Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File:                     yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier:          c2FIKoNG78FLJQtBg0M3po53cyQ6MvJb+8gH9roJQSk=
Subject key identifier:   C6:12:62:0A:F4:D2:EF:0F:B7:C6:B7:8B:4F:C5:D0:14:33:89:9C:3F
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer:       /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial:       018F8748E185E0C76452E6ED319825B7BEFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number:          0DAC
Signing time:             Fri 17 May 2024 16:00:51 +0000
Manifest this update:     Fri 17 May 2024 16:00:51 +0000
Manifest next update:     Sat 18 May 2024 16:00:51 +0000
Files and hashes:         1: A-DZBVaUWIDr7jNNmD64yzgH0Uo.roa (hash: AJsmmwnMnc7Y+2eUCtvF92EzMnG8kJBtTWsCxd9tcX8=)
                          2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 1u0jyK5u6xtQx0PEfz/frBtfBhJFV0y533tES1A8BAI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e1:85:e0:c7:64:52:e6:ed:31:98:25:b7:be:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
        Validity
            Not Before: May 17 16:00:51 2024 GMT
            Not After : May 18 16:00:51 2024 GMT
        Subject: CN=c612620af4d2ef0fb7c6b78b4fc5d01433899c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:fd:97:d2:a4:94:77:90:95:20:4f:7c:0d:
                    f0:22:21:a7:29:a3:4b:bc:0f:9c:b7:82:fa:d8:a7:
                    38:d1:69:cd:e7:23:b6:2e:2a:19:f1:4a:64:1f:6f:
                    26:61:a9:10:41:24:d6:ca:db:b6:6d:76:8c:d2:4d:
                    61:64:b1:55:e7:c9:aa:1f:66:db:8d:51:63:76:1f:
                    12:3c:f4:32:48:c8:25:36:1e:8b:8d:5d:92:dd:ed:
                    eb:6a:55:97:06:c6:49:fc:64:bb:7c:ec:e1:28:5f:
                    39:6e:de:f9:06:39:f8:35:33:30:f5:6e:3d:9b:e4:
                    9d:59:0e:48:83:d6:65:a3:9b:eb:62:ed:44:46:53:
                    ca:3a:88:03:c3:59:c0:9b:8d:a8:5d:ab:db:b3:e6:
                    f9:49:5c:1a:5e:ed:a5:fd:fd:32:98:1a:74:88:b7:
                    64:0b:de:d4:65:12:23:4b:e1:12:3b:24:5b:ac:9d:
                    0e:32:e7:0a:0b:f9:e0:dc:57:32:8e:61:4e:c7:e9:
                    af:14:40:d7:f2:80:9f:e6:33:29:a9:3e:bc:38:e6:
                    be:2f:52:89:a8:3c:10:c9:73:5d:27:43:eb:9c:0d:
                    6c:1e:49:56:b8:09:59:ba:ff:95:02:6d:c8:af:5a:
                    dd:89:4d:40:37:35:f9:fd:94:fb:01:47:af:3b:ba:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:62:0A:F4:D2:EF:0F:B7:C6:B7:8B:4F:C5:D0:14:33:89:9C:3F
            X509v3 Authority Key Identifier:
                keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:29:9a:60:3c:a4:78:5a:eb:01:6a:09:83:bf:26:d6:5b:17:
         af:ce:53:40:24:ab:cd:75:4b:3f:d0:77:44:dd:24:79:36:e6:
         46:bf:0a:23:42:7b:61:ef:3d:bf:ac:56:25:53:90:4e:c9:94:
         84:48:98:0e:4d:64:e1:30:89:92:24:f7:26:85:13:ff:76:3d:
         68:ff:b9:93:2e:0c:02:aa:13:6a:74:7a:de:6d:ca:21:01:4a:
         a8:26:7f:11:0a:58:74:16:63:ee:07:0f:8e:0b:d8:24:46:65:
         1e:c7:57:79:22:e5:f7:d4:c8:5d:55:f1:9e:1c:f8:0b:78:e7:
         e3:b3:37:1f:5c:c3:50:63:f0:29:31:23:0f:6a:7b:f7:bb:01:
         25:72:6c:b7:61:7b:6b:fa:28:6a:8d:30:38:7e:8a:7d:a0:4f:
         21:dd:eb:7e:8c:58:ad:37:1c:a4:bd:24:da:03:db:7e:31:56:
         50:78:a5:21:02:34:74:d0:78:18:d1:e7:7b:34:0a:01:00:47:
         19:c4:2b:f7:50:d7:39:6d:8b:0b:53:89:fd:79:da:63:89:be:
         62:e8:e9:14:f5:f5:d8:34:81:26:dd:c1:98:42:81:02:c7:c7:
         7c:af:73:6a:ed:66:e6:a0:a1:69:70:03:41:08:f2:5a:f5:50:
         95:68:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:33:24 2024 by rpki-client on console-fra.rpki-client.org