Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File:                     yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier:          Gpn13d0jxEGXKbJXGOJveX+KMVp+klkmvIapnPVgKQg=
Subject key identifier:   8C:4C:38:AD:99:C1:4D:0F:DB:24:87:D7:39:46:CF:C3:6B:7A:71:D8
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer:       /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial:       018F874927DB0CE126B576E345D069874590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: jk_wLR7knhADhLCwa8ljovPzn4w.roa (hash: a6orZOgiVvn/317JngMPkHQJGM6onBjbJe4Ce4qZW28=)
                          2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: axGSYwg5XJe7OYvpx7PWugxr0ZVhabEYtNJG2Ht7fmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:27:db:0c:e1:26:b5:76:e3:45:d0:69:87:45:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=8c4c38ad99c14d0fdb2487d73946cfc36b7a71d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:a6:cf:28:c2:01:a7:53:dc:f0:a8:e9:59:
                    c0:c4:43:1d:b9:11:2d:c9:f5:71:d9:2b:99:df:2f:
                    68:f9:f3:9e:5f:71:73:77:77:a5:80:63:3a:dc:ef:
                    f2:65:eb:9e:6a:c3:2c:2f:c9:77:d9:f3:f1:46:35:
                    72:f0:75:53:73:b6:f5:a1:9e:db:47:d3:29:7c:ef:
                    65:5b:ec:88:86:7d:6f:1c:60:55:cf:fd:e6:6b:6a:
                    a9:d8:8e:e7:ac:78:2a:71:eb:02:d2:c2:55:a7:11:
                    16:cd:de:b0:71:29:d5:d9:e6:c9:84:91:75:07:43:
                    50:76:1e:56:eb:5c:87:1a:81:78:6d:89:f7:72:b5:
                    b7:8b:a5:42:33:7c:e8:2d:7d:fa:4c:5f:64:2f:0d:
                    71:f3:f5:51:92:31:9d:73:cd:c0:d8:b3:5b:06:3a:
                    67:92:28:72:40:5a:b8:da:a6:15:57:ec:9c:cf:d8:
                    c9:e0:39:a8:14:37:6e:47:01:2d:5d:c7:f6:69:8d:
                    d0:4e:c1:05:e1:aa:e9:5a:2c:2c:ab:98:4d:79:49:
                    12:f4:6a:85:f8:4a:51:75:bf:03:be:55:be:ce:a1:
                    35:0a:86:5c:85:99:bd:e0:c7:c2:ed:10:7e:f5:de:
                    c0:39:76:77:f8:e7:be:68:de:b4:39:f5:37:00:ba:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:38:AD:99:C1:4D:0F:DB:24:87:D7:39:46:CF:C3:6B:7A:71:D8
            X509v3 Authority Key Identifier:
                keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:4b:fb:81:30:82:a0:00:55:5c:09:80:87:de:41:86:f3:
         c8:e1:7c:47:cd:4f:89:5d:fc:4f:25:a3:6c:5a:52:37:f7:78:
         c3:d7:9f:0c:ef:03:27:54:65:f4:6b:2a:ec:d8:6c:dc:8b:ca:
         92:da:89:80:86:b9:6a:e4:5a:b5:c6:22:19:62:41:3e:de:d9:
         eb:e5:09:09:a7:80:50:b9:d6:4b:5d:10:56:3f:95:73:b9:1f:
         61:99:c6:5d:84:ae:bd:de:f6:aa:32:ce:6b:87:f9:5a:71:25:
         29:5d:c6:e7:5f:1c:c6:1c:3f:1e:a0:8d:2a:ed:10:72:d0:d3:
         e7:4c:2e:ff:b1:15:b9:b7:8a:2e:0c:a9:81:cb:05:c8:a8:63:
         74:09:2c:16:1c:91:54:85:82:c0:e7:8d:7c:b0:27:32:e2:89:
         9c:fa:7f:66:55:8d:97:f2:3a:ac:92:85:ce:e5:e2:57:be:e8:
         e8:61:71:8e:01:e3:1d:89:1c:d1:8d:8f:ba:49:0a:0e:0b:49:
         33:4d:6f:f3:e0:7a:c9:a7:06:e8:75:72:c1:3c:ff:85:3c:14:
         0b:32:78:c2:7f:86:ef:8c:3c:f5:4e:82:a3:fa:74:1e:be:68:
         f7:d0:f5:15:8d:ce:ea:44:17:b8:3c:a8:d6:75:7f:74:bc:de:
         42:30:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:56:29 2024 by rpki-client on console-fra.rpki-client.org