Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
File:                     y5-GErfxR1ABa4SMQvYN82rYMtk.mft (raw, json)
Hash identifier:          0HHvk+VeySS0WqAJZdifm6bGpWs2xsteVqNjUOXodCY=
Subject key identifier:   24:1C:96:B6:54:B0:77:DA:91:0D:DB:99:DE:38:CF:4B:4C:A0:B9:86
Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Certificate issuer:       /CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Certificate serial:       018F874A7E793BB4A5A91F76C983FA805A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:37 +0000
Manifest this update:     Fri 17 May 2024 16:02:37 +0000
Manifest next update:     Sat 18 May 2024 16:02:37 +0000
Files and hashes:         1: DloE391qrYiliEZg5FV77eS64LU.roa (hash: KNPjACwsjiYhkMv4XVZ4CcsNqlO6/xyxVmGxc0Bvn1w=)
                          2: y5-GErfxR1ABa4SMQvYN82rYMtk.crl (hash: pbd1CjBiVZRaxZ+PMBOf0R6dKNA5hD6LFkNd8Dq3Dvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7e:79:3b:b4:a5:a9:1f:76:c9:83:fa:80:5a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
        Validity
            Not Before: May 17 16:02:37 2024 GMT
            Not After : May 18 16:02:37 2024 GMT
        Subject: CN=241c96b654b077da910ddb99de38cf4b4ca0b986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:37:cf:01:cc:3e:d0:c2:3c:54:6c:2b:79:3e:
                    be:6a:fe:59:d5:e1:90:c5:92:58:b7:ae:b3:9a:62:
                    30:ce:6e:ee:db:4e:17:99:a1:92:da:86:9c:0a:f0:
                    1d:14:c8:31:4c:59:5f:24:55:82:54:14:de:fd:2e:
                    d1:45:e5:72:59:24:d7:ec:cc:bc:ad:1e:b7:90:8a:
                    81:de:71:35:79:4a:1d:4f:25:dc:5f:97:fe:fa:1f:
                    ac:27:c6:b8:6f:02:b8:03:9f:93:20:10:2c:18:6e:
                    da:59:10:31:39:38:8d:87:ab:04:be:78:8c:07:26:
                    77:4f:4d:3b:f7:9c:b4:90:ed:a1:e4:72:0b:6e:4c:
                    bc:18:72:19:81:41:a4:08:5e:64:80:64:5d:4e:86:
                    8c:89:1b:79:37:86:02:a1:b8:b0:9d:2b:c8:a6:b0:
                    25:43:44:cd:83:39:e8:12:c2:05:99:24:1d:d8:67:
                    8e:ce:40:4c:b8:1a:19:41:ca:14:65:01:7c:63:40:
                    9f:08:ac:40:3c:b1:43:69:07:04:a2:a0:a2:47:ce:
                    9d:da:4d:95:fc:2d:9f:ed:ef:ce:d4:db:c2:54:8b:
                    48:22:f5:a9:b1:95:c3:4e:ca:43:26:d0:a5:80:11:
                    10:c7:62:c8:15:76:ba:8d:da:a9:2b:d2:b0:cb:60:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1C:96:B6:54:B0:77:DA:91:0D:DB:99:DE:38:CF:4B:4C:A0:B9:86
            X509v3 Authority Key Identifier:
                keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:95:81:42:65:bc:ca:7b:3c:4c:1c:f2:3c:38:46:4a:0e:d0:
         74:57:60:6b:23:20:db:aa:47:a4:ea:b0:61:18:5d:35:7e:df:
         bc:3b:32:c7:45:cd:19:29:54:48:bf:bf:d7:2b:a7:d0:28:29:
         0b:ee:85:ac:56:7f:b4:7e:e2:4e:96:ec:76:f4:3a:38:57:3a:
         a2:c4:f3:40:ef:50:88:f1:b4:39:b7:9e:6c:16:59:47:fb:de:
         ea:96:be:0c:04:d8:ac:96:42:ea:4c:a0:f7:f5:11:b3:2d:8d:
         c8:7b:36:1a:7c:26:56:99:57:d5:7f:33:73:fc:a6:2a:82:c2:
         43:94:32:33:b0:0f:0c:09:d2:72:6e:99:79:67:20:83:95:35:
         b8:75:4b:65:67:2d:ed:2f:db:1f:8a:89:cc:9c:e6:2a:87:c7:
         5d:bb:c9:c6:66:15:b8:ed:07:ba:be:c0:06:36:ae:e9:81:eb:
         7c:3a:88:48:53:cf:4f:85:4c:cd:0b:13:68:b0:4a:27:06:a8:
         fb:58:70:4c:8b:4c:6a:7e:8e:47:1f:8a:62:dd:56:18:7c:f4:
         b2:51:43:4e:2f:6f:0a:99:d5:bb:e1:b0:a6:a5:0b:45:76:11:
         7f:da:98:c3:7b:4c:51:fe:e3:4a:c2:1e:8b:12:c6:48:db:22:
         78:da:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:37 2024 by rpki-client on console-fra.rpki-client.org