Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File:                     Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier:          NYqVqBxfwNS5jLiOGJ2QRoOh66X68KpXJVjVU7SZzC4=
Subject key identifier:   07:1E:9D:7B:B2:89:33:A7:2E:1E:3C:D0:C0:E0:48:81:98:23:6A:F4
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer:       /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial:       018F87ED0D873B9262814025027AEF660AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number:          0A3B
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: BGDWVX_LLlbx3kqY9fFrPifeHVo.roa (hash: 2YYYGV45QIsRK7UF+2FZhyLXI9BR1kWwqP/D6lJoEy0=)
                          2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: t+iPWV+IxDsCSpqNbjoRrDNryiRXiX+I4QM1J0SYoQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0d:87:3b:92:62:81:40:25:02:7a:ef:66:0a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=071e9d7bb28933a72e1e3cd0c0e0488198236af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:04:0c:94:53:8e:4c:63:dd:54:bf:95:db:
                    7f:61:07:94:b2:54:b6:8d:d6:37:aa:18:1b:99:c5:
                    fd:45:1f:d8:a9:c4:1f:64:69:81:44:51:ef:20:7b:
                    4e:69:d1:da:77:ec:14:a1:30:ca:6e:bc:32:3f:17:
                    64:ea:a0:c6:f9:42:9e:f6:73:b8:87:66:27:a2:17:
                    00:d8:8e:a3:07:95:07:b1:3a:11:53:a4:88:40:83:
                    06:4f:c4:31:c6:28:e3:93:dd:82:c1:04:dc:f3:e4:
                    a4:fa:cf:60:47:32:67:9a:ec:e4:3c:98:c8:68:10:
                    c6:ed:d7:10:0f:8c:d5:57:b6:7d:88:a5:01:da:e0:
                    41:50:1f:ac:c9:b6:6b:cd:e3:b0:f9:af:8c:4e:38:
                    be:47:fd:b6:56:c1:ba:ed:43:f7:ee:f2:af:35:1d:
                    b9:8a:ee:55:b1:be:ed:95:f3:7c:9e:f8:12:26:bc:
                    ce:9d:eb:f1:00:f8:69:92:d3:c6:ab:f7:be:be:d5:
                    23:0c:e3:df:fe:2c:81:d7:b6:df:43:dd:22:7f:64:
                    a5:46:36:40:aa:14:43:98:49:b1:72:75:fa:1d:b5:
                    f9:be:e4:c5:89:bd:c4:04:36:ed:76:a6:c9:9f:95:
                    4c:60:87:94:71:44:ce:07:d3:f4:8b:cd:e4:78:04:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:9D:7B:B2:89:33:A7:2E:1E:3C:D0:C0:E0:48:81:98:23:6A:F4
            X509v3 Authority Key Identifier:
                keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:f3:4c:73:da:61:0e:31:73:74:db:56:94:a3:d4:d1:d5:
         e1:2f:1c:a2:f8:2f:84:cb:ca:64:d3:f9:91:d5:b8:ee:cd:c7:
         99:ed:11:20:dc:43:e3:53:0e:f7:d0:53:4c:32:4c:84:7d:34:
         e0:7a:c1:85:f8:f1:0d:e7:6d:79:ab:de:f7:f3:b3:83:d4:cb:
         8b:09:88:48:4a:75:33:ad:d7:6f:32:90:ea:3d:4b:e9:86:f7:
         3a:6c:67:17:47:dd:03:c6:48:69:a8:3c:c6:8f:b4:6a:eb:f8:
         b7:83:73:14:e9:5f:5e:31:a2:a7:c2:cd:32:1a:53:68:7e:e8:
         d5:bd:cd:3f:07:ad:0e:c1:c4:24:b1:e5:bf:81:d2:1d:c2:77:
         93:7a:8a:2c:95:9a:01:8d:bb:fb:30:3d:82:79:b0:9d:b1:7b:
         15:43:b0:10:2b:01:96:f5:c3:20:3e:c9:a8:6f:68:d2:53:07:
         a1:3d:ba:58:10:dc:6d:72:d7:97:fb:c6:a7:a8:7f:cd:16:c8:
         ef:a8:2c:f3:43:53:10:84:78:ab:1c:1f:ca:9c:c2:00:af:57:
         01:c1:7f:b2:d4:d6:58:70:83:87:bd:13:6d:29:93:38:08:eb:
         f9:24:a1:8f:f1:73:7e:89:69:f9:37:1b:11:9a:3b:42:2a:0b:
         49:9d:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:50 2024 by rpki-client on console-ams.rpki-client.org