Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File:                     YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier:          ehUIN5LhVZ1GaV2SN5ndacy833Kj2pvCplXH+H0K3MI=
Subject key identifier:   66:8A:2D:A7:AE:DF:99:5F:DE:74:55:F4:08:2A:50:DD:7B:2A:F6:42
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       018F6E312D23F9FDB3357FFD79C6CAA1097C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number:          1171
Signing time:             Sun 12 May 2024 19:04:27 +0000
Manifest this update:     Sun 12 May 2024 19:04:27 +0000
Manifest next update:     Mon 13 May 2024 19:04:27 +0000
Files and hashes:         1: HTWMAaTmIui8YRsSWEtkfNN7zPo.roa (hash: +kS99tqLV7rTQxZKg9xRg7GZIlpwFyBPGQnzwyTLQm8=)
                          2: O72hZCw7ogAK4qSxeBuduomGKCE.roa (hash: VFoqrlQ+OjcQVfMvnT3en/fbOrKUvRwyHB+JIbf9utE=)
                          3: SBuFwo1G2Tw9ZLL8U_XwukslCY8.roa (hash: piz14vfRa+FIfPFAlq5Ou5o7bOut9fSiJIyhfzC7kZg=)
                          4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: 3DszACT4E622/4IvC+hzZW4Xf0hokuVQCZ2ruM+/Ijw=)
                          5: cMSFLLLaamx9cnBXhVEAZD7TEJM.roa (hash: y6L4d8NAxr2/u2C/sUkHPfi9+JO/aR3nDyamPkfmAiI=)
                          6: l6VaTvd3SFnEDXLh3CqzvoDm-B0.roa (hash: XyDimzYP6PKNv1LhCPkxaVMSs5AWv6rr9VUXOuQ0D9g=)
                          7: ymmwU-S0s2qZKMYgvnfNrjAdQUQ.roa (hash: roWsHVRN5kmuNyxoDQBZjSEiQoZVe196TBlViKY9irA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6e:31:2d:23:f9:fd:b3:35:7f:fd:79:c6:ca:a1:09:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: May 12 19:04:27 2024 GMT
            Not After : May 13 19:04:27 2024 GMT
        Subject: CN=668a2da7aedf995fde7455f4082a50dd7b2af642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:a1:ea:99:2a:47:4c:e9:b0:a0:53:5e:f3:
                    63:ca:b8:a7:d5:a6:d3:76:49:87:bf:d4:cd:be:1f:
                    65:a5:0d:3d:6c:32:e6:00:e6:94:3b:ed:09:61:e0:
                    56:80:67:38:25:ee:61:c5:90:f6:ba:09:b3:9f:ca:
                    85:a3:5f:a7:a4:7b:30:9d:9c:35:54:35:60:4c:6d:
                    a5:c2:b6:d3:ba:cb:9c:ff:16:51:6a:c2:6e:69:94:
                    49:53:f2:30:39:8d:6d:0e:14:5a:8f:a0:41:6c:36:
                    b2:f0:62:16:e1:b1:54:21:f4:5b:b1:3d:32:c6:a9:
                    e4:43:03:08:68:fe:52:c4:ef:c4:43:f8:8f:b2:1c:
                    5c:4a:6a:55:71:ba:78:88:06:79:bd:04:dc:6c:e5:
                    1d:e7:5c:39:26:a1:f7:e9:94:29:fc:bb:7e:ee:8a:
                    12:9e:3c:e2:fc:83:1c:b6:da:8f:5f:7c:2a:d3:c4:
                    9f:e5:14:ed:5c:7d:93:e6:83:8c:e3:06:c8:46:60:
                    68:11:c2:02:23:75:ad:34:9b:3d:ff:2c:87:a0:bc:
                    bf:e0:c3:7a:f1:13:2c:d5:f1:b6:bb:70:a1:96:cd:
                    7e:0c:89:6e:d4:d4:1c:50:a5:0d:b6:71:ee:8f:28:
                    d8:9e:1c:15:55:ca:49:ac:29:32:6d:e1:28:c6:6f:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8A:2D:A7:AE:DF:99:5F:DE:74:55:F4:08:2A:50:DD:7B:2A:F6:42
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4e:17:f6:ca:47:84:38:f8:77:9b:22:f8:f8:05:9b:27:a8:
         1b:fb:e9:cf:ea:34:8a:f9:f1:36:cb:8b:c1:b3:c3:cf:5b:1d:
         e8:be:db:2e:a7:00:1c:39:cd:54:1b:35:11:cf:89:2e:8e:b9:
         21:cc:41:2c:b3:b5:0b:8a:80:04:9b:3e:95:d9:ca:d5:bb:38:
         40:37:0e:44:e8:bb:96:71:3a:4e:47:5c:c4:25:77:38:60:4d:
         c4:77:9d:22:9a:9e:fd:ed:af:15:65:2e:b5:20:59:5a:34:45:
         9f:0b:89:75:b4:7a:69:a0:c0:ec:fd:8a:b4:fd:26:9d:2f:e5:
         06:c1:1c:14:2d:0b:06:20:ff:1c:44:ce:00:0e:a4:ca:ad:a8:
         79:98:bf:b9:12:9c:40:5c:d8:74:2d:b2:90:c3:c0:e1:3a:40:
         41:2e:a5:34:bd:27:eb:19:d7:9b:52:34:5e:94:1a:4b:39:8d:
         21:71:94:d3:2d:52:fd:7b:43:3e:ed:62:89:ee:88:43:2e:41:
         57:fc:ae:c9:4e:68:f1:b7:7e:08:03:5a:dd:99:ce:64:85:65:
         c7:d5:7d:e5:2a:b6:2d:da:07:18:97:f2:7b:f1:1e:06:36:69:
         13:09:29:34:04:a3:04:8f:66:55:cd:20:3e:77:5b:79:f3:14:
         0c:5e:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:15:54 2024 by rpki-client on console-fra.rpki-client.org