Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File:                     YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier:          o/DmLxi45V8wUagS9LUQ2wv4TaT878LNOnelMVp09uE=
Subject key identifier:   2F:22:EB:E5:1C:EC:C9:65:39:B8:AE:3F:06:22:E5:D6:5A:55:69:48
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer:       /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial:       01901DEC6B494D8A4F9415FC4803FCA628EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number:          0A9C
Signing time:             Sat 15 Jun 2024 22:02:31 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:31 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:31 +0000
Files and hashes:         1: LsJshUb5dVWALI3EoEfdgELQRWA.roa (hash: 1eBYSk1Y7l3/iKc+VLytwK3LSCf1odvgglssKbjjRXY=)
                          2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: Ys8GtAU56pjl16fITkStiTpwlKwHGSjOmbSfqpVAVtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:6b:49:4d:8a:4f:94:15:fc:48:03:fc:a6:28:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
        Validity
            Not Before: Jun 15 22:02:31 2024 GMT
            Not After : Jun 16 22:02:31 2024 GMT
        Subject: CN=2f22ebe51cecc96539b8ae3f0622e5d65a556948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:94:bd:4e:03:5f:3f:69:af:25:63:ae:bf:
                    33:0d:77:ae:a3:ca:95:f2:ab:89:86:94:f8:91:c5:
                    d1:c2:94:99:26:48:9a:c2:1c:02:3a:97:26:47:fe:
                    c8:17:14:b9:b1:67:48:5a:06:82:7a:c3:fa:d4:a8:
                    28:a3:40:0e:9f:1f:28:aa:19:9a:16:7c:1c:20:2c:
                    73:95:d9:f9:15:6e:64:6f:45:4e:82:62:5b:be:49:
                    51:ad:f5:9d:ea:7d:8c:af:9e:f1:23:5f:9a:85:e6:
                    51:3a:a6:dc:2d:56:04:a5:35:4a:e6:d8:32:6e:f8:
                    54:25:6a:50:2b:0b:79:57:21:c2:f5:ed:46:71:90:
                    f7:ef:b4:7d:54:72:c2:a5:2f:cd:a5:54:43:93:a7:
                    9e:79:ef:4c:cb:24:f5:00:4a:81:e6:5c:95:bf:13:
                    e8:e0:a8:7a:16:03:3f:67:21:71:61:68:27:ff:c1:
                    3c:b1:e8:ed:49:b8:19:fa:2a:38:a2:89:27:79:35:
                    40:be:c1:51:e8:5d:56:30:1e:37:bc:b0:36:77:8a:
                    94:0f:2b:8a:ab:6b:b1:45:b6:7f:1e:22:8f:36:d4:
                    90:3c:14:4b:a8:06:a5:fc:01:71:79:ff:b9:3a:70:
                    96:7f:1e:ef:1a:79:33:e3:33:09:d1:92:e5:88:5b:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:22:EB:E5:1C:EC:C9:65:39:B8:AE:3F:06:22:E5:D6:5A:55:69:48
            X509v3 Authority Key Identifier:
                keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:97:ba:4f:f4:69:62:f6:40:08:62:c4:e8:ef:d0:59:25:14:
         b4:10:33:ad:4e:67:24:ba:06:ec:e4:4a:95:08:38:e6:94:59:
         9c:27:e7:b8:cc:48:3b:24:d0:13:ef:47:06:13:70:e3:af:a3:
         69:e9:6f:a6:87:39:2b:27:65:3e:62:3c:eb:4e:d9:14:32:b6:
         82:ee:71:2d:6c:c0:af:27:6b:f2:0c:a5:e1:e7:1e:8a:aa:f2:
         4c:b0:13:a8:32:3c:7f:6b:8f:d4:64:07:4a:1c:49:b8:b2:ec:
         d8:b8:7c:e8:2b:cb:66:bc:47:b2:48:77:8d:a2:25:8d:85:0c:
         f8:49:3a:55:b0:2d:bb:02:35:7b:5f:fc:4b:ec:65:42:2e:38:
         0b:a9:4c:b1:31:f5:ed:05:9b:35:69:fa:b4:3a:b3:62:b9:c4:
         fd:76:c9:d9:d8:59:e5:6c:48:c3:3f:c9:b8:ee:83:3f:f4:fa:
         f6:0d:56:1b:89:b3:6b:96:04:97:96:aa:c0:da:10:be:8e:1b:
         b6:5f:70:ad:a7:f4:51:a7:cf:1d:ee:07:1c:8b:56:3d:52:44:
         81:32:f4:27:12:af:ca:59:1f:27:53:c6:f6:0e:1f:9a:8d:d0:
         16:88:86:6d:2b:15:74:1e:fb:5c:18:15:fd:e7:64:af:21:2a:
         ea:c5:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:31 2024 by rpki-client on console-ams.rpki-client.org