Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
File:                     yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json)
Hash identifier:          byGRBCTxiItiTG0S+oiebGHUGDmJxVI00dJMrfwi3mY=
Subject key identifier:   36:D6:3A:FC:DD:A3:A3:52:87:E3:D7:3F:2E:EF:3A:15:87:06:2E:55
Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF
Certificate issuer:       /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
Certificate serial:       018F87494795382FEC6860C4F5903ABF4150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: MwwdOT2I5Iy2c6-lg3CWBbBAZ5c.roa (hash: n8slOc5oDhc4OBbl4fx69Uf2ka0+xT/2A2maSGHZTWQ=)
                          2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: KjPUWep7SNSb/3YWIhqFUH4yEJ17M83jwhdHaWznh3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:47:95:38:2f:ec:68:60:c4:f5:90:3a:bf:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=36d63afcdda3a35287e3d73f2eef3a1587062e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:06:1e:ed:88:b3:16:07:2b:91:80:92:c8:
                    fb:eb:09:f8:ab:30:d3:66:3a:0c:98:4c:6d:c9:e6:
                    73:69:22:0b:4b:3b:bd:e3:a8:4d:0f:f7:23:e9:74:
                    be:30:be:b1:20:e8:00:23:14:83:76:6a:6a:09:09:
                    b5:17:79:82:76:e3:e0:60:84:bf:6b:ed:1a:42:97:
                    8a:0f:99:95:8c:95:9f:31:8f:a4:07:2c:ac:a0:31:
                    3e:24:b2:2d:53:c6:dc:f3:01:53:ba:05:7b:75:3c:
                    79:94:45:cb:1d:0f:24:b8:f0:8c:d6:10:74:40:2f:
                    a3:22:15:6d:17:b8:15:17:48:8b:f6:87:6d:4e:9e:
                    fa:96:89:20:2d:d9:6a:c9:60:64:db:5c:78:26:1b:
                    52:54:c7:5c:52:5c:70:f2:af:83:61:1e:95:5d:83:
                    6d:92:fe:ff:1c:e9:d8:de:b5:63:74:4f:b3:20:a2:
                    d1:d4:3e:df:d9:31:0f:be:92:9b:d0:d6:ec:00:72:
                    a5:c0:c4:20:e5:36:5d:86:3b:2a:2d:16:bf:67:62:
                    1b:a3:39:60:c2:39:d2:99:7a:b6:3e:dc:f5:2a:01:
                    c4:f5:2f:04:5c:48:05:64:ee:69:a9:e6:5b:24:14:
                    8a:27:1a:e7:ea:ec:06:64:55:58:58:70:29:20:43:
                    a3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D6:3A:FC:DD:A3:A3:52:87:E3:D7:3F:2E:EF:3A:15:87:06:2E:55
            X509v3 Authority Key Identifier:
                keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:f2:c7:a3:9b:bb:c3:17:5f:35:1e:fc:7e:fd:db:97:f2:
         0f:b4:e9:e4:69:c4:ba:81:a4:85:99:71:49:88:fb:42:59:c4:
         13:46:cd:0e:fa:c0:ab:c3:fc:e5:b8:24:40:c9:b5:57:a1:a3:
         0e:01:fa:36:19:77:1e:b9:39:23:90:4f:7b:98:1e:cb:06:c8:
         21:72:c9:f6:bd:c6:0c:5a:fe:76:ce:43:45:4f:18:fa:03:f7:
         50:8d:5c:72:79:4c:ed:99:80:76:e2:31:36:6f:52:90:72:4a:
         a4:17:15:ff:57:77:1d:10:18:6e:f7:70:c2:b9:a2:01:e8:37:
         89:62:be:97:ce:38:6e:bc:de:13:70:58:aa:e2:6d:a9:8c:5a:
         4c:85:7f:1b:fb:f0:ba:a7:f7:b3:21:ca:9f:f0:40:bd:2f:8f:
         d4:84:4d:ad:5a:6e:f9:92:72:bb:05:7d:7e:01:d1:12:c2:e0:
         c5:08:7c:a0:43:f5:58:36:f7:e3:a1:e6:d3:12:5f:7d:b3:cd:
         0b:00:54:b7:fd:02:11:58:f7:c9:bc:1e:40:5b:83:ea:c6:ef:
         e9:b5:c0:d6:e7:f1:c7:cf:a1:c6:59:68:2b:75:89:bc:cd:31:
         d7:4d:9a:23:1c:50:0d:be:6b:9e:c6:dc:b4:a4:96:9a:63:2b:
         11:34:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:49 2024 by rpki-client on console-fra.rpki-client.org