Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          bmJfos6Q53SYegAXt5IrBuqhPSNYbti3mPdmWBV9ZHc=
Subject key identifier:   17:A8:BF:9F:81:6F:71:57:84:40:C2:CB:1F:8B:51:9D:AA:2D:26:5D
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       018F8748B817D2008EA0391EA89F96553E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          0D87
Signing time:             Fri 17 May 2024 16:00:40 +0000
Manifest this update:     Fri 17 May 2024 16:00:40 +0000
Manifest next update:     Sat 18 May 2024 16:00:40 +0000
Files and hashes:         1: lElNv_8MsTCs2CCgUpRCuk2_ytw.roa (hash: p3M7yt8Kz4MuJWF60UuoP8sxgRnfWrsoo999Cwkmlf8=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: dV1wT6yLuSA246LSM3eVoV5wwQ99gDnRcZcu/9Eaivw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:b8:17:d2:00:8e:a0:39:1e:a8:9f:96:55:3e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: May 17 16:00:40 2024 GMT
            Not After : May 18 16:00:40 2024 GMT
        Subject: CN=17a8bf9f816f71578440c2cb1f8b519daa2d265d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:f5:df:57:0d:0e:49:8d:94:8d:6a:cd:1f:
                    21:d6:c2:2d:bc:b7:99:2c:1d:58:db:02:85:5d:d3:
                    95:b5:7f:b5:53:fa:a6:05:90:d4:d1:6e:f6:88:a4:
                    c4:3a:6c:04:cc:89:79:d6:c3:43:55:0b:b2:5f:cd:
                    0a:cf:df:54:de:db:2a:71:de:53:95:b6:af:c7:08:
                    66:b7:fd:ea:31:24:55:d3:56:e1:92:08:b5:93:59:
                    96:3d:a9:4e:9c:57:ea:3a:4c:ee:d6:49:aa:73:b2:
                    6d:1e:ba:5a:ea:75:92:f8:5a:72:70:02:45:bc:15:
                    97:b8:45:2f:a3:95:25:df:c3:5f:1e:b7:22:cd:df:
                    b6:e0:04:5b:58:06:04:e5:4d:18:e2:83:1d:80:c7:
                    33:80:33:dd:f7:10:70:d5:10:76:1e:dc:45:60:31:
                    3f:ec:3e:59:8b:ca:24:42:de:7d:72:7d:e7:73:2d:
                    23:92:30:cd:85:2d:f6:9a:61:85:71:fb:3e:c1:98:
                    86:f8:99:ec:e3:45:ad:f5:24:94:a7:1f:f0:f2:f5:
                    7f:e0:ed:9b:42:42:11:d3:8b:f1:8f:8c:8c:db:78:
                    e9:2e:a8:8d:c0:30:fe:93:52:9c:e4:d8:b5:0d:2c:
                    ed:26:21:c2:12:bc:01:d6:a3:09:25:20:35:6a:86:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A8:BF:9F:81:6F:71:57:84:40:C2:CB:1F:8B:51:9D:AA:2D:26:5D
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:f5:e7:2c:4d:df:c7:d7:af:a0:d3:26:47:83:ae:0c:85:
         23:0c:8d:28:51:97:bc:e1:95:05:fe:3c:91:8b:ef:cc:79:41:
         50:c4:41:b7:a4:01:86:97:8e:eb:62:de:a5:d6:ea:0d:e8:06:
         cf:70:56:7b:fd:e9:4c:d7:ac:89:cc:0f:c6:94:8c:42:42:f5:
         69:97:4d:ee:60:e9:0a:d4:ae:bb:96:43:fa:29:97:43:c3:e8:
         a3:33:c2:df:57:05:6c:97:22:98:30:a3:85:a5:d1:20:b1:cf:
         e5:14:3a:88:0a:b8:7f:73:04:4c:f7:74:75:96:dd:d2:8d:b3:
         77:0d:74:8e:55:4a:27:ba:85:e6:60:63:1f:88:f2:9a:71:1d:
         ae:95:29:c7:3e:da:56:a5:05:bd:df:e4:a8:a0:5b:3f:fd:83:
         0d:39:8d:24:43:ae:ae:c2:27:be:5b:25:1b:13:62:c0:13:d4:
         87:77:41:ee:c7:6b:81:2d:a0:c2:6a:89:c9:c8:92:c0:6b:8f:
         82:38:6e:c9:f8:be:2a:63:18:f6:81:e4:76:9c:88:9f:57:9c:
         d8:ab:af:ca:65:d9:d2:42:e5:f2:25:7a:06:13:3b:60:5d:f2:
         b7:1d:80:08:cf:35:5a:93:ae:c4:11:ad:96:b5:63:c5:74:1b:
         93:5b:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:36 2024 by rpki-client on console-fra.rpki-client.org