Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File:                     ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier:          e6pnY3e2ZmuunqXw7nvywTd48lNhBL1sz2pN2CTPP5w=
Subject key identifier:   0B:D4:B4:37:AA:53:9B:FE:27:42:DA:A7:1F:1C:2D:35:38:9F:78:7F
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer:       /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial:       018F882441F2C889EAC97CF05740BF7C363D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:28 +0000
Manifest this update:     Fri 17 May 2024 20:00:28 +0000
Manifest next update:     Sat 18 May 2024 20:00:28 +0000
Files and hashes:         1: THk72XNffKwtPzEM3-n1CJi-G2M.roa (hash: QMYstTqrPR1BPdCK+0Nf+dnfTyW8gwwhOaPE4U+oFPY=)
                          2: iD_88y6pMmOYnc30jtDwiVj-rF0.roa (hash: ygWlZS/lLba0oCyAoa9nCXTrJirV5tnqR6+wDy7ThtM=)
                          3: pgR4KbeLq45E2YXWbBrRhAT3UPM.roa (hash: dRDJP/XBN42/UuoXW9BnzqyMUBkyYkYJjD4qwUYpDlM=)
                          4: s71TqajBuQCUiasb10QBS1tnECc.roa (hash: oTls+zraa7cHE+oH2qT/8v3XSXnWeIvr6cT2iV90fIE=)
                          5: u0yWGjsGblMulmXhzgMZ4EEWS0g.roa (hash: sFZGkiaYxnTmLVgxfL6kKuAoI41GCJdH/3liN7g/DOc=)
                          6: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: S2ycCcMY7uEk36j6lMU8hEP3lhxs12QZSb8Q4Iq9XWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:41:f2:c8:89:ea:c9:7c:f0:57:40:bf:7c:36:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
        Validity
            Not Before: May 17 20:00:28 2024 GMT
            Not After : May 18 20:00:28 2024 GMT
        Subject: CN=0bd4b437aa539bfe2742daa71f1c2d35389f787f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:9a:03:57:a4:f2:53:62:d2:41:fe:ac:5c:
                    e1:5b:30:4f:d1:2d:d0:ab:eb:01:54:45:f7:68:31:
                    c6:90:00:18:f2:de:99:b0:cd:cf:cd:bc:ff:2b:f1:
                    10:63:88:1d:69:8d:67:f1:03:81:19:38:bd:9d:ac:
                    ee:9e:c1:f4:47:f9:48:07:b3:7f:47:10:1d:58:6c:
                    24:17:ef:e5:80:88:e0:85:8c:f3:3a:9a:68:e9:4d:
                    1d:25:4b:f8:dc:ad:52:fc:3e:82:cf:d7:bf:30:5f:
                    ff:1f:5a:f8:fe:4e:d4:38:02:00:9d:a3:d6:a1:8b:
                    93:13:15:13:b0:55:ed:1a:76:f3:a8:35:67:82:f1:
                    00:c9:31:97:a9:1b:d2:e0:95:25:2b:a5:8c:36:fc:
                    ae:2b:b1:dc:ac:b4:2e:c4:53:6a:94:0f:99:4c:ef:
                    40:74:8f:e3:a6:b1:82:3b:20:5f:47:27:7c:97:02:
                    2e:80:ba:07:58:da:9b:ef:53:b1:60:05:2a:87:3d:
                    83:57:fd:b3:b4:f1:1f:79:ec:c6:37:ed:6b:6b:db:
                    29:b9:fc:4c:d7:5c:ed:c1:b1:ed:97:b8:ae:fb:95:
                    e0:57:56:8a:8a:39:42:06:1e:f1:38:78:ff:8e:4a:
                    65:b6:ce:7a:98:9f:94:c5:fe:11:ca:79:fe:2d:9c:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:B4:37:AA:53:9B:FE:27:42:DA:A7:1F:1C:2D:35:38:9F:78:7F
            X509v3 Authority Key Identifier:
                keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:50:51:16:a0:84:f5:2e:44:60:3a:33:ab:4a:b0:4e:23:9e:
         11:0c:a2:fa:45:4a:a2:84:fb:fd:1d:07:61:f2:51:79:bf:45:
         5c:e5:f6:ec:35:c9:71:95:9e:47:73:ce:20:b8:38:6e:51:8c:
         45:67:06:63:eb:33:4d:90:5b:3b:f1:d8:bc:b6:a1:64:b3:15:
         6c:50:e8:f4:e4:15:41:38:b4:56:72:01:62:82:93:0b:da:19:
         2e:58:74:d3:7e:9c:9a:fa:34:91:07:3f:12:99:1a:59:f3:1e:
         8e:e8:79:18:f8:39:ef:73:48:b1:13:a8:53:5d:32:e8:05:9e:
         22:69:36:5b:5d:b9:9b:ee:d1:91:eb:ef:e7:ea:32:1a:cd:0e:
         e0:0c:f2:d9:ed:79:29:53:0e:69:05:43:f6:48:88:31:72:1e:
         12:15:65:0e:d4:7e:62:9f:da:4b:75:99:a9:10:1b:ad:82:c8:
         7c:c6:5a:05:28:af:9b:4a:dd:98:39:61:a2:72:c4:9c:ae:1d:
         51:c0:4a:b0:45:03:a8:4c:71:99:51:d3:c4:de:34:63:83:a3:
         6a:62:7d:77:94:fb:a0:a6:6c:7e:6e:12:3c:d4:3c:5d:db:e9:
         5c:9d:6a:8f:80:64:8c:20:41:5a:ee:42:b3:06:87:3d:7d:ea:
         88:22:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:52 2024 by rpki-client on console-ams.rpki-client.org