Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
File:                     yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft (raw, json)
Hash identifier:          y2v1pefa8anyqayFB8+eh/CWwceNG7Ox07tFsZLnrFs=
Subject key identifier:   C3:AD:5C:1B:49:EF:0F:70:0E:06:19:A5:28:3F:2F:0B:E1:07:15:E1
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Certificate issuer:       /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial:       018F836B6A3DB03E3780AE22ADC59556B893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
Manifest number:          1178
Signing time:             Thu 16 May 2024 22:00:05 +0000
Manifest this update:     Thu 16 May 2024 22:00:05 +0000
Manifest next update:     Fri 17 May 2024 22:00:05 +0000
Files and hashes:         1: 0jHVSfl8FFgP4CFZE74StlW-6p4.roa (hash: yOZqsLseUCgjrcN4lWtpBWQtNN490/e89Z5eWCRzlOw=)
                          2: iiEwz3S7JzKIGSMmsYCytTIkLT4.roa (hash: T9JqmAd6FjXryweIk/i1JZZvuwr0hFRaWI7+VrsXnf8=)
                          3: oKMoKg3CzRKeUYY9CD_Zq5BpPqw.roa (hash: iI5Yn4DK0z+jkf5vETgK3cwlDLbf+GK3Vtl6pEfA0yI=)
                          4: yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl (hash: tYw5vMJa9eO0uEhv4drGwiBLVYv7Z4dlxKpBQvlKMuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6b:6a:3d:b0:3e:37:80:ae:22:ad:c5:95:56:b8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
        Validity
            Not Before: May 16 22:00:05 2024 GMT
            Not After : May 17 22:00:05 2024 GMT
        Subject: CN=c3ad5c1b49ef0f700e0619a5283f2f0be10715e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:f8:29:b6:08:dd:1b:70:eb:f2:b5:da:65:
                    33:00:69:21:fc:07:85:18:79:8a:4f:1f:d6:5b:61:
                    01:dc:a6:22:27:e2:16:2f:0a:4d:f5:22:77:67:1c:
                    3e:3f:4f:56:a3:a0:3b:8d:2c:df:41:d5:1e:b0:ac:
                    db:7e:f0:6a:4d:6d:94:d0:97:6f:fc:2a:ea:f0:8a:
                    7f:e6:44:c6:6e:6b:82:15:90:ed:82:93:40:91:d8:
                    52:86:97:98:1f:d6:ca:60:dd:87:12:7d:1f:7b:87:
                    20:13:a0:19:02:b7:e3:ef:a8:0b:b8:54:36:22:ae:
                    f7:8d:0b:d5:3d:71:ed:f9:80:45:69:30:62:ed:09:
                    5f:96:3f:e5:2f:a4:17:7c:0a:a4:fc:9b:0f:fa:25:
                    87:1d:eb:20:a6:d9:b3:da:31:d2:ba:dd:f4:0c:d3:
                    e2:00:10:e0:1c:43:d5:7a:96:f4:6a:2e:96:2c:d0:
                    9c:84:db:fc:39:a5:ca:d9:eb:57:f9:cc:fc:6a:c6:
                    65:e4:da:3e:b6:e5:64:1f:20:89:03:78:bf:a8:ba:
                    8f:de:fe:3d:30:f8:13:c5:3e:55:dd:00:7c:80:28:
                    29:92:3b:b3:9b:d1:91:9e:34:42:a0:68:ef:81:65:
                    e3:f5:4a:41:a2:a4:86:b4:3a:bb:07:0b:9d:33:49:
                    a3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:5C:1B:49:EF:0F:70:0E:06:19:A5:28:3F:2F:0B:E1:07:15:E1
            X509v3 Authority Key Identifier:
                keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:99:8e:53:00:36:40:87:36:c9:25:dd:79:28:95:14:6f:
         31:7d:61:07:13:29:13:9e:7b:40:ed:90:46:df:c4:4c:21:53:
         f9:b3:2d:f6:55:5c:a8:3a:70:8c:0d:38:e6:14:29:bd:da:36:
         c7:cd:1d:b6:da:e7:fc:36:5b:b3:9c:38:08:a5:78:64:b2:9f:
         ec:d8:a7:65:8a:68:a5:2b:6a:2e:5e:23:3d:9b:54:13:0b:db:
         26:4e:2d:48:0e:db:ce:46:02:d4:58:91:f2:25:dd:50:39:d5:
         95:6c:ae:f4:5a:fc:a8:4c:7f:1b:e7:ae:b2:4c:f2:f1:15:05:
         f8:54:52:5f:fe:9d:4a:db:56:4d:07:db:ab:58:69:88:7d:79:
         be:d5:cc:76:1f:6b:64:10:b5:0a:63:a4:5a:88:3e:e3:19:39:
         8a:3a:93:f8:33:45:21:88:c3:a3:6f:fe:ff:c9:27:e8:fd:df:
         86:3f:15:63:1a:69:b3:8e:a1:3d:28:27:23:01:4a:c3:3e:8f:
         bf:28:32:98:2a:fa:b7:7b:80:f6:6f:bd:36:f6:78:dc:96:42:
         7a:08:fc:a5:13:db:b9:81:3e:96:df:49:85:a1:b3:0e:21:19:
         82:36:e4:9f:45:6e:1a:94:76:5d:20:12:50:59:32:1c:6d:65:
         84:a0:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:49:23 2024 by rpki-client on console-fra.rpki-client.org