Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File:                     YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier:          fQutd9UcsSS3PHJca37NS+kUPlXu+QJQsV1IfRp8PpA=
Subject key identifier:   B2:63:76:83:3C:B9:F4:E4:D2:5B:96:B7:60:D6:CE:64:9D:74:BF:65
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer:       /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial:       018F8748A0C138DCB37C7BEF1A85DC7026B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:34 +0000
Manifest this update:     Fri 17 May 2024 16:00:34 +0000
Manifest next update:     Sat 18 May 2024 16:00:34 +0000
Files and hashes:         1: 2zOjSO0CJh3GW9hAKIHlDJnnHHI.roa (hash: 4MnNYkcgBCCk/gXV0Yj+ZUjDjAzpOlipkQGbZ2gDmJU=)
                          2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: d9gsSwGF/h9Dob7CB17bt0EevnISyQwRp77sIjMIAGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a0:c1:38:dc:b3:7c:7b:ef:1a:85:dc:70:26:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
        Validity
            Not Before: May 17 16:00:34 2024 GMT
            Not After : May 18 16:00:34 2024 GMT
        Subject: CN=b26376833cb9f4e4d25b96b760d6ce649d74bf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:0e:1e:d3:cc:92:b9:3c:b1:b3:39:c2:f9:
                    6d:f2:c7:e7:b8:46:a4:10:f5:00:a3:28:b4:73:dd:
                    96:ef:73:59:60:7a:ab:0a:b4:a9:50:c0:ff:3b:44:
                    93:b3:89:40:2e:55:70:4c:d8:7d:f1:52:26:c3:b8:
                    41:f5:cf:78:fa:b3:5a:22:e6:35:4b:4e:54:f3:fc:
                    d1:e7:96:87:ed:3d:b8:55:20:84:c3:8d:d9:d3:52:
                    40:1e:0d:b2:cd:32:8c:61:dc:a3:d9:0c:a1:09:74:
                    bd:94:c8:b6:13:40:16:0b:09:ce:75:7f:a1:33:0f:
                    ce:50:26:78:a9:16:4d:a8:7f:b4:8d:94:90:51:01:
                    97:bc:90:f7:5a:a0:94:14:1e:37:01:40:b7:c3:7a:
                    42:7d:5b:b1:af:aa:b3:61:a5:e5:4f:96:94:8f:07:
                    a6:be:57:f6:a4:cb:ca:3f:4f:77:14:a6:52:c7:ef:
                    54:3a:4b:bc:b9:fa:83:83:55:32:28:5b:6b:38:4c:
                    46:29:cf:66:2e:43:41:da:b0:87:52:fc:ec:fd:96:
                    4e:f0:b2:6c:3e:35:e6:94:82:35:f0:1c:2f:b0:b4:
                    26:25:b9:73:1f:51:2f:1e:77:7c:68:4d:6a:6e:4f:
                    32:18:73:3f:15:bc:18:0c:bf:67:a7:4d:ab:ed:8b:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:63:76:83:3C:B9:F4:E4:D2:5B:96:B7:60:D6:CE:64:9D:74:BF:65
            X509v3 Authority Key Identifier:
                keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:51:c0:3b:e6:d0:15:c6:a1:0d:9d:82:75:7d:c0:0b:90:48:
         7c:d7:16:19:96:57:90:27:ca:10:8d:fb:3c:62:eb:ab:f5:85:
         c7:b6:62:02:4c:95:27:af:06:58:3f:2b:70:2a:88:6c:f2:90:
         53:97:ec:03:75:b2:6d:98:14:67:4b:f9:ae:6c:75:15:ef:d5:
         d9:8c:3b:4d:54:80:b1:6d:70:f1:7e:46:31:bb:99:4c:1e:42:
         5f:51:15:65:92:95:f5:8e:dd:d8:1e:3a:bf:3b:97:ea:3d:ec:
         e6:c3:42:41:d6:19:02:4c:00:07:cf:80:f4:7b:91:06:fd:f0:
         5f:9f:c2:fc:d8:56:fb:59:83:74:95:81:79:15:e3:10:d4:e3:
         7a:4f:8e:dc:25:78:92:a6:9f:02:ca:9f:b3:ee:d5:93:e0:6c:
         c9:39:1c:d9:3e:86:cf:7f:7c:9f:b0:41:81:7e:ba:d5:92:58:
         ba:a5:b6:51:46:a0:54:37:e7:51:e0:a0:1a:d3:ad:fe:b3:9c:
         80:e0:fa:94:3e:83:af:92:1f:95:14:93:a4:1f:14:18:69:64:
         69:40:52:f3:65:79:b0:1c:0b:c0:c0:15:dc:0f:87:4f:2f:ad:
         16:e2:58:7c:8c:44:5b:5c:b7:32:ed:6c:7c:a3:c1:eb:30:65:
         99:d0:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:30 2024 by rpki-client on console-fra.rpki-client.org