Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File:                     Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier:          FaaTidRObrBKUhIMzZkVxk+Us4tO8BZsTA/9UgHzN04=
Subject key identifier:   14:91:35:10:A3:8C:EA:7C:33:CD:B2:2A:CA:8C:61:65:3A:CC:F2:2B
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer:       /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial:       018F8892540B8BB5A3EE72736525E47638AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number:          10E2
Signing time:             Fri 17 May 2024 22:00:41 +0000
Manifest this update:     Fri 17 May 2024 22:00:41 +0000
Manifest next update:     Sat 18 May 2024 22:00:41 +0000
Files and hashes:         1: VrK7ZVHiEAAleDsf3-N7X3zJShY.roa (hash: 7FPOAR4JEvP6rC10M+5J0vKZ4rT0pM34/ZK+NClyv94=)
                          2: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: 386tStrOp2H1qZbo+D7nD3fw6Q8niKJURLQg3UihLNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:54:0b:8b:b5:a3:ee:72:73:65:25:e4:76:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
        Validity
            Not Before: May 17 22:00:41 2024 GMT
            Not After : May 18 22:00:41 2024 GMT
        Subject: CN=14913510a38cea7c33cdb22aca8c61653accf22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:8b:0e:04:4e:91:94:c2:94:f9:30:83:13:
                    20:70:9b:73:fe:77:bf:9f:f9:e7:5e:a4:e4:d0:8d:
                    7b:17:d1:7f:d5:34:ff:25:b4:1f:f1:d5:6c:82:23:
                    4c:45:23:c8:1a:48:e7:91:99:00:cc:38:84:eb:27:
                    c9:0f:d0:09:3a:3b:b6:9d:7d:2c:6c:ae:21:12:fc:
                    a8:29:d0:16:15:9d:17:ba:a3:be:bb:ab:32:67:fd:
                    81:97:12:e4:78:d3:bb:c8:38:7c:9a:bd:67:47:54:
                    c1:dc:14:6a:7e:36:f3:65:92:50:f9:c2:f2:17:18:
                    f9:0e:71:e3:ac:b5:9e:61:33:5d:6e:17:06:56:e4:
                    00:bd:69:ff:20:98:ab:b7:c8:c9:65:1a:d0:02:eb:
                    1f:4d:38:af:91:92:3e:35:98:fa:e6:57:82:ae:8f:
                    73:09:bc:93:5e:c9:4a:2e:3c:9d:d7:c0:13:d2:ae:
                    4c:3d:d3:40:13:02:a5:b6:00:f7:1d:8c:a7:4f:0d:
                    54:d6:88:84:02:6b:60:1e:b4:f6:da:19:6b:51:b7:
                    c0:95:d3:8c:de:63:0b:c4:85:c6:8c:bf:16:b5:da:
                    3b:0d:db:bc:36:a8:66:9c:8f:64:b0:0d:21:31:1f:
                    e2:8b:af:c4:be:52:74:19:87:29:95:a4:44:7f:c7:
                    14:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:91:35:10:A3:8C:EA:7C:33:CD:B2:2A:CA:8C:61:65:3A:CC:F2:2B
            X509v3 Authority Key Identifier:
                keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:77:d3:d2:3b:c8:57:35:7c:b2:86:3d:28:67:18:ec:37:
         55:38:b5:88:5f:44:d7:a3:d8:29:49:d2:c4:d6:d8:3d:0e:ac:
         da:78:1b:f0:d7:15:15:8c:d1:05:8d:dc:69:74:06:f7:6b:fa:
         85:b5:9a:e6:20:b9:84:18:dd:12:02:48:1c:0c:09:a7:3e:e1:
         89:26:28:05:4a:7c:21:f3:6d:54:01:cd:08:72:5c:88:88:15:
         71:ab:fe:f5:6b:8a:30:08:43:5f:28:98:bc:e8:2f:3c:cc:05:
         98:eb:b5:52:3a:db:a3:2e:62:d9:b1:84:09:14:3a:73:39:3a:
         98:ca:b1:77:fc:d0:3d:dd:08:7c:c5:99:83:03:de:fc:83:17:
         ae:3c:fa:f9:6a:d1:91:10:f4:95:d2:8a:fc:13:be:ac:18:a9:
         47:71:94:c8:c5:4f:ad:00:94:db:4a:c6:b9:7f:62:d0:1d:b2:
         58:a5:aa:85:41:7c:a0:8f:75:cd:6f:95:f1:65:12:c2:6d:0a:
         40:a0:67:36:5f:06:57:fa:5c:71:05:ba:54:26:d5:a5:ed:8e:
         09:27:c7:df:05:af:e9:11:93:b3:90:73:fb:1c:2a:8b:91:68:
         ca:12:5f:3b:2c:65:ca:99:25:82:31:2f:0f:c0:5c:bd:44:ad:
         90:a4:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:41 2024 by rpki-client on console-fra.rpki-client.org