Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File:                     yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier:          wMpvmwRtfukZMwc0poqPU+eXbYBG4WOpbIQHzF6QR9Y=
Subject key identifier:   45:27:2A:3E:31:09:3C:E1:52:59:A1:95:47:C4:69:82:6A:B8:0A:91
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer:       /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial:       018F5ADFD63972FB2986819169586A0EF1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number:          1165
Signing time:             Thu 09 May 2024 01:02:49 +0000
Manifest this update:     Thu 09 May 2024 01:02:49 +0000
Manifest next update:     Fri 10 May 2024 01:02:49 +0000
Files and hashes:         1: MRTQDGo714FdT2bZcf70RaXbzTw.roa (hash: +am1kVR+ox84pqTilBbRprzlJiwWeJC0Dax9Zodw6Z8=)
                          2: Oce2CgCOOBKTfudc5OaASKSnOUs.roa (hash: zdCK5iY0ninsgfXhDz89vO1M/Nku5wsg08FIPhPxW7w=)
                          3: q2Z7ZgyzQBwnOnJASqxG_LYMQWo.roa (hash: rHkvwWI5F2Oia2RkHV5TdhwHUF2/biQBUmrUnr8EOww=)
                          4: wkhQTrqFL7lW3yeieblcavMJV6Q.roa (hash: /f8pFcT2zh2lsCPF+tu/6qHTtA8Y/Aws+qQisHbk7cE=)
                          5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: XXIObKRiM8wHgwHE68if3G894S2O++Mmz3IENo6yiVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:df:d6:39:72:fb:29:86:81:91:69:58:6a:0e:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
        Validity
            Not Before: May  9 01:02:49 2024 GMT
            Not After : May 10 01:02:49 2024 GMT
        Subject: CN=45272a3e31093ce15259a19547c469826ab80a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:04:53:d8:2d:57:b8:16:6e:c7:51:a4:93:
                    7e:29:b3:9b:b7:c5:ed:03:f2:b3:88:2e:8b:7c:72:
                    b2:9c:0c:4d:9b:52:8b:b3:f2:fa:e1:98:b3:f0:73:
                    e2:da:b6:94:ef:95:67:69:b0:a0:46:1f:58:5a:2b:
                    42:36:91:34:06:a0:cf:58:be:b0:b3:56:f7:88:1f:
                    87:56:a0:7c:6c:31:a7:90:14:08:60:1e:a5:db:f8:
                    eb:e8:12:35:63:a1:be:fe:97:7d:11:10:a3:88:b1:
                    f6:33:03:16:56:93:c0:f6:1f:2f:59:e1:63:5c:99:
                    68:4d:49:d7:45:21:4f:7c:ec:b5:da:c3:bc:36:55:
                    8b:c5:24:0d:b1:e7:1d:50:0c:5c:e0:65:dd:43:e9:
                    44:81:08:e4:d6:e8:b7:55:3b:07:d0:58:ab:fe:8e:
                    9a:d8:5a:8b:a1:d4:12:9e:d3:52:b9:1d:a5:1d:62:
                    bf:43:25:d6:1c:bb:49:a4:d0:d3:42:66:39:8c:63:
                    f6:0d:00:9c:7b:e5:63:25:87:00:08:52:6a:54:eb:
                    36:41:c8:b0:7e:5f:9b:c9:24:89:1f:81:d0:3d:22:
                    1d:9f:28:00:91:18:c6:a4:b4:5d:0a:71:5f:60:e7:
                    09:a3:48:26:d8:a7:31:ac:5d:fe:f7:52:39:40:cb:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:2A:3E:31:09:3C:E1:52:59:A1:95:47:C4:69:82:6A:B8:0A:91
            X509v3 Authority Key Identifier:
                keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:ca:c0:bd:bc:3f:91:a1:c8:99:21:d3:03:18:24:6a:8b:
         66:0f:d8:9d:0b:e2:43:5e:c1:0c:8f:51:aa:f8:9f:5e:18:74:
         2c:7d:b3:36:b8:2d:4b:4b:fe:da:de:74:75:d9:89:9a:83:2b:
         8c:41:7e:76:9c:07:89:79:15:09:2d:20:19:8f:38:93:1d:86:
         f0:1f:b3:06:0f:05:ad:e8:44:49:f8:d5:d3:13:23:ab:be:9d:
         f4:c7:71:4c:71:bc:d8:94:7c:87:63:d2:0f:cc:6d:ac:bd:b1:
         b0:6a:93:00:1e:19:ff:0b:20:ea:a8:3d:14:38:bc:ab:4d:19:
         07:fa:f8:7f:c0:a8:73:15:65:ba:cc:10:29:00:0a:79:e1:9b:
         2d:0f:6d:2c:da:31:99:e0:87:16:1a:1d:f8:fe:74:8e:59:2e:
         e5:af:dc:8a:db:b6:aa:a3:e6:2c:6c:15:8d:2e:5e:9a:b8:c1:
         ac:a1:48:6f:7a:74:17:e9:c6:7c:fc:e7:69:e4:94:df:76:1d:
         92:df:9f:f5:0b:c7:8d:98:ef:5b:9a:7a:13:f2:1a:09:44:49:
         b3:66:09:17:56:97:e9:9d:d0:71:32:c8:8a:6c:97:f4:bd:40:
         f5:75:b9:9a:6a:b9:b7:58:4d:bd:6b:67:63:3d:7e:98:94:87:
         36:7d:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 08:20:46 2024 by rpki-client on console-ams.rpki-client.org