Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          FTSOwq5MxnsLltBrEdmalR6yjXYmlygulN1Ep403RfI=
Subject key identifier:   FD:A8:3D:61:07:35:CD:2D:16:32:F9:32:77:6B:E5:A9:D1:E1:1D:6A
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       018F87B6B1F468AB3B669AD5149C19477F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          0D44
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: 0blcMW_whGxhPqH3Bh7yII884KE.roa (hash: B2k3tKcon+n0qILFNmxPA3UXLnIZ4I5KW9o1i+T+5AQ=)
                          2: EXzs16b-M2w9oZ8ahEJzBLCMg6k.roa (hash: 8MQHuwP0X3gwSHI7Khb0H/Ujwe+M0sDcRamivNF/nR4=)
                          3: Jy9pLScgw8xqlWcCVqGB6ionR-0.roa (hash: MGfaofWcToDJBfzQODCyqDIOSUHwubO7febTMpy3Kg8=)
                          4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: RCcwnIwPgIsCgErB6sq2DH4HpE8gvgm/GwPgejoHBDg=)
                          5: Y_LNN_v2TlcklDlPo82whukot1M.roa (hash: 5vRPSK0pFkGzp0G/EJVUKBe2McisosJfTMdM2fST0H4=)
                          6: gI-xICbFdbJ0YHoKcVDOrmEyzp4.roa (hash: SWuY7yveVQ4FsxLDDUqlI8nmGFiefhbOAzxTnFbTdw8=)
                          7: g_pk-v0idOX1YT9MscDBCa89SXo.roa (hash: Qrg7DShNGiK1h4tsAT4RUMlk//4wZIGYFtXXezBoR6A=)
                          8: ngDsKjLdEPkffT8yCkrOkh0LpPc.roa (hash: eB6smXi06i9eWRIQGQkROly4VxL4meeriQ51G1Yrorc=)
                          9: uFwbisQETjPaLUpOCaBaM-0khsc.roa (hash: NX4g6hfXPVLAkjsOKd0nj1rQqdc8xt6NxBH/NKaXQw8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b1:f4:68:ab:3b:66:9a:d5:14:9c:19:47:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=fda83d610735cd2d1632f932776be5a9d1e11d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:0f:c6:aa:f3:1c:c7:40:01:49:f3:ea:de:
                    46:94:38:34:bc:34:f6:7b:c2:98:fa:e2:47:15:4d:
                    1b:70:db:b5:8f:38:ff:72:45:a1:eb:17:c4:b6:96:
                    65:81:51:f3:e9:a4:16:37:94:28:b8:66:58:87:4f:
                    52:b4:e8:68:2a:00:d2:b1:6c:d7:51:9e:87:46:bc:
                    00:34:17:cd:40:57:6f:a8:f3:1b:bc:1a:ea:58:3b:
                    85:81:9e:cf:df:e7:d6:39:bb:99:46:38:d8:57:cb:
                    23:9c:20:b4:ca:aa:dc:a2:4a:67:87:c5:22:15:eb:
                    eb:6a:8a:5b:a8:a4:13:f2:67:0c:d3:ca:fa:73:8d:
                    4c:5f:aa:04:85:c0:43:ae:ba:76:e3:2f:f2:b5:54:
                    b3:75:0e:33:98:9b:52:3f:41:d0:69:ad:3a:7f:6f:
                    41:5a:c7:07:37:9a:94:96:2b:3a:ee:6d:4b:b8:ac:
                    b0:c6:bb:04:0b:50:f9:df:be:a2:9c:db:39:db:08:
                    a7:06:03:8c:dc:c9:fd:6c:d1:73:97:11:a4:76:04:
                    b0:81:42:4a:b7:f0:8f:3e:83:30:2c:1c:21:08:4d:
                    30:7b:80:b8:24:a6:1f:9b:c1:19:1c:87:dd:68:cf:
                    71:c8:0d:61:ff:f6:a4:45:1a:0c:48:98:dc:31:68:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A8:3D:61:07:35:CD:2D:16:32:F9:32:77:6B:E5:A9:D1:E1:1D:6A
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:01:fe:a9:a3:98:ae:21:68:aa:55:1d:dc:de:04:a7:5c:58:
         5a:0f:7f:68:69:2c:66:52:a7:52:47:de:3c:d3:49:d7:66:5b:
         23:98:e4:3a:96:f7:88:df:d6:95:ec:d2:e1:f7:e9:90:58:a0:
         ff:4a:e0:50:09:57:73:d0:d5:4d:8b:c2:af:72:11:f3:e0:ee:
         f7:a1:65:39:d3:30:f6:69:c9:b6:4d:10:65:20:2e:b2:93:bf:
         4e:ac:d0:14:91:17:0c:cd:59:ae:ae:c8:6f:36:36:3b:c7:3a:
         06:1c:2a:73:fb:1a:15:1b:11:99:e5:f9:70:d3:e4:1e:cd:e1:
         07:ff:b7:0b:33:e1:9c:66:1b:2d:85:94:c8:a3:b9:7d:04:5f:
         95:f6:59:2b:c1:c3:7a:ba:37:7d:2b:be:29:a1:b1:a1:c3:ba:
         c4:bb:f8:5d:c9:d5:1b:25:16:ed:25:5f:67:ca:7b:f5:f1:2e:
         43:f6:ca:be:42:c5:5f:c4:9f:32:57:77:6a:08:be:78:b6:1d:
         bb:13:ec:61:f8:dd:1d:b5:a4:56:41:e3:a8:ab:6d:a9:41:9f:
         e4:4f:c4:d2:64:f5:f7:41:84:ff:92:84:d4:4c:c1:f7:24:6a:
         f3:dc:6c:6f:b8:cd:2b:0a:41:3c:ad:98:d3:5b:b7:b8:91:d6:
         b5:0f:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:58 2024 by rpki-client on console-fra.rpki-client.org