Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File:                     yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier:          f2jHyuL5eGVfd9H5B1Kxg2oIDgip5MGAENhCxDup6rI=
Subject key identifier:   7B:66:48:1C:D8:49:43:0D:EA:52:8D:95:77:E2:8C:32:54:C0:2D:F8
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer:       /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial:       018F88FFB5B794389D055A3B742462CFFC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number:          D9
Signing time:             Sat 18 May 2024 00:00:10 +0000
Manifest this update:     Sat 18 May 2024 00:00:10 +0000
Manifest next update:     Sun 19 May 2024 00:00:10 +0000
Files and hashes:         1: H6YlNdHPqIG1uKlWdWwCEhDWSvI.roa (hash: TLzpqF6e3lbUsIYg0HPi4BoUqSzuOp2n61XEj/4Fb0E=)
                          2: M-JPtP-kdTEx_9uHZalDoQbZBbg.roa (hash: WcGuOjN4O9Ztr720sMY1Q06HDiDQ9xR+p7XgtN1O6Sk=)
                          3: _JHGeT-x9GRhKxp2QuqvVDfohMQ.roa (hash: RGsVbh9hIPGcjkEsWudWK7EVFJfhTSBSAe+FImVtzE4=)
                          4: jevXkRK5_BMqW-H-X0f7h6W8Pl4.roa (hash: QE+ViIaMe5OSTWOw3lcA7Lsg0w9OdZsUzDuAlnpG42A=)
                          5: p4kPbrnn-wPn1Ay_eo_rkN-Y9qw.roa (hash: QyU6Lkd6Y2QRH6Zq0ei3c7+Jy/o9mXdoxEPVTz30Vk0=)
                          6: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: mHpl43wPxNvrlwYtKepwBzZduGjRwpwcy+93maERsUU=)
                          7: z2mWZN9zpehZ0StuYauUlPmkRF8.roa (hash: dXhT9u+txsubMs+tZf1Xj0MT3uzt0UEKcsVyjFZKMUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:b5:b7:94:38:9d:05:5a:3b:74:24:62:cf:fc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
        Validity
            Not Before: May 18 00:00:10 2024 GMT
            Not After : May 19 00:00:10 2024 GMT
        Subject: CN=7b66481cd849430dea528d9577e28c3254c02df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:ad:25:17:4f:0c:b9:03:c1:6b:1c:5e:6f:
                    f0:78:aa:3d:91:7e:41:e6:eb:9c:e2:e9:3a:fb:e5:
                    ea:a3:66:53:5f:47:eb:44:6c:8d:fc:45:8d:5a:88:
                    f7:d4:76:cb:cf:a0:c0:d1:cc:d7:91:31:e0:86:56:
                    07:c1:9f:71:c9:bc:21:4e:da:8c:0d:f8:c6:84:7e:
                    66:d7:15:0f:ce:34:04:ed:fe:e4:f2:6c:7e:59:a0:
                    c4:bb:35:ba:98:a8:32:9e:b2:76:d6:71:20:96:c5:
                    32:fa:2c:65:46:d8:cc:b4:31:e0:03:2b:29:6c:1e:
                    cc:82:42:87:ef:1c:b5:d0:f8:c6:9e:72:ac:62:a2:
                    1e:65:58:f5:0d:0e:b3:c2:09:11:f6:a3:98:2c:82:
                    f0:e5:26:e5:5f:48:27:31:8f:88:d9:2e:ea:60:46:
                    56:bb:92:c9:14:a0:4a:c1:b2:9a:13:8a:ce:e1:5e:
                    26:2f:77:c1:a3:2b:62:77:24:f3:45:97:ce:95:0f:
                    1e:a5:21:f7:65:15:74:6d:34:52:e5:7f:8b:bf:61:
                    d8:02:24:e2:4c:bd:11:ef:2a:85:6a:30:d1:da:e4:
                    3c:d2:63:58:14:e6:30:35:27:b1:1f:b0:7b:08:71:
                    ac:f1:fc:13:75:49:83:69:84:96:da:3e:e8:d2:c9:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:66:48:1C:D8:49:43:0D:EA:52:8D:95:77:E2:8C:32:54:C0:2D:F8
            X509v3 Authority Key Identifier:
                keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:03:a0:63:ad:93:c4:72:5c:83:21:e6:99:37:73:95:b8:
         f6:98:0d:b7:89:44:ea:ee:33:ae:06:4d:b7:e2:7e:62:da:38:
         99:b1:41:63:e1:6d:59:57:a4:3d:5a:43:3c:41:8f:29:22:ba:
         46:ac:79:2d:28:be:9a:c5:15:ff:58:d1:5c:35:98:b6:28:f8:
         9b:80:2b:ed:2c:62:83:21:15:e3:da:7d:1b:4f:2c:91:fb:d2:
         de:94:c3:73:db:f1:e3:40:c3:ef:f8:cc:24:7d:f3:f9:a6:c9:
         d0:e9:ac:84:40:85:a9:d2:ae:78:09:39:15:b3:85:6a:c2:d6:
         81:e4:2f:01:96:bd:cf:70:de:15:7d:dc:a3:3b:6f:e7:00:fc:
         2c:6a:51:0c:c6:f0:01:3c:93:d5:2b:ce:3e:b6:e7:d9:5e:fd:
         f9:8f:4c:61:9e:5f:00:10:82:9d:e4:03:33:93:b5:40:10:ac:
         57:c8:ec:b5:a8:97:17:9f:ae:cf:b8:12:05:be:76:4d:b2:3a:
         dc:d5:4f:1d:a8:e2:9c:0a:55:f8:34:65:06:34:d3:25:39:03:
         a1:ca:24:35:40:2e:79:b5:67:c0:43:97:f5:9a:ce:0c:0e:bf:
         ee:c5:47:61:58:ff:89:5b:53:90:19:24:4d:39:4d:bd:e2:82:
         45:fa:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:38:41 2024 by rpki-client on console-fra.rpki-client.org