Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          FylzCk9smjJplQ1ECHwZ1LCS6upjZ9xRaKSkeboDEUk=
Subject key identifier:   22:17:E9:43:C0:40:F3:95:A3:A4:59:46:CA:05:44:98:4E:CE:2E:53
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       018F87B6489645D1A844A336357103759D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          0467
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: 1-MgS7wfdloKKCLUf9jRnIVbyBuo.roa (hash: nLqRFQLhecEAtw3/Xkfimv+b8h2EYVwaVBJINvf2Y4s=)
                          2: dvYe1eMmdBAD5oe8_NDzZkB1HGw.roa (hash: a9g8Pr/CYtxHJmmVvlyVBtkJgoE7XuEUEfEOgU8s2nQ=)
                          3: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: mD9J86xEJw/v+fzui/7DYp9J0IbnJ1ubu7/ckY4jzs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:48:96:45:d1:a8:44:a3:36:35:71:03:75:9d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=2217e943c040f395a3a45946ca0544984ece2e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:b0:57:1b:6a:90:48:a0:8c:a5:9e:10:62:
                    7f:3f:79:c3:10:61:b5:92:58:28:4d:ec:b6:64:1d:
                    97:65:a9:33:85:d7:a4:71:2f:a0:9f:c2:21:4e:be:
                    ca:f1:23:74:72:3b:8c:df:d9:7e:b5:e2:49:32:a3:
                    85:26:2b:2c:0c:e0:ad:ad:e2:16:5b:4b:37:b0:77:
                    8d:2e:f4:ca:b4:65:00:ee:61:b9:00:79:c3:f7:7e:
                    50:e4:45:b9:b7:00:4d:ec:ef:32:ac:39:1f:ed:84:
                    88:2a:b2:13:90:72:a3:3b:6d:6f:f7:56:75:9a:cd:
                    e1:e4:b3:75:75:6c:11:73:1e:85:10:32:75:0e:03:
                    14:2e:f4:4f:6a:48:39:aa:10:27:1f:07:13:bb:de:
                    da:e1:0f:e0:f7:2e:f9:4d:36:27:f5:16:56:70:8b:
                    db:c8:8a:9a:db:79:64:8d:15:44:e0:63:3e:c0:30:
                    43:3d:10:96:a5:9d:af:ee:e7:fe:dc:f9:ca:e4:d4:
                    74:59:32:e2:54:53:a9:e6:04:fe:18:85:85:48:4b:
                    93:e6:2e:1e:cc:a3:5b:0f:dc:ed:0a:4c:ed:f3:94:
                    41:76:7a:0e:27:c3:a2:b5:36:d4:70:66:ca:88:ea:
                    94:a7:2d:f9:eb:e7:96:d1:f8:68:b3:9f:11:b6:dd:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:17:E9:43:C0:40:F3:95:A3:A4:59:46:CA:05:44:98:4E:CE:2E:53
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:44:14:41:35:78:e7:b1:8a:62:a3:cb:76:ee:0f:64:c9:2a:
         20:d1:4c:ba:d7:d8:71:58:00:84:52:04:1c:6f:93:b0:67:87:
         68:ec:d7:90:c3:16:44:8e:e4:ac:de:54:0f:1d:e1:c9:ab:c8:
         8a:f9:fd:87:91:7f:44:fc:ef:bd:c2:eb:0c:7e:84:7e:6a:22:
         f7:88:42:cb:c5:3d:95:f1:9f:b1:ac:ca:76:fc:7a:6d:74:46:
         8c:a7:e3:20:1c:b7:48:68:92:ad:aa:27:60:e2:0b:b8:e5:53:
         0c:89:64:06:c7:90:5c:0f:c7:1b:65:b0:2a:2a:2d:9c:f7:b0:
         ee:ba:44:82:c0:db:8c:c6:d5:5b:92:4b:5b:96:30:0c:ef:64:
         ad:05:a2:87:9d:dc:9f:35:9c:4a:16:b5:8e:d7:5b:f1:b4:f9:
         6f:e8:07:8f:42:7d:e1:d4:b9:36:3b:8c:24:11:bb:dd:40:64:
         81:30:45:61:18:27:1b:4d:1a:30:c6:b2:50:06:fa:45:16:25:
         1c:dc:65:68:c2:7d:70:88:80:32:40:7c:50:fa:c8:9d:87:34:
         de:f7:9e:81:6f:3b:39:46:73:5f:a6:74:82:e0:29:cc:0c:f2:
         72:c3:92:00:5b:f0:9e:be:e9:39:14:fd:3b:db:24:53:05:b0:
         28:9d:68:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:39:59 2024 by rpki-client on console-fra.rpki-client.org