Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          gn2sz+C5T5fNmmVmeq5GfpyfFJAicxMdc07LmYzL8T4=
Subject key identifier:   32:A8:61:8D:7B:42:79:C8:D4:30:CC:34:95:B0:37:63:8F:DA:F1:25
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       018F87490DA41C22E7DBB78E8DA631EFA093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          07A7
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: qCuEPxxZZTMlpOCymuNkatazc/u6XRW5uoSW5DGJP6A=)
                          2: by1WBGbdrucBaRo0q-_LS8RJXEA.roa (hash: e6B7n3eIP0oThxv0Nfr/dMJAuQI2Dj6eyLiNLmlJ2RU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0d:a4:1c:22:e7:db:b7:8e:8d:a6:31:ef:a0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=32a8618d7b4279c8d430cc3495b037638fdaf125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:4a:18:8f:31:81:c6:46:ed:d3:8e:66:c5:
                    3a:66:3d:91:88:ea:90:c7:01:dc:39:c8:ca:78:d9:
                    2a:4c:c9:d0:03:c3:11:6c:76:57:98:5f:41:4b:2c:
                    ab:c3:63:67:ff:4a:c1:fa:a9:ac:83:84:57:78:85:
                    06:95:48:dc:8d:3a:b3:b8:41:44:ca:7f:be:8d:e0:
                    ed:8d:01:fb:da:6c:9f:9b:6c:d5:ec:84:4c:e8:b4:
                    5f:81:11:96:5a:60:17:e0:27:34:6e:12:94:0e:5c:
                    49:28:2e:b8:dd:71:3b:36:bb:74:df:b8:85:eb:f5:
                    c5:ba:e9:3f:d3:a7:7b:60:f8:d6:ab:df:13:97:80:
                    d2:c8:45:28:96:7b:b4:0e:48:9d:9a:9f:7d:a6:2a:
                    13:aa:09:e3:30:b7:3d:a2:7e:b3:54:9a:bd:2f:9c:
                    a2:2b:2a:32:57:73:93:6a:28:f1:d0:57:b5:5f:f2:
                    b2:be:de:f7:db:81:b5:bb:ea:51:de:8b:1c:dc:82:
                    89:73:25:f5:69:42:5b:ee:ec:64:58:91:ae:5c:ce:
                    3b:08:9a:93:00:e2:60:60:de:b8:8d:0e:d7:a0:9b:
                    db:be:67:f3:91:b3:9a:c5:8c:2f:20:aa:d4:3f:32:
                    9a:93:19:85:b5:c7:b4:da:5c:88:a7:8a:5c:82:52:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:61:8D:7B:42:79:C8:D4:30:CC:34:95:B0:37:63:8F:DA:F1:25
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:88:06:39:c8:1f:75:58:a1:89:36:b5:1b:d8:83:a0:1b:ce:
         1f:00:b7:0e:65:62:d5:81:e9:85:68:1c:fd:05:69:4e:94:68:
         44:52:1c:10:38:3b:b7:50:bc:5d:19:45:d5:14:dc:37:7f:bb:
         af:6a:50:fc:6e:05:fc:a5:4a:b7:85:31:93:a3:a5:a1:a7:03:
         ab:80:af:25:c4:ad:e5:ef:01:f4:12:68:f2:88:6d:bb:da:17:
         8e:22:49:88:e3:5e:4b:18:8f:f1:12:87:58:7a:da:39:46:6c:
         6b:b6:98:50:44:58:e8:2d:84:28:df:0b:00:71:27:a9:34:f6:
         3f:dd:cc:c6:c9:c2:2a:3c:c8:74:a2:0e:35:b4:0b:f9:a8:bf:
         2f:24:b6:7a:5f:ab:fa:16:c8:42:85:1a:a6:48:63:dc:4a:32:
         ca:f7:0b:a8:4d:1a:61:78:d7:a3:93:b6:72:a0:49:19:34:62:
         e6:7a:d1:e8:f7:ff:af:4d:d4:74:c8:5e:3b:d7:cb:bf:00:b1:
         a6:66:c5:88:e4:75:5f:3a:cc:fb:c8:e1:a1:d9:be:45:d6:84:
         a2:9a:c5:56:3f:87:a7:35:cf:c3:cd:f4:db:4a:00:14:b9:92:
         a2:b2:fd:48:69:af:af:3d:18:03:7b:2c:d9:63:a2:05:82:ca:
         0b:5e:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:22 2024 by rpki-client on console-ams.rpki-client.org