Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File:                     Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier:          wyl4j69rdySscCpXBoxP+7dn+goELmmu4OXpszMRZiI=
Subject key identifier:   ED:0E:84:0C:18:FB:44:C4:54:AC:33:27:39:1C:D0:A5:AB:81:7F:0E
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer:       /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial:       018F86A38457D9CC95B6C029673A1F92D798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 13:00:14 +0000
Manifest this update:     Fri 17 May 2024 13:00:14 +0000
Manifest next update:     Sat 18 May 2024 13:00:14 +0000
Files and hashes:         1: QBOzbcmhgix3Y9qdGoRrRkaT240.roa (hash: x/ZH1IQtZ3qGQeu7P5P99pSYnaFZbJjIigAlZX+2o+0=)
                          2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: A0pihKxn4wb9EqXiO6wm5e1ajDNG+a8Gp9lo5o9EPKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:84:57:d9:cc:95:b6:c0:29:67:3a:1f:92:d7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
        Validity
            Not Before: May 17 13:00:14 2024 GMT
            Not After : May 18 13:00:14 2024 GMT
        Subject: CN=ed0e840c18fb44c454ac3327391cd0a5ab817f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:41:67:d1:ed:fd:af:a3:a6:3c:54:33:9d:6e:
                    fa:7b:09:d4:7a:70:db:02:ec:80:94:3e:28:14:33:
                    4b:8d:0a:14:1d:1e:85:dd:14:e2:8b:ee:aa:c8:07:
                    aa:79:66:f8:d9:e9:c4:b5:af:d9:fd:61:3a:c2:cf:
                    c9:61:e4:e4:9d:f8:8f:ba:c1:29:e6:4c:b7:df:b4:
                    c2:b5:41:da:d0:e4:2d:97:ec:b3:a6:fe:fa:90:8a:
                    3b:f6:0a:12:97:4c:6d:aa:5c:33:d1:ca:66:b8:11:
                    bf:c9:cb:db:a5:02:cf:e4:51:a0:05:02:76:92:2f:
                    ad:a9:e1:a2:6f:0f:d8:9b:d4:1f:84:cc:c7:ae:d1:
                    17:ca:77:40:f4:3f:17:ab:50:f0:9f:39:c5:17:e9:
                    b1:29:40:8f:70:f5:29:53:db:2b:c0:73:fc:37:1f:
                    f4:b5:99:82:cb:68:cc:57:3e:d8:49:b6:c8:db:27:
                    f6:c0:cf:17:e5:2d:12:74:83:05:3b:92:57:bd:41:
                    02:64:e1:6a:bb:1b:21:19:ee:30:86:5f:fe:14:da:
                    f7:3d:6b:92:ae:93:e9:26:68:32:ba:39:69:7d:45:
                    63:0c:8f:3f:ab:16:11:69:b4:d2:02:0c:8f:99:a0:
                    b1:93:1a:f8:0c:7e:33:35:c2:9d:a2:f3:6c:b6:83:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0E:84:0C:18:FB:44:C4:54:AC:33:27:39:1C:D0:A5:AB:81:7F:0E
            X509v3 Authority Key Identifier:
                keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5f:77:da:41:d2:46:da:db:f4:2b:12:c7:78:c2:d2:f9:12:
         70:bb:46:41:74:9b:61:1c:1e:b4:a5:7c:e9:50:89:2a:17:96:
         52:20:39:bf:62:b7:6f:67:5f:ae:b9:44:21:99:af:ae:8e:75:
         af:a4:6e:06:5a:f7:99:cd:34:a1:5b:b8:e1:f2:27:ec:7e:95:
         48:0a:36:07:db:63:23:31:7c:3f:a3:bc:f2:e5:fe:fc:8c:54:
         48:0c:9a:c2:5b:3b:9f:2d:c4:8f:a9:64:92:9c:c9:05:a4:5f:
         dd:df:37:83:e2:23:7d:aa:ab:11:09:21:f9:d2:40:b8:a7:d3:
         78:d4:83:e8:4c:cb:87:4b:94:6c:47:b9:6e:a2:81:65:09:f5:
         81:50:93:87:85:04:80:6d:50:c3:dd:87:76:d2:a9:85:df:e7:
         3f:12:f7:64:9b:38:1a:a2:2c:5d:46:9e:ae:6e:b4:c8:68:a8:
         53:f5:73:c0:58:b6:06:05:5f:ee:4e:2e:c8:eb:22:6c:c2:9e:
         10:df:4e:fa:c2:6f:af:98:8b:8a:20:0d:62:d2:d5:06:fc:d0:
         70:eb:9d:27:17:55:bc:5c:13:24:fa:99:68:8f:e6:81:23:d0:
         10:87:46:94:f9:48:32:fc:38:ac:97:ae:e5:47:b8:d5:a6:91:
         49:c6:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:10 2024 by rpki-client on console-fra.rpki-client.org