Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File:                     YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier:          /GI1LqxGSq5X0fnDfkXExAeC/+7aYY4fJJVcIIHoDf0=
Subject key identifier:   96:85:8B:6F:1B:AA:FD:DB:C5:BA:B0:FD:E1:89:7C:50:F3:8D:7C:D3
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer:       /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial:       018F874A705D38B2262AF7499D2B0F49422F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:33 +0000
Manifest this update:     Fri 17 May 2024 16:02:33 +0000
Manifest next update:     Sat 18 May 2024 16:02:33 +0000
Files and hashes:         1: EUWieVOQDpb1uafQjhb-Qecg6f0.roa (hash: kq6QOegyYBQtp9xwrnRFT25zVE8OVSZt966aPbe9G5E=)
                          2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: y2iBQ3I1CilwC5VztDgFM2TowUQa1JzutzAZAIqSTlU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:70:5d:38:b2:26:2a:f7:49:9d:2b:0f:49:42:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
        Validity
            Not Before: May 17 16:02:33 2024 GMT
            Not After : May 18 16:02:33 2024 GMT
        Subject: CN=96858b6f1baafddbc5bab0fde1897c50f38d7cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:0a:ea:cc:27:36:f0:cd:4d:8e:6c:53:13:
                    8a:1c:e4:58:c6:a6:96:3c:df:00:7d:83:ba:bc:a2:
                    2e:f5:36:4e:83:84:20:4f:98:38:98:37:d0:b6:ab:
                    0f:d7:58:8e:54:56:c2:ac:b4:16:a3:5b:5c:6a:45:
                    1a:53:2c:a5:c3:25:08:0c:ff:ff:c2:f7:d3:af:76:
                    3e:f0:00:dd:63:cd:f2:1b:d5:e1:8b:fd:9c:36:dd:
                    56:38:26:f0:fb:b8:4b:05:6b:d6:28:3e:a2:18:a6:
                    99:3a:66:d1:e4:d5:58:75:ed:59:89:88:5d:a9:89:
                    35:0a:9a:19:47:0a:45:ab:ac:f0:16:82:6b:c8:e4:
                    3e:27:b7:d9:c9:ce:08:67:5c:e8:f3:8e:72:20:d9:
                    32:d6:42:87:2b:c2:16:c3:a3:2b:4f:8f:0c:dc:fc:
                    e6:f1:ef:c8:c9:5d:97:db:eb:85:6f:36:ce:a5:aa:
                    a2:f3:7c:cc:36:44:bf:81:fe:65:7e:26:59:21:f6:
                    c7:2a:ee:14:03:a8:26:a5:61:ae:11:64:a6:7c:70:
                    b5:d7:4e:09:d1:e3:32:c3:78:8a:91:ae:e2:03:0a:
                    c0:bf:75:59:22:76:fe:a2:9e:79:b6:8a:d8:43:3f:
                    c0:a8:8d:62:43:7a:3a:79:68:2f:1f:ac:33:ae:e9:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:85:8B:6F:1B:AA:FD:DB:C5:BA:B0:FD:E1:89:7C:50:F3:8D:7C:D3
            X509v3 Authority Key Identifier:
                keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:55:30:d3:31:84:a2:e1:fa:21:be:d8:19:a9:a0:1e:b3:5b:
         0d:cf:87:b9:05:0d:30:c0:60:e6:c6:29:2d:99:2b:f4:bf:a8:
         bc:b3:d4:56:f8:29:a3:a6:56:39:9a:48:a8:2a:2e:10:39:22:
         d3:c9:c4:2d:cc:d7:1d:7c:87:f4:8e:8e:6d:ed:54:f1:3a:8d:
         59:3d:ef:dd:2b:76:7b:fb:3c:51:dc:22:94:35:a6:1e:b4:3b:
         8d:66:e8:ef:76:dc:a4:ca:9d:a1:45:09:0e:e3:68:e4:a1:5c:
         2b:ad:6e:9e:a9:d1:6f:ce:09:cc:8f:5d:e6:15:eb:cc:20:9e:
         b9:29:33:6e:75:16:51:c9:c1:56:c4:f9:5a:7d:4d:59:31:d7:
         c9:1f:e6:6b:eb:61:b2:5c:26:68:78:55:01:f1:02:6f:f9:59:
         1e:1a:22:f0:78:9e:90:68:c9:69:3b:bf:54:c1:55:85:9b:df:
         56:f2:6f:06:99:35:17:08:ed:c8:5c:14:b7:06:f7:50:99:d4:
         f3:de:56:d4:e3:93:cc:85:99:3e:fc:9e:23:e5:20:21:0c:ad:
         74:bb:b1:16:95:a5:95:55:27:54:8a:e0:f3:a0:6b:d6:ae:bc:
         ee:1a:c9:f7:22:11:22:cd:00:91:c1:00:7b:5d:e1:32:b4:35:
         d1:3c:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:50 2024 by rpki-client on console-fra.rpki-client.org