Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File:                     YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier:          VcqmX6xjhkrwPPj3tWm8D0WGpgbfZjl0oBxj71XMkUc=
Subject key identifier:   5E:14:00:5F:DC:30:38:04:39:64:D5:27:4B:64:72:8D:47:88:D6:B7
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer:       /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial:       018F9B3D980E3E68BE653D0F1E7321877FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number:          CD
Signing time:             Tue 21 May 2024 13:00:56 +0000
Manifest this update:     Tue 21 May 2024 13:00:56 +0000
Manifest next update:     Wed 22 May 2024 13:00:56 +0000
Files and hashes:         1: 9-PliPH2H9IzErU3124xJiI0a24.roa (hash: eLYQWZPTmU3vtoy94+IM/DHlKxrtgFfzydRLizZdhrI=)
                          2: Vc-AJY8djuEuWrQOrcoCQNaI5nk.roa (hash: byXSvPLEmgT/upMrQHY4dNuhpGAQTYEgxU16cpASFDE=)
                          3: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: qgywALXaR2NgyeWX3UAZtOKTKpABjULaiSRGKPZ0umM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:3d:98:0e:3e:68:be:65:3d:0f:1e:73:21:87:7f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
        Validity
            Not Before: May 21 13:00:56 2024 GMT
            Not After : May 22 13:00:56 2024 GMT
        Subject: CN=5e14005fdc3038043964d5274b64728d4788d6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:e4:07:e4:2e:db:15:6c:35:17:29:5f:70:
                    a1:5a:df:32:a1:c5:11:05:68:1c:25:20:6c:dd:58:
                    d3:a0:09:05:1d:0d:21:b6:49:23:26:15:aa:bb:62:
                    c3:56:90:a2:f7:61:34:7e:70:ba:d9:28:42:e0:b2:
                    06:c4:9f:34:2f:05:19:f8:b1:d2:30:76:9e:8b:46:
                    51:3b:99:e9:2a:46:d3:ef:66:38:81:07:a2:7b:02:
                    0f:8a:29:81:bf:ea:0b:02:87:e3:08:f4:92:e1:8a:
                    3a:eb:e3:44:97:b0:4b:a8:c2:0f:50:b5:3e:71:d2:
                    e2:5e:63:6a:ea:4a:3c:a8:49:89:66:a6:70:c4:13:
                    64:45:b1:c8:4a:f3:10:9b:66:47:02:e1:d8:8d:cc:
                    eb:52:d8:e4:26:a5:3d:d3:39:24:fa:8a:a1:74:89:
                    c8:18:57:54:9c:8d:4b:29:52:d2:5a:e5:0b:8d:99:
                    55:5c:0c:ca:c0:81:64:c2:41:e8:91:f3:13:43:2a:
                    77:12:0d:4f:f9:4e:ed:1e:b2:60:13:ca:be:c9:5c:
                    dc:02:6c:eb:b2:25:d6:59:da:45:6b:44:1d:7d:90:
                    0c:7b:08:92:f2:6b:01:2d:06:5f:47:b3:30:be:93:
                    78:ac:a7:55:0c:14:c5:11:91:f6:fc:d5:d8:2f:e5:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:00:5F:DC:30:38:04:39:64:D5:27:4B:64:72:8D:47:88:D6:B7
            X509v3 Authority Key Identifier:
                keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:72:ab:98:43:e1:e0:e0:54:15:82:c0:43:bc:d7:91:13:c5:
         a5:7a:82:c3:34:79:ee:77:1f:01:69:4f:b4:7b:32:47:6b:2d:
         60:68:ca:e0:3b:d0:33:9a:3c:14:dc:cd:33:df:07:72:cf:33:
         99:9e:96:09:3a:bd:c4:bd:61:e0:1c:99:33:d4:75:e5:68:d4:
         75:8f:f0:c3:4c:c9:14:5a:89:41:be:af:9b:47:bd:50:2e:13:
         50:14:fc:0f:18:1f:27:02:48:23:d8:86:59:a3:d0:14:0b:96:
         07:6a:3e:7c:7d:13:4f:cc:ab:3d:31:84:4e:ad:3f:28:cf:a7:
         46:8d:09:b3:50:90:bd:cc:1f:d2:60:22:41:5a:07:05:10:0a:
         65:d3:96:10:f7:5d:0e:71:1d:40:cd:b6:59:03:7c:d6:35:79:
         8e:f5:09:c9:f6:f8:27:f2:3b:07:e0:81:4e:de:f2:e2:f2:ed:
         9d:be:b7:6f:08:2c:c4:34:80:04:13:68:23:b2:f3:d9:40:98:
         bc:35:fa:85:4a:d3:3e:e3:98:2d:73:c8:42:e3:20:7e:9d:89:
         08:0e:39:56:f1:b1:fc:09:bd:8e:65:f5:a5:fd:c1:cb:f2:ab:
         80:21:9b:0e:93:4c:e6:09:58:74:4c:b3:b2:9a:7a:a1:20:b6:
         2f:6f:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:57:22 2024 by rpki-client on console-fra.rpki-client.org