Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File:                     YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier:          kWCTfBLQsnjmF6RtOfzjit/9MVf7gegvgikwq+TFt3c=
Subject key identifier:   3D:81:7A:BE:1F:7A:27:A2:8B:AC:84:27:EE:73:E5:D6:E7:3D:1E:8E
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer:       /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial:       018F874B0E5C331EE88B3FE5B4DE829CC8B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 16:03:13 +0000
Manifest this update:     Fri 17 May 2024 16:03:13 +0000
Manifest next update:     Sat 18 May 2024 16:03:13 +0000
Files and hashes:         1: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: lN8XEnQPSitrYsgLx2DoM7yABUlNJvgqjtdg7/t0Y8Y=)
                          2: gkl3WLb7ljLuV2WdV7FivWhKNSU.roa (hash: zCn9wsLqALnlIF22/IxtEQOOoNyYzc/Q2AzvxIUNcKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0e:5c:33:1e:e8:8b:3f:e5:b4:de:82:9c:c8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
        Validity
            Not Before: May 17 16:03:13 2024 GMT
            Not After : May 18 16:03:13 2024 GMT
        Subject: CN=3d817abe1f7a27a28bac8427ee73e5d6e73d1e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:04:5d:50:f1:cb:3f:7d:cb:7a:85:fa:d9:
                    7a:e9:9b:a5:9a:76:ce:8f:58:09:75:84:05:cc:db:
                    1f:2e:6a:ea:2f:a4:df:50:4c:48:85:05:ae:28:0a:
                    7f:10:18:46:c7:89:44:bb:c3:b7:19:f0:dc:45:3f:
                    51:a2:58:6f:ec:7c:2c:5e:ae:24:b9:6b:84:ba:51:
                    0c:ca:fd:a5:ee:52:68:2c:94:d7:9a:5c:58:b1:64:
                    29:61:86:e4:de:b0:76:e2:10:d7:d4:04:21:66:d0:
                    da:73:30:7a:b1:97:69:84:7f:a2:09:8d:9b:f5:70:
                    01:18:5c:5e:e4:37:67:9a:02:b3:7b:c7:14:95:57:
                    0e:3a:67:3c:ae:bc:69:8e:b6:cb:33:c5:69:19:e8:
                    93:8e:cf:42:2f:b6:85:46:5a:cc:64:51:83:83:59:
                    c4:5b:8b:e2:7a:bd:f7:c9:7d:ef:56:62:86:ea:c7:
                    5e:4a:64:54:eb:56:f5:89:f9:96:73:d7:40:49:63:
                    e2:55:70:0c:4a:fa:ea:9c:f3:6c:dc:2a:bd:7f:0b:
                    45:bb:42:2c:72:ea:5a:05:02:2e:f4:0e:59:ab:46:
                    95:79:9b:a1:45:2a:44:42:9c:5c:f8:22:42:44:ac:
                    98:16:4c:81:2f:69:62:a2:eb:31:3b:fc:eb:a5:9f:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:81:7A:BE:1F:7A:27:A2:8B:AC:84:27:EE:73:E5:D6:E7:3D:1E:8E
            X509v3 Authority Key Identifier:
                keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a7:79:5b:37:ca:f0:92:43:11:13:d3:ee:ee:27:53:5f:6d:
         44:67:fb:a1:41:e1:1f:ef:0f:ca:41:86:8e:6d:c4:84:57:eb:
         ac:2c:2c:4f:80:d1:6c:94:1b:35:ab:ec:e4:d7:80:e8:0e:3f:
         be:51:96:93:15:75:57:f6:d4:51:5a:14:60:54:87:41:58:03:
         5e:4c:61:43:a8:2b:2b:94:c9:f1:45:bd:87:ff:c0:13:8d:06:
         5a:02:c0:40:3f:0c:84:3a:64:74:79:2b:6a:7e:9b:29:06:74:
         69:67:4f:be:82:c1:39:f3:2a:e0:30:12:05:16:08:11:1f:eb:
         a4:ca:fe:34:b6:24:c8:0f:f8:49:47:c9:a6:c5:54:a3:2a:d0:
         9f:1f:52:2f:54:6f:1e:21:6c:b8:19:1a:f2:f6:bb:97:bd:a5:
         f6:bc:0c:04:c7:f7:ed:9d:1a:a9:e2:0a:f7:b7:12:5e:09:85:
         32:f0:ae:d5:b3:c1:3c:cb:20:59:c7:13:16:5f:b3:91:30:25:
         49:19:5d:66:6c:ec:c2:ef:f7:a1:ac:17:5c:ad:29:71:7f:da:
         af:17:ce:c8:8b:71:2e:a0:78:69:07:a6:79:a4:ed:fe:34:39:
         8e:a9:0c:d9:3a:d1:26:00:ea:8e:50:43:ee:7a:cd:5c:b7:fd:
         76:96:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:36 2024 by rpki-client on console-ams.rpki-client.org