9:
         75:d6:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 10:54:51 2024 by rpki-client on console-fra.rpki-client.org