Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File:                     Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier:          gZul7kFT/aPXChJnGWcD8kpNwiN2JyHVdgJiwAyz+jY=
Subject key identifier:   F0:9E:6E:21:8B:19:87:07:C3:78:4D:1B:5C:F7:3B:67:B2:9F:6E:3F
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer:       /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial:       018F86A3D95BBEFED64E9B92CFD4D7A6B194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 13:00:35 +0000
Manifest this update:     Fri 17 May 2024 13:00:35 +0000
Manifest next update:     Sat 18 May 2024 13:00:35 +0000
Files and hashes:         1: CW10SkrntznzDH7bS5RfW5Uw8xk.roa (hash: rKTQ//lwwy2CZZp27K/4CpKhTx3ALApeUFzckoFonP0=)
                          2: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: 5RVqh6gUPFA/vxr7vJ9m+zNp1cAPAnYf5kbYuac3qn4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:d9:5b:be:fe:d6:4e:9b:92:cf:d4:d7:a6:b1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
        Validity
            Not Before: May 17 13:00:35 2024 GMT
            Not After : May 18 13:00:35 2024 GMT
        Subject: CN=f09e6e218b198707c3784d1b5cf73b67b29f6e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:0b:49:f4:2d:4e:0c:c6:a6:f6:2d:8d:0d:
                    7e:f4:60:45:5e:7f:e8:d1:bc:56:95:18:69:d9:d8:
                    47:f7:d1:52:fb:4b:bd:95:bc:f7:96:90:02:c2:b6:
                    86:63:e2:77:9b:6e:40:95:74:b9:97:62:c8:fb:62:
                    ac:b8:b5:cf:76:a3:b4:f3:b5:34:1b:30:5b:fc:0e:
                    05:db:dd:bb:b5:6f:d1:ed:d3:56:a2:f7:d3:d2:57:
                    fd:ec:c6:e8:5e:38:28:05:4b:3c:b1:d2:7e:0e:09:
                    5a:5b:f8:80:e6:3d:11:fd:52:d9:db:3d:0d:32:46:
                    87:09:d4:dc:6f:82:8f:6a:6d:6a:a2:e6:f7:79:24:
                    3e:4d:ed:55:10:1f:e9:a0:28:6f:0e:28:dc:04:9a:
                    71:ff:6e:82:2a:71:fa:d5:af:fe:0b:85:82:22:d6:
                    03:54:1b:24:f7:03:f7:15:9d:38:6c:bf:37:c3:e0:
                    3c:8d:7e:cc:51:37:8f:fe:22:7f:a0:1e:db:45:42:
                    8c:4c:6f:bd:97:f9:d4:ad:b3:4f:18:b4:ce:15:c9:
                    eb:f5:a7:24:b4:79:6f:54:df:c9:4a:6e:69:36:d2:
                    a8:e3:2d:a9:45:77:7b:76:7e:d2:07:32:71:88:0d:
                    ef:aa:ef:6c:26:f6:f2:b6:c7:db:6f:51:c0:22:8c:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9E:6E:21:8B:19:87:07:C3:78:4D:1B:5C:F7:3B:67:B2:9F:6E:3F
            X509v3 Authority Key Identifier:
                keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:50:1b:ec:f3:f8:5c:a0:71:2a:af:ec:95:e7:21:54:c7:a5:
         ac:47:de:14:98:7d:cd:fc:94:22:75:4d:97:05:28:f1:f0:f7:
         db:be:41:09:bd:ae:ef:1a:e9:b8:e1:6f:af:b4:c8:1b:e4:1d:
         2c:72:7a:36:04:76:75:97:47:49:d6:42:47:d2:9a:cf:23:07:
         2d:21:fa:32:d5:54:b1:8d:ac:cd:ac:87:f9:a9:33:b1:22:ce:
         75:63:f9:ba:16:7a:3c:6d:bc:36:3c:d4:bc:04:e7:f8:7f:a1:
         a7:16:2c:f3:44:33:7a:57:ec:5d:ff:67:c0:8f:59:14:5e:17:
         a4:e7:d7:c6:08:dc:d1:07:3c:e6:6c:ff:e5:03:15:06:78:25:
         db:2c:63:17:b3:c1:c7:12:77:8c:d7:cc:12:6e:88:73:54:4d:
         27:79:f7:fc:d2:53:81:29:c8:28:ed:34:f9:63:f6:fd:27:52:
         91:2b:a3:34:ab:01:ee:52:80:81:0b:a4:0e:31:27:60:0d:31:
         43:74:fd:da:18:e2:ad:de:d8:54:00:e2:6f:6f:e7:ba:6a:d9:
         13:ee:01:b4:cc:5f:86:ac:32:b7:2a:e1:48:5c:7e:90:c9:c8:
         75:c2:20:39:7a:ad:3a:ce:bf:48:68:4e:dc:3e:e5:d6:0b:75:
         ba:da:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:41 2024 by rpki-client on console-ams.rpki-client.org