Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File:                     yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier:          On15c30m2HAMMdzEID4iSHnQ17dljax1CNxZvFUa664=
Subject key identifier:   B0:88:8E:9C:70:17:F8:C4:1D:FD:11:4F:63:14:32:B2:CB:D1:23:70
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer:       /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial:       018F86A370F05CA21E53DBE11C99BFFFDCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 13:00:09 +0000
Manifest this update:     Fri 17 May 2024 13:00:09 +0000
Manifest next update:     Sat 18 May 2024 13:00:09 +0000
Files and hashes:         1: Yl8pGv-MLtsl4qZAl4UKm970TlM.roa (hash: MR1WA1jrJBQGuzqVtuL9zppF+wcGzdWleG9vTxVD54A=)
                          2: bRy9p1AA3vND0uI0nZIv9kAUwRA.roa (hash: 6NZwiciL3Vf/PYOcdtXyFCvBOSzqJbVXuDL17r7gRCs=)
                          3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: quvmWI0HlMU9WaQumqYYvWxk+cDeYRfvbuGGD7rvPoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:70:f0:5c:a2:1e:53:db:e1:1c:99:bf:ff:dc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
        Validity
            Not Before: May 17 13:00:09 2024 GMT
            Not After : May 18 13:00:09 2024 GMT
        Subject: CN=b0888e9c7017f8c41dfd114f631432b2cbd12370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:55:fd:18:28:ae:02:52:50:bc:da:84:01:
                    33:3f:af:d4:8f:6e:ae:e3:04:02:11:83:81:b2:be:
                    90:ba:34:65:87:b7:6e:b3:74:5b:1f:70:d8:98:54:
                    e6:9a:eb:6e:ad:bd:90:58:88:48:47:a6:b0:ac:a8:
                    8d:fc:d8:4d:ae:a5:a3:e5:ba:d1:f7:d9:04:f2:ff:
                    cf:bf:a3:05:b9:99:ba:6f:83:71:fa:68:43:bb:cc:
                    58:80:d6:5c:f0:05:2c:76:7c:1e:8d:37:ad:f4:b1:
                    f5:12:f7:2f:53:23:10:ee:28:9b:e6:2e:1c:b2:fc:
                    dd:e0:a2:27:5b:48:d0:db:fd:fc:ee:80:df:87:98:
                    31:89:a2:a4:54:b1:8f:54:60:13:87:bd:22:31:01:
                    02:29:c6:71:58:b3:e3:29:64:22:1a:68:f4:41:f4:
                    0f:99:2d:6c:97:09:15:a0:02:07:44:34:b5:bd:a3:
                    58:2b:46:4e:30:c5:45:09:e4:95:ca:69:d9:55:12:
                    d3:ef:00:2f:5a:c1:c9:00:47:6f:ff:63:c6:14:59:
                    5b:67:37:39:9b:2f:a2:4d:ee:78:01:31:2f:b3:66:
                    b4:c9:f6:78:75:d0:00:ed:e1:4a:f7:39:60:fc:61:
                    bb:47:60:a0:a3:de:51:c1:e3:53:8f:59:cf:55:ce:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:8E:9C:70:17:F8:C4:1D:FD:11:4F:63:14:32:B2:CB:D1:23:70
            X509v3 Authority Key Identifier:
                keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:34:85:15:e8:05:b5:7a:33:de:c6:6b:b9:46:bf:80:da:
         b0:5a:b7:52:dd:c3:07:e5:5e:3c:fb:29:c6:8c:d5:79:48:8b:
         d6:5b:32:75:4e:9c:47:b6:06:28:8d:27:ce:ac:ba:1a:d2:9a:
         82:77:44:72:0e:bf:f0:4b:90:83:3e:39:cc:23:9d:5e:80:48:
         5f:21:94:4e:18:2d:b0:cd:f9:68:6d:3a:2a:95:e0:9f:19:0c:
         07:56:8b:bb:98:ed:d8:51:40:3a:6e:29:c8:16:02:84:a3:de:
         24:28:ce:bb:39:56:3c:83:96:32:36:1f:63:0b:36:61:ed:12:
         e7:01:b1:69:4a:b9:62:bd:29:0d:f7:49:3e:18:e4:dd:cd:92:
         b8:a6:48:7e:e7:1d:ac:f5:fb:21:09:b4:ae:6e:d0:6f:12:a5:
         63:b2:3b:dd:eb:07:b8:00:91:92:3f:2e:75:4c:03:f5:60:7a:
         9a:0c:ed:a0:51:f1:0c:b1:6f:af:c8:b5:7a:83:0a:ff:da:e0:
         76:d1:82:d6:a6:5c:53:0d:09:ef:20:4a:26:4e:43:5f:ac:0b:
         4a:40:3b:a3:ae:ec:c1:95:bc:38:09:18:ed:84:e4:cb:ad:9f:
         97:3a:c8:b9:a0:c7:95:8a:55:97:4b:80:e3:58:32:f9:f5:63:
         14:3e:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:11 2024 by rpki-client on console-fra.rpki-client.org