Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File:                     YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier:          Mlh2eU7u/dRDWYwhKjZ19A0SuJtWaKrmOySRRrWfS40=
Subject key identifier:   34:FA:FE:C0:2C:2D:58:9C:6F:60:06:5B:AB:BF:61:0C:A2:48:60:FC
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer:       /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial:       018F874B0CB1C010CAF0D57F0FBBB9BF0653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:03:13 +0000
Manifest this update:     Fri 17 May 2024 16:03:13 +0000
Manifest next update:     Sat 18 May 2024 16:03:13 +0000
Files and hashes:         1: QKfvfLS8cT0ooEOhr298q92f4bc.roa (hash: 1W0yvaq9yIGfBQXIzuvfnuqz6TpwTYqY7yMtFnbrO0k=)
                          2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: xdsd62Cd+I00w8axnT7b+INK8kuxFrkSuRX12A20Tm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0c:b1:c0:10:ca:f0:d5:7f:0f:bb:b9:bf:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
        Validity
            Not Before: May 17 16:03:13 2024 GMT
            Not After : May 18 16:03:13 2024 GMT
        Subject: CN=34fafec02c2d589c6f60065babbf610ca24860fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:08:34:e7:13:8d:74:2b:e1:fd:95:ae:b2:30:
                    4d:17:7a:48:27:97:f4:8b:3a:f3:67:38:f1:d6:ca:
                    14:bd:ac:61:a1:b7:74:07:00:a8:6e:34:f0:8a:6b:
                    ef:cd:dd:2c:7c:b8:4c:bb:74:a7:3d:30:20:be:b0:
                    42:5b:8e:4f:29:5b:38:2e:ee:40:f2:d9:54:4a:e7:
                    a4:a4:01:32:ed:50:2a:d2:78:91:4c:41:de:4b:fd:
                    4a:21:a6:20:7d:13:cb:0d:ac:46:c9:e4:e1:ea:e2:
                    3f:1b:e9:60:f1:4b:44:69:d4:04:ce:58:4c:e6:d7:
                    fe:b5:76:d1:81:5e:7b:ab:7c:a2:74:0f:4d:85:06:
                    38:9c:26:70:aa:b6:5f:9e:fe:98:a1:3b:fa:33:3b:
                    42:d6:83:bd:a3:1c:cb:66:18:15:82:10:60:ff:0b:
                    dd:84:87:3c:ba:11:a1:b6:1b:f1:71:0f:f8:22:2c:
                    c7:b7:95:bc:e1:c5:9a:f3:d3:33:ba:3c:c3:77:ac:
                    a7:15:fd:40:54:76:39:88:06:e9:bb:9c:8a:ef:bf:
                    92:d9:02:88:fa:ac:0f:90:07:96:be:27:70:c8:8d:
                    fe:a4:8c:b8:37:c8:ef:0e:e0:27:bc:f8:60:e9:39:
                    f6:71:40:a7:a8:a4:6a:ca:3c:99:03:46:9c:c1:79:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:FE:C0:2C:2D:58:9C:6F:60:06:5B:AB:BF:61:0C:A2:48:60:FC
            X509v3 Authority Key Identifier:
                keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:75:92:bd:9c:76:2d:10:57:86:50:38:ee:b2:46:75:3d:
         c2:ac:e0:a3:b1:d2:86:0e:24:b9:1e:af:af:71:ab:fa:8c:60:
         ff:54:94:de:76:ba:fd:df:36:30:eb:c4:53:19:d6:f9:51:c5:
         40:85:1c:51:cc:dd:64:23:94:4e:a9:70:19:6a:f2:16:8e:66:
         08:41:d6:aa:1f:a8:d7:c3:99:95:62:d0:41:43:fd:2e:14:e0:
         4b:25:d0:4b:e3:a7:f6:80:ed:25:de:e7:41:5a:e9:4a:6f:e2:
         29:08:76:3e:f9:42:f2:07:79:5e:52:73:09:ce:dd:be:2d:f0:
         d1:54:27:d5:75:cf:eb:a6:96:4d:cd:fb:72:10:b8:de:94:12:
         70:29:0d:8e:07:6b:5e:bd:7c:6d:87:fd:16:cc:44:00:29:3d:
         1b:b8:98:3e:6e:d0:11:6f:bd:02:39:c7:7f:9c:09:de:9b:b5:
         e4:aa:7b:2f:9c:09:53:6a:e5:13:e2:28:a5:29:df:93:97:db:
         cd:79:d3:41:93:8d:57:8b:3e:b3:9d:04:1c:b6:8d:10:3b:f0:
         11:07:1b:14:ba:b9:06:15:27:3e:f6:b9:73:19:57:fb:ad:7e:
         ae:2d:2f:95:07:5d:b3:51:99:b1:ed:7c:c5:ef:9d:21:c9:28:
         a8:fa:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:47 2024 by rpki-client on console-fra.rpki-client.org