Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File:                     yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier:          FKJob1uoqH7OIxEbJmZ3GUyskSGSVUmIZMnj3hue3N0=
Subject key identifier:   B5:3A:28:FA:99:0F:DD:14:8A:96:35:0A:58:14:F8:13:47:CC:2F:5F
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer:       /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial:       018F87ED6D9AB60A87FC470B17664911F4FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number:          07A5
Signing time:             Fri 17 May 2024 19:00:35 +0000
Manifest this update:     Fri 17 May 2024 19:00:35 +0000
Manifest next update:     Sat 18 May 2024 19:00:35 +0000
Files and hashes:         1: 1-_KVwbZv_G8RZ2k6-hNKnrfUl2Q.roa (hash: TPCasxvNzO6h+m1eSPcTP2RR4bJHtKU5vosaTBro21E=)
                          2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: sLudWmHZefPohmdOCKyynqDwRRc5GlSEYBbBP4S1z9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6d:9a:b6:0a:87:fc:47:0b:17:66:49:11:f4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
        Validity
            Not Before: May 17 19:00:35 2024 GMT
            Not After : May 18 19:00:35 2024 GMT
        Subject: CN=b53a28fa990fdd148a96350a5814f81347cc2f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:41:f1:92:a7:ed:cb:5b:e6:71:03:b6:99:
                    a6:36:da:d2:88:6c:c3:67:56:b4:fb:ef:6b:17:5c:
                    96:a9:08:9d:28:3a:74:2b:2f:32:2b:4e:32:59:02:
                    79:1b:65:cd:6f:97:b7:e1:14:17:d8:58:31:ed:b6:
                    7a:8a:9c:5d:00:38:27:0d:33:cc:97:e7:5b:59:bf:
                    9c:7b:3d:73:d6:c1:14:14:f5:ed:3d:fa:a7:21:30:
                    8c:f2:6e:32:2b:ec:3b:dc:f5:e7:a4:94:c4:d5:93:
                    0f:0e:2b:fa:73:57:76:7b:95:9f:f3:2b:f3:86:2c:
                    b9:9a:9a:3a:bf:2b:7f:d4:68:81:44:57:66:90:c2:
                    72:ef:21:b8:79:0a:3b:e5:9b:92:e1:20:f1:4b:ab:
                    00:f5:18:72:16:fd:fd:b4:74:0c:28:e2:8a:7a:c7:
                    c1:8c:0d:b9:2d:bc:68:ef:5d:91:53:30:7a:b7:d0:
                    30:1f:3c:18:47:c9:9a:ef:6f:6e:6f:d9:56:7c:66:
                    70:98:70:36:ad:e1:c6:0d:e5:2f:76:3b:40:bf:57:
                    6a:af:5c:6b:f0:9e:f5:f2:98:3b:b2:17:4e:e5:0b:
                    0a:6e:3a:8e:d8:af:b8:b7:b7:d5:64:38:64:f8:55:
                    52:2f:06:fb:c9:9f:79:99:65:d0:9a:e7:a1:bc:3f:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:28:FA:99:0F:DD:14:8A:96:35:0A:58:14:F8:13:47:CC:2F:5F
            X509v3 Authority Key Identifier:
                keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:19:89:25:f8:af:35:1e:f9:4d:a3:52:dc:b3:91:0f:50:1a:
         ca:8a:68:2f:57:af:c9:c6:2b:30:c8:1f:90:2b:a8:7e:da:69:
         2c:1d:93:b2:8b:7d:bc:5c:01:20:32:18:9a:d3:34:1d:43:a7:
         c9:93:15:98:cd:4c:dc:3b:c9:6b:07:3e:05:84:61:7f:4b:40:
         98:8c:1f:09:da:6c:4a:22:e3:e8:73:19:3a:ba:4c:f4:75:0b:
         1d:e2:c9:b2:8b:0a:aa:02:54:88:c3:cb:07:24:ee:e7:68:d3:
         6f:cc:f4:b1:34:74:14:71:1e:30:60:1f:d2:74:bf:94:d7:f8:
         17:5f:38:70:0a:e5:15:09:fd:67:a6:60:74:68:e3:7d:75:fb:
         fd:31:9b:6f:a2:e4:3f:dd:c5:c1:e5:93:49:de:d7:4b:c1:7e:
         99:f0:4b:c0:0e:66:78:a1:f2:ab:59:1d:46:12:62:ef:59:ff:
         7f:a6:60:46:9e:71:c8:73:2d:ae:45:40:1a:a5:49:e7:4c:68:
         26:ef:2f:ac:f0:20:cb:10:b7:6a:ec:fc:7f:19:08:9b:4e:b1:
         4a:54:e7:de:9f:b9:3d:32:82:22:c5:c0:fb:a8:05:ae:e6:de:
         26:ef:ab:c9:a6:05:83:bd:3b:f6:0f:fe:52:63:01:7c:22:9a:
         90:18:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:36 2024 by rpki-client on console-fra.rpki-client.org