Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File:                     vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier:          CD5diPXTe9I9fq+Z6FxvuZ5wsdI/3167Sm7aFwc/Oy4=
Subject key identifier:   3C:B4:E0:6C:DE:2A:A2:4C:34:EA:40:76:5F:17:8F:E6:3A:5A:74:93
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer:       /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial:       018F8635B91A7EA664BCD84B7837571C9BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 11:00:18 +0000
Manifest this update:     Fri 17 May 2024 11:00:18 +0000
Manifest next update:     Sat 18 May 2024 11:00:18 +0000
Files and hashes:         1: J0A7-nt5XeCgS9gAAAVlx1i-rJY.roa (hash: JlA22eRwTHKygk6Rjp3JxHNqhS3iEPaNZklqvUMhvwg=)
                          2: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: vt94irxoDZL1iKrrr4f3RdE5XdsZN5SuvyaINPSZ5HQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:b9:1a:7e:a6:64:bc:d8:4b:78:37:57:1c:9b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
        Validity
            Not Before: May 17 11:00:18 2024 GMT
            Not After : May 18 11:00:18 2024 GMT
        Subject: CN=3cb4e06cde2aa24c34ea40765f178fe63a5a7493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:61:54:32:56:ac:ac:c8:d0:47:12:d0:bc:
                    16:68:47:79:b5:9c:e5:00:a7:5e:ba:a5:cc:be:4d:
                    f0:e0:43:6e:1d:fa:62:78:30:f0:4d:a0:46:1e:13:
                    96:54:89:fc:62:91:ed:cc:4d:c8:3c:0a:c5:8d:9c:
                    dc:0f:2c:de:bd:ee:55:39:a3:c3:30:72:22:06:6e:
                    2c:78:13:fd:41:cf:84:ef:f5:5d:fa:01:82:d3:90:
                    75:02:f0:a2:17:86:b6:2a:8b:de:41:c3:d7:3e:b4:
                    3c:6d:39:17:8e:b6:cb:65:25:06:9e:e1:9c:f9:c6:
                    8f:05:c6:ff:39:d8:3f:5c:44:b4:40:11:04:77:ea:
                    b4:16:c7:95:b4:f7:d1:62:81:b9:7b:e8:25:b7:56:
                    c8:43:2c:a2:cb:22:95:f4:4c:cc:d9:28:67:68:cd:
                    7c:e0:53:18:23:40:13:f1:a3:9f:da:58:2f:51:77:
                    9b:5b:d1:ec:d3:cb:5c:f2:85:7f:56:25:24:35:d2:
                    8b:46:d4:4c:d1:f8:66:b4:ac:58:22:50:62:16:44:
                    3b:25:ef:97:6d:16:48:f5:c0:fe:fd:a6:28:1e:aa:
                    ed:ac:ba:b4:bd:1f:11:7c:42:d0:2f:dd:a8:ef:65:
                    19:81:b4:1c:fc:9c:7e:19:f0:cd:80:6a:5c:39:94:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B4:E0:6C:DE:2A:A2:4C:34:EA:40:76:5F:17:8F:E6:3A:5A:74:93
            X509v3 Authority Key Identifier:
                keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2b:ad:09:2b:0a:1d:5f:5b:e3:de:93:55:bd:df:7e:67:28:
         6c:89:09:ae:46:eb:db:c4:33:a2:b5:76:be:6c:6b:1b:3a:c4:
         30:5b:0c:e7:89:f2:6f:1c:60:e0:16:12:b3:db:02:2c:09:39:
         36:c6:e9:e4:2a:cd:2c:f3:4d:cd:6f:8b:69:76:af:05:f4:0d:
         cc:fc:c0:d0:6b:2b:c6:f6:15:df:6b:53:b9:02:08:c9:eb:be:
         09:7f:25:4a:14:cd:35:8d:d7:20:78:1b:2b:c1:11:29:8a:be:
         35:fe:c6:d6:a4:cc:4b:c0:9b:01:c5:f7:10:11:97:7a:39:bb:
         db:1e:92:c2:9d:79:fe:5a:ca:5d:ba:e8:5a:ff:df:e7:ee:94:
         8e:00:32:85:43:1c:9d:cd:bc:54:16:a9:b7:4a:de:c0:9a:ca:
         70:ce:0e:e1:e6:8a:50:b6:1a:fd:b3:c8:3f:2b:89:d1:a5:47:
         4f:48:0c:17:8f:cc:c1:d9:84:90:ee:97:1b:07:ef:7e:5f:6e:
         de:d1:ac:69:fb:66:f9:ad:12:da:dc:4b:dd:94:b6:95:3d:d3:
         f0:2a:32:fd:08:6e:b9:3f:23:6d:58:6b:25:5a:ff:54:64:c0:
         30:03:a4:6b:d5:83:79:a9:c6:62:4a:18:d9:79:75:39:68:0c:
         82:3c:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:07 2024 by rpki-client on console-ams.rpki-client.org