Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File:                     yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier:          Psf3vtUVw/9zGbBftxufn8s9gut7Y4ykHT5jEK9DbhU=
Subject key identifier:   BE:1B:EB:DF:78:56:EC:50:AD:D9:12:77:34:F5:8F:2D:12:68:4E:93
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer:       /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial:       018F87B66A0BB4289E56B6A10AF0C77F8F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number:          0565
Signing time:             Fri 17 May 2024 18:00:29 +0000
Manifest this update:     Fri 17 May 2024 18:00:29 +0000
Manifest next update:     Sat 18 May 2024 18:00:29 +0000
Files and hashes:         1: Y_16TVlRJFD24ewTjPNzOK0Dm-U.roa (hash: XOt2OBmVH55kSTrjxav2Prj0Mat70rHIoNmZ1XDQXWg=)
                          2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: vEv08Dut82xWzvEn0wfH9fmJdAW5SRmF0fUGptTkrHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6a:0b:b4:28:9e:56:b6:a1:0a:f0:c7:7f:8f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
        Validity
            Not Before: May 17 18:00:29 2024 GMT
            Not After : May 18 18:00:29 2024 GMT
        Subject: CN=be1bebdf7856ec50add9127734f58f2d12684e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:af:cc:8d:36:71:f1:ae:90:9e:66:98:b0:
                    21:fc:dc:41:3d:c9:6e:d7:ba:94:c4:cb:b5:67:5a:
                    6a:4f:f7:b4:05:0a:89:65:1d:2c:8e:3d:96:45:ab:
                    10:99:87:a1:02:63:3f:57:04:4f:c4:e4:d9:d1:c8:
                    d8:aa:54:06:53:01:63:f4:63:96:81:23:33:34:8f:
                    19:6f:72:27:b5:f0:a7:75:fe:db:56:18:3b:ba:28:
                    29:a0:cc:61:ea:08:ca:d8:2b:26:fc:64:9a:7c:74:
                    20:0e:46:1d:8d:c1:c1:bd:cc:98:e6:dd:7b:46:76:
                    80:b2:24:67:64:77:2f:60:82:3f:88:bd:43:61:a1:
                    91:ba:d5:1c:0d:58:dd:c3:84:68:ba:be:88:16:cd:
                    1c:a6:b8:5c:8e:1c:60:0d:05:d0:40:30:d1:5c:d6:
                    5e:0b:60:cd:ca:a8:b2:f0:7d:4f:7b:9e:a2:5b:4b:
                    bf:be:00:ea:57:03:ad:89:d5:ee:3c:f3:6a:c3:03:
                    71:0b:d6:c4:b4:f2:d5:58:63:d3:df:ba:09:46:d4:
                    a0:5f:d5:79:41:ed:d6:6b:bb:6f:17:8a:0e:43:c9:
                    f1:78:80:ee:8a:94:0e:28:67:80:68:0c:f8:af:b8:
                    1d:9f:e0:50:f4:7c:52:15:24:a7:06:92:b5:22:35:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:EB:DF:78:56:EC:50:AD:D9:12:77:34:F5:8F:2D:12:68:4E:93
            X509v3 Authority Key Identifier:
                keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:44:98:9f:75:5f:f8:3f:aa:37:c0:33:cf:91:6d:b6:8b:cf:
         9b:d0:71:02:fb:ba:e7:a8:5e:d5:6a:df:4e:24:d0:d6:9f:5d:
         11:57:0f:c1:6a:a9:c6:68:04:63:95:57:9f:ac:c8:76:5a:ba:
         3c:0e:06:ba:94:bb:14:15:12:ef:4c:e6:d5:02:ea:80:1a:6d:
         1c:c0:c3:c7:46:4c:24:21:c0:85:83:5f:9f:8d:30:08:f4:3f:
         ee:b5:af:12:fd:b3:a5:aa:b5:a4:25:39:ae:a0:0b:75:c6:16:
         07:48:3b:a0:9c:39:25:60:06:77:cd:46:de:4d:44:a3:e3:e6:
         66:24:fa:6f:8f:12:94:63:75:34:41:79:81:64:3c:10:42:0c:
         61:6e:a3:75:3c:b4:03:bf:c2:bc:09:b1:ce:0f:ff:96:f9:8f:
         a2:ea:d4:d1:ad:ae:de:2e:cf:27:2b:ef:4a:52:6d:7f:7f:7e:
         fd:87:a6:51:81:01:da:3f:3c:bd:85:ef:68:c9:21:96:10:aa:
         18:71:de:c4:3d:d8:ec:3f:cc:f0:0a:b5:a7:09:c8:52:e4:47:
         9e:20:c6:3f:17:34:59:16:7b:06:fc:cc:c4:d5:d7:a1:c0:42:
         37:e2:58:3c:f1:54:16:56:4b:e7:e6:22:cb:6e:8c:bd:7b:ef:
         2c:c0:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:39 2024 by rpki-client on console-ams.rpki-client.org