Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File:                     YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier:          e0a7X1VTHaoNYCAqA5gr6lMEH44I3SeoRnN5nBbibZs=
Subject key identifier:   1A:56:0B:0C:33:70:E9:F3:CC:86:D5:B6:E7:0B:3D:6C:6F:AB:07:5C
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer:       /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial:       018F8748D2A066D8E01F0055B3D1D5AA623E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number:          0EB8
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: SJTZi2iqiC_qSX9B1LFDnsK7hmE.roa (hash: BvxiO0zBWspisNFXww5NTVlRCqfQWkMVg5w6hAbq+d4=)
                          2: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: ygelKWJR7GqrYjMo5R6uR/aM2xX6KVbIwo+bwo8wKac=)
                          3: vZ1yAVzyASLv0TjQjOHxofpQPgQ.roa (hash: PwV4fx6G6Bgl4hZ3vm+fDg9UULJs855TvFOatQDiSM8=)
                          4: ylMmY43oeghKjj3RKHuH7j6LXbM.roa (hash: ok1VDnrCvMLd8kk8Q7X1JEWU/JE1UvnncexK6sK0Qgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d2:a0:66:d8:e0:1f:00:55:b3:d1:d5:aa:62:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=1a560b0c3370e9f3cc86d5b6e70b3d6c6fab075c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:8a:e9:9a:a3:61:2b:7a:5d:d7:1d:3f:1c:
                    d2:83:c9:1e:24:ed:88:3b:f1:50:73:91:83:3a:0f:
                    87:39:fa:65:21:28:3e:45:7f:ce:e0:b7:24:6e:9e:
                    25:b7:b5:ff:f1:0f:7f:bf:31:1e:76:73:73:8a:01:
                    9f:f7:89:f0:88:2c:ec:d2:86:6b:5d:aa:62:d6:37:
                    8e:6d:b1:6d:9c:20:2b:a5:02:d0:9b:14:e6:16:9b:
                    b5:54:9e:ac:99:e7:20:53:fe:94:84:26:41:0a:2f:
                    6a:91:3f:eb:38:9a:bc:d4:d8:c2:ea:55:9a:43:cb:
                    33:f1:c7:56:ca:a3:9c:59:4b:f8:f8:74:e6:ed:5d:
                    3a:70:4b:b9:61:ec:d1:42:3f:3d:8f:da:aa:3c:80:
                    a9:22:3e:7e:c6:15:f3:0f:df:6d:6a:03:9a:37:a1:
                    72:ff:fc:db:b8:fa:ba:c0:19:1e:c2:6d:b6:ce:ee:
                    76:2e:cd:11:c2:bb:95:05:08:38:d2:6f:9a:e7:c3:
                    d3:a5:fc:5a:91:6f:d6:31:76:3e:6c:ec:b9:a9:01:
                    bd:b9:70:61:66:20:b1:18:0d:39:bc:76:9a:66:52:
                    5a:97:ca:34:35:ee:2e:bc:25:a9:d6:90:a1:a6:0c:
                    0e:b8:bc:c1:17:dd:a2:b0:71:8a:fd:67:ed:85:2d:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:56:0B:0C:33:70:E9:F3:CC:86:D5:B6:E7:0B:3D:6C:6F:AB:07:5C
            X509v3 Authority Key Identifier:
                keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:75:25:ca:32:32:41:49:33:75:47:9c:6c:99:ca:85:a0:d3:
         23:94:86:6b:a4:db:39:8b:06:8b:c5:a0:15:66:b2:71:86:9b:
         d1:40:cb:76:d8:f3:7a:71:65:7e:7a:66:a3:d0:4c:65:07:50:
         59:38:21:ef:54:a9:bd:bd:36:ef:70:e0:28:72:c3:47:2c:09:
         bc:27:85:bd:f9:ae:3c:85:a0:1b:b8:d3:b7:0f:0a:56:76:98:
         58:d6:e8:e3:f9:e2:d3:43:82:27:ce:ce:02:1f:fe:76:9f:8a:
         e3:d7:16:f2:9a:51:08:24:dc:c7:21:32:02:5d:f3:7b:ba:7c:
         0b:75:d8:a7:f3:e5:47:da:d6:ef:a7:43:ec:55:fb:4e:86:ac:
         06:e6:a1:34:64:6d:33:11:a1:82:52:a8:cb:f6:74:3a:fa:40:
         64:69:61:d7:72:4d:81:d9:75:f7:24:a8:38:0f:23:8a:ec:2e:
         c3:e2:c2:ee:76:54:a2:f0:5b:0d:7e:9b:5c:8a:96:47:c4:5a:
         f6:93:f6:73:96:d0:11:f3:4a:8f:16:71:59:c7:8c:bb:5e:71:
         e8:f3:77:9f:72:ed:d4:94:a4:9f:ff:fe:dc:91:46:be:61:26:
         2d:80:c1:55:45:61:4e:0a:48:5e:9c:ce:0a:51:ed:0e:7e:ba:
         f0:b9:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:31 2024 by rpki-client on console-ams.rpki-client.org