Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          6985yRz2W9L1DWKD1BtnoUpkIl5f/tETc9baMDSgvKw=
Subject key identifier:   FB:C3:B8:17:11:88:B6:A1:20:05:40:08:DE:D2:E0:AA:F3:76:46:C4
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       018F9FBF8AE87A9221F77AC1B35E6111DB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          1186
Signing time:             Wed 22 May 2024 10:01:21 +0000
Manifest this update:     Wed 22 May 2024 10:01:21 +0000
Manifest next update:     Thu 23 May 2024 10:01:21 +0000
Files and hashes:         1: 1-h9YodcJ1W0mp0ptB6vPGtH0V00.roa (hash: FCUFjmPEfeBXY72gIRJOTXr81aiNbeuYwURt8UCdmXk=)
                          2: 1-lKYoCjCEzGyyH3ykDoqAOnZaks.roa (hash: O6kWADPYzWzYlgRDv1DNzYM91gsOXvLZGZdVvS7aDi4=)
                          3: 8VQilzbD5Z1nRDFLgdVT_RU9ibg.roa (hash: EluiuG1WLIw+NyVDUeesDmYjI2s94QoQa+qn94Adwoo=)
                          4: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: 8p2tCwEX2IDJzYPZVu6fBTLTuSzqsrGpcwL4Zhh/aME=)
                          5: k7mrxpRnIiB-VMAyPQX68YUcFDY.roa (hash: wc/eMbkU81FbtPtenM61LUfRvBvuUf1s4vYZjIxbMrM=)
                          6: nQjjjRY9rmA7uOAzSdFE56D4Omc.roa (hash: tMu2Q8Qa6bV4UIFX6InFOPla8uiT1sFSNMOxBWAsBqY=)
                          7: rgzH7zrBlADqKZY4M8FtAsOaSgs.roa (hash: +p4VrFjQuaGpJWdcAYB8eg7JZHA2Ur26VwotVAZReEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9f:bf:8a:e8:7a:92:21:f7:7a:c1:b3:5e:61:11:db:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: May 22 10:01:21 2024 GMT
            Not After : May 23 10:01:21 2024 GMT
        Subject: CN=fbc3b8171188b6a120054008ded2e0aaf37646c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:8f:28:01:1e:12:c6:6b:da:20:f5:02:53:
                    3e:89:8e:4e:c9:e0:a2:ae:1b:36:a4:38:07:ee:c5:
                    67:52:7f:db:2e:4e:8a:97:9c:55:ba:e2:71:57:e5:
                    2f:e2:61:9f:e5:44:9e:7b:02:aa:7b:15:85:99:cb:
                    41:30:9f:9f:08:3e:0d:2a:51:73:c8:45:71:44:70:
                    b3:8c:0f:c5:99:48:74:2e:7a:5c:45:d8:39:24:50:
                    a4:51:d7:b5:81:d7:cd:2e:22:fb:17:ec:91:f1:a0:
                    79:13:36:47:8f:68:02:f0:ce:05:72:9f:7b:f7:67:
                    91:2d:e8:5b:ee:4f:f3:68:98:c3:7e:c5:9d:67:c2:
                    7d:90:e2:bf:59:5f:08:08:e7:fd:52:26:17:4a:ab:
                    6e:aa:e9:98:a5:be:c9:bd:55:73:30:2e:2d:cc:4e:
                    31:9a:28:cb:e2:12:25:58:59:15:20:3e:a5:b8:8e:
                    ca:99:2c:40:12:a6:5a:09:12:5a:38:b2:5d:a1:a0:
                    da:7f:77:a0:8a:b0:6c:03:59:98:8d:81:c1:6b:f8:
                    b0:99:f8:e0:3a:2a:14:6a:9c:68:15:b5:cf:c2:7f:
                    2b:8a:19:dc:19:20:fa:da:f2:48:1f:bd:10:9c:93:
                    36:3f:ca:cc:b5:0f:1f:e0:dd:4e:cb:f9:3d:9c:f5:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C3:B8:17:11:88:B6:A1:20:05:40:08:DE:D2:E0:AA:F3:76:46:C4
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:60:63:2b:af:b8:0e:51:7e:58:80:6b:bf:44:c4:06:44:a3:
         10:50:57:dc:44:c9:49:a1:2a:d1:ec:22:5b:e7:2b:3f:cc:bd:
         9f:0c:a1:16:cd:56:a7:0b:90:51:eb:d3:38:cd:1c:92:63:f5:
         c5:44:c0:6a:ee:c1:d3:8d:00:50:2a:fe:37:86:89:2d:35:9a:
         c0:97:77:18:60:34:c1:dd:cf:ae:e1:15:26:13:d5:ec:9c:2d:
         e4:ad:f0:34:39:0c:c8:6f:e8:61:72:aa:80:a2:27:ae:c1:e7:
         5d:90:fa:ce:06:b8:8f:6a:d1:52:97:bb:9c:b4:1d:00:61:f9:
         47:7e:a8:e0:ca:d8:48:82:e6:31:08:f8:a9:b5:cd:e7:8c:00:
         a3:fc:a4:af:9f:eb:5f:e0:4f:9f:8c:d9:af:41:19:da:26:98:
         99:c7:b2:54:81:65:7d:ac:ea:7c:27:8f:d7:3b:fe:3f:b9:49:
         76:ca:5f:0a:40:29:7e:39:64:b3:68:8f:05:30:ca:27:98:b4:
         33:44:2c:7d:21:dc:45:fc:fd:43:9c:df:d1:1e:07:90:f2:de:
         59:43:3b:79:91:91:f7:43:e6:97:e3:68:d1:1c:4a:ca:8d:ae:
         fd:5c:22:6b:2c:52:e9:52:c4:e6:7b:8b:bb:6b:48:87:f3:ed:
         39:1f:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:04:30 2024 by rpki-client on console-ams.rpki-client.org