Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File:                     Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier:          ZP1bNLap7QkYSds5c2UV9LyOAo4O0B0UGVw+93ZWB7k=
Subject key identifier:   64:55:33:6E:15:25:70:00:EC:36:48:59:F7:FB:7F:E1:D8:C9:67:F9
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer:       /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial:       018F8749106BBEF9AE98057399CE1EFF7277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number:          03A4
Signing time:             Fri 17 May 2024 16:01:03 +0000
Manifest this update:     Fri 17 May 2024 16:01:03 +0000
Manifest next update:     Sat 18 May 2024 16:01:03 +0000
Files and hashes:         1: 5LCXLciJTIOeGBe2lfSh303G1ms.roa (hash: fHXvOJ+uDwg3sDNE4e+/nhiJ4gsatgtbcikma2Kn9d8=)
                          2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: Ay3L+lcJee6FaCZLVyoL6jAxkzckpE9SV5ULrJTfpZk=)
                          3: y7jOkakHfGqqeTYARetje6Xf3OU.roa (hash: 33G/TpnfK77/+s2lBvfACpadcLoXU/qWN60db4CAOoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:10:6b:be:f9:ae:98:05:73:99:ce:1e:ff:72:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
        Validity
            Not Before: May 17 16:01:03 2024 GMT
            Not After : May 18 16:01:03 2024 GMT
        Subject: CN=6455336e15257000ec364859f7fb7fe1d8c967f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:2e:93:2b:7b:93:bd:81:47:9a:11:dc:78:
                    ee:af:f4:cc:a7:7a:28:64:fe:d1:e6:c0:ed:65:d7:
                    0d:64:77:aa:3f:06:2a:a5:a7:63:ee:8f:85:35:53:
                    01:ca:8f:f8:e2:0a:d5:30:ff:3d:8a:03:6c:a9:a6:
                    cd:02:87:f8:2e:43:c5:65:3f:3a:0a:31:da:a3:05:
                    72:f5:ad:b8:07:1e:af:f1:91:10:c0:ca:1d:5c:06:
                    8b:8f:7a:b5:c6:45:9b:e4:f0:98:86:25:ce:20:b5:
                    d4:a3:b7:6e:9b:61:9f:16:00:92:43:ed:ad:14:0e:
                    d6:b1:c3:09:ab:41:c2:c5:94:9b:6a:81:93:2b:4f:
                    7d:a6:0c:2b:43:00:5a:dc:5f:fa:ec:f6:19:b5:d2:
                    90:ca:c3:5e:23:61:03:5e:7e:e7:47:b9:dd:f0:a7:
                    fd:59:e2:c3:b1:56:eb:d3:ef:b4:90:e8:6e:12:59:
                    ac:cb:05:12:af:15:65:60:0b:66:b1:c8:01:98:2e:
                    60:f4:04:cb:12:be:e3:ef:69:8a:7a:01:1d:d5:7e:
                    39:17:bd:b2:ca:e3:64:3f:5b:3d:01:fc:df:d7:72:
                    8d:6c:98:97:22:8b:30:e4:7a:d2:75:bd:d2:e7:1f:
                    02:24:44:8b:e8:67:52:07:ce:3e:08:21:10:f7:5b:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:55:33:6E:15:25:70:00:EC:36:48:59:F7:FB:7F:E1:D8:C9:67:F9
            X509v3 Authority Key Identifier:
                keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:ce:44:f9:e1:d3:e2:a4:17:ee:3f:03:4e:da:6e:8b:0e:
         ae:fa:24:f9:78:cc:ef:4e:b5:2f:24:14:57:63:fb:57:85:e8:
         b8:ed:ab:67:72:bd:20:1f:1c:41:35:db:07:8c:6f:c5:85:dc:
         fb:77:33:af:17:1c:a1:4c:23:3e:95:76:a9:af:38:07:e3:dd:
         1d:01:0d:a5:75:42:68:5f:45:95:0b:84:56:84:27:07:dc:a5:
         e9:19:81:0f:82:ff:84:02:bf:cb:74:d3:a2:d6:a1:95:a0:cd:
         d0:be:dd:85:ad:97:04:6e:52:47:64:a7:b5:7b:ed:3f:91:87:
         45:82:bc:41:31:0e:20:ac:44:4b:19:cd:95:b5:16:5a:ad:b4:
         8e:70:47:fb:28:8a:9d:1a:1f:47:ec:ac:c0:8f:d7:1c:7c:1a:
         f6:05:61:fd:3a:6d:cb:54:9c:e7:41:14:e7:07:ca:8d:68:cc:
         60:80:75:44:d5:a0:4d:5b:d5:18:b3:1a:00:5b:a5:68:d2:0f:
         48:24:f3:ba:c7:b4:6c:36:44:5a:64:8f:d5:89:93:0d:b4:cc:
         d9:b4:98:b3:36:ac:7f:98:71:ce:76:4e:19:dc:74:17:4c:bd:
         a3:5c:df:bd:de:ad:8f:6a:c3:cd:1c:95:2b:2a:61:51:34:6b:
         a4:00:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:33 2024 by rpki-client on console-ams.rpki-client.org