Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File:                     ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier:          MBSi8GJMGo2rgYP9o/7W0ujb1r3Hb1U9Z9BBFu7iXpY=
Subject key identifier:   44:3A:5F:40:E8:AF:3D:A0:F1:7E:75:85:6B:6B:6A:9E:99:56:D0:48
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer:       /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial:       018F87483DBD499EADC7EBABAD502805FCCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:09 +0000
Manifest this update:     Fri 17 May 2024 16:00:09 +0000
Manifest next update:     Sat 18 May 2024 16:00:09 +0000
Files and hashes:         1: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: I5BVQZ1m8meenmoIOIy8oCMWV1Tc9DBFrysfenxlD8U=)
                          2: yhjkaTRYa2FmRFV3Wfj2CQMUGYo.roa (hash: 8dIRty2MAKrAsu8MIC/mYE30/XPQL8YdXpDSfZ71vro=)
                          3: znDzxIS-UnjsrQw7lwzavoL_MGM.roa (hash: 4wkqHzn8RwZ/AdG2QFs0viKkLmb6+NvIr4absu4BpTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3d:bd:49:9e:ad:c7:eb:ab:ad:50:28:05:fc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
        Validity
            Not Before: May 17 16:00:09 2024 GMT
            Not After : May 18 16:00:09 2024 GMT
        Subject: CN=443a5f40e8af3da0f17e75856b6b6a9e9956d048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:46:da:ad:19:54:3c:f7:87:0d:bc:02:a9:
                    01:42:f7:79:7c:be:8f:d0:11:03:3d:29:69:fb:51:
                    1b:8e:ac:b7:29:f1:8d:c7:5e:7e:89:9f:d3:64:e5:
                    29:74:01:b6:7e:f6:69:a1:aa:ad:95:83:6a:22:7c:
                    b6:d5:e0:14:f8:37:ab:da:7c:c2:9c:08:b7:14:0a:
                    19:d3:89:5c:12:df:0f:09:a2:6a:aa:84:c4:44:2e:
                    b6:cc:c5:44:83:68:a0:44:2b:af:ae:fa:fb:cc:e3:
                    88:f8:32:09:77:91:71:6e:bd:cf:86:ba:25:6a:eb:
                    53:c0:b1:5b:3f:db:4c:37:78:b3:49:6a:93:e5:92:
                    4d:95:43:16:e5:85:34:5d:df:f7:b2:fe:af:72:ed:
                    2a:25:6d:5c:47:4c:44:d6:07:64:5c:83:1f:5e:d3:
                    bc:26:a4:ad:69:5c:52:94:0a:5f:a8:aa:fb:0d:a0:
                    f2:36:6f:99:e2:1e:d3:71:84:17:05:a3:b2:e6:5f:
                    ac:bf:58:42:3a:ad:53:b2:99:77:b8:5a:21:8e:e1:
                    68:eb:c2:8a:43:34:62:a6:df:a1:05:b2:c9:4c:0c:
                    d5:c9:a9:5d:46:33:12:e5:60:e9:92:5e:7a:13:e6:
                    90:81:ae:a8:f7:e3:a0:4f:1d:2b:11:30:37:9d:65:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3A:5F:40:E8:AF:3D:A0:F1:7E:75:85:6B:6B:6A:9E:99:56:D0:48
            X509v3 Authority Key Identifier:
                keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:48:6f:20:ce:4a:31:0d:e5:be:3f:aa:82:6f:4d:be:57:2c:
         7d:0c:6a:33:ec:b5:d7:41:c9:95:42:ee:7d:22:e0:52:a0:f6:
         f0:fc:0d:42:6c:9c:6c:53:ce:7e:1d:20:61:a8:7c:c1:87:82:
         e8:1b:df:c9:77:1d:b5:96:1e:30:6f:c2:d1:16:04:8c:a8:5e:
         e9:98:a9:8f:7b:de:17:1a:c9:70:6e:cd:31:36:52:98:d0:69:
         2a:53:1e:13:f1:d6:3c:35:f6:36:26:76:9d:9a:08:12:f8:50:
         fd:9f:fa:ac:c9:57:d1:cd:73:bc:fe:d5:26:ef:a4:02:2c:5f:
         a4:57:69:be:fc:21:69:b6:5d:79:05:c1:9a:c8:01:9d:8b:88:
         99:cf:e2:98:9a:60:89:7c:e0:0b:1a:aa:49:5d:51:bb:1b:1c:
         b9:15:15:57:e6:2f:d8:4e:0d:04:ad:f7:ef:d4:0c:3a:b5:72:
         72:38:2b:6e:47:54:f1:81:37:3f:c0:d7:f3:19:72:22:f7:15:
         80:ec:6d:4e:f6:7b:db:b1:19:a0:31:bb:01:a8:79:e8:18:2a:
         30:ff:d4:93:df:2e:6d:b3:d1:fd:59:aa:05:ef:02:60:74:02:
         7a:cf:79:84:77:ba:da:18:0b:b3:8a:47:f5:1a:35:d3:92:b6:
         8e:ad:b9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSD29SZ6tx+urrVAoBfzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjU5ZjQxNzc5ZTZmMjQzNWY1OWYxYTE3MWMwODBhNWE3
YTQ0ZDIwHhcNMjQwNTE3MTYwMDA5WhcNMjQwNTE4MTYwMDA5WjAzMTEwLwYDVQQD
Eyg0NDNhNWY0MGU4YWYzZGEwZjE3ZTc1ODU2YjZiNmE5ZTk5NTZkMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyNG2q0ZVDz3hw28AqkBQvd5fL6P
0BEDPSlp+1Ebjqy3KfGNx15+iZ/TZOUpdAG2fvZpoaqtlYNqIny21eAU+Der2nzC
nAi3FAoZ04lcEt8PCaJqqoTERC62zMVEg2igRCuvrvr7zOOI+DIJd5Fxbr3Phrol
autTwLFbP9tMN3izSWqT5ZJNlUMW5YU0Xd/3sv6vcu0qJW1cR0xE1gdkXIMfXtO8
JqStaVxSlApfqKr7DaDyNm+Z4h7TcYQXBaOy5l+sv1hCOq1Tspl3uFohjuFo68KK
QzRipt+hBbLJTAzVyaldRjMS5WDpkl56E+aQga6o9+OgTx0rETA3nWVMxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ6X0Dorz2g8X51hWtrap6ZVtBIMB8GA1UdIwQY
MBaAFMm1n0F3nm8kNfWfGhccCApaekTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTct
NzIzNjdjYmIxOWVmLzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTctNzIzNjdjYmIxOWVm
LzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkhvIM5K
MQ3lvj+qgm9NvlcsfQxqM+y110HJlULufSLgUqD28PwNQmycbFPOfh0gYah8wYeC
6BvfyXcdtZYeMG/C0RYEjKhe6Zipj3veFxrJcG7NMTZSmNBpKlMeE/HWPDX2NiZ2
nZoIEvhQ/Z/6rMlX0c1zvP7VJu+kAixfpFdpvvwhabZdeQXBmsgBnYuImc/imJpg
iXzgCxqqSV1RuxscuRUVV+Yv2E4NBK3379QMOrVycjgrbkdU8YE3P8DX8xlyIvcV
gOxtTvZ727EZoDG7Aah56BgqMP/Uk98ubbPR/VmqBe8CYHQCes95hHe62hgLs4pH
9Ro105K2jq25eg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:53 2024 by rpki-client on console-ams.rpki-client.org