Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File:                     YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier:          Fj8jNqMoSADz3E3ektsznGEHOQ1fM4zTxNj/P08InIo=
Subject key identifier:   43:4B:03:67:05:AF:30:27:B9:9D:F9:30:4A:E3:02:4A:DB:69:50:7D
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer:       /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial:       01901DEB40CC9F99E3DC3A3A51892C2714FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number:          08A7
Signing time:             Sat 15 Jun 2024 22:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:15 +0000
Files and hashes:         1: ORxAK0thi8CGuPqMAqmrKnknvVE.roa (hash: oPnaCktvg/RaeRe7IjIAtXRp5ZtvhaEJRIJO2WJ038s=)
                          2: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: ikTr5zlSEVn0UYfjdSeaoWaT+ZAWkM8VA+6hk9Y40zw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:40:cc:9f:99:e3:dc:3a:3a:51:89:2c:27:14:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
        Validity
            Not Before: Jun 15 22:01:15 2024 GMT
            Not After : Jun 16 22:01:15 2024 GMT
        Subject: CN=434b036705af3027b99df9304ae3024adb69507d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:96:67:cf:c3:e5:c4:7f:d6:48:b1:13:ca:
                    59:30:2e:1f:cd:31:1d:ad:44:4b:47:3d:d2:71:59:
                    d3:dd:8c:a0:3a:70:9c:1a:85:3a:92:6b:4b:c4:2d:
                    e9:32:a8:80:7c:19:4c:62:19:74:ed:07:bd:3e:33:
                    27:12:bb:d3:f3:a5:4b:a4:c2:03:12:b6:f3:29:a5:
                    ce:64:c0:9c:0d:6e:5b:29:80:9e:a7:fd:4b:29:a2:
                    0c:18:76:4e:a0:c1:ae:80:0b:4b:20:6c:4f:6d:05:
                    33:bb:89:7d:1c:15:8a:88:a5:73:4c:42:04:83:1d:
                    26:37:61:df:3e:d9:09:a1:99:a1:25:d5:3c:91:b7:
                    ab:0b:7c:d4:fa:ca:5d:4d:2b:3a:5b:f9:e9:78:57:
                    52:32:50:65:32:ec:2f:51:f7:85:c7:13:b8:ae:1b:
                    a6:5a:e6:82:64:1a:25:bf:89:d3:f9:36:eb:b7:a2:
                    1c:df:bf:be:b1:13:be:dd:b4:2a:78:37:91:87:34:
                    a2:bf:9c:1e:9c:26:76:bc:82:d2:a3:65:b8:c5:88:
                    ad:5f:3c:05:bc:f6:bd:af:69:c9:10:fc:fc:d2:a4:
                    1c:cc:3f:6c:57:bd:39:c9:23:7e:33:e1:1e:64:a7:
                    ee:c9:20:1e:f8:00:bb:ca:32:c1:5a:b9:f3:ec:c5:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4B:03:67:05:AF:30:27:B9:9D:F9:30:4A:E3:02:4A:DB:69:50:7D
            X509v3 Authority Key Identifier:
                keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:0c:19:5b:e8:45:b4:f5:b0:03:c3:f4:3c:1e:1d:2c:38:
         27:99:2e:f8:02:e7:97:bc:40:90:de:c2:1e:1d:fa:e4:7d:ac:
         9a:83:9c:8c:70:0d:66:0e:67:b5:6c:f9:31:01:c9:31:68:34:
         9d:8d:96:4a:3b:01:91:b4:40:d1:3c:75:fb:4b:84:6d:fe:87:
         d2:e7:82:dc:0e:75:2e:da:66:4e:23:05:ce:38:97:ce:cc:d4:
         0f:86:7b:44:aa:ce:98:51:5c:d2:82:74:e8:51:f4:58:ee:ba:
         7d:57:e4:59:2b:5b:ee:67:26:26:c7:5e:f6:65:eb:ff:58:6f:
         47:aa:68:ba:d5:7c:a3:6b:03:86:44:b1:f9:73:fb:d3:e4:6a:
         ed:a6:2a:77:c4:e6:ca:5b:54:0e:83:cd:88:a2:a9:5f:c5:cd:
         d4:f3:e3:35:da:32:93:88:0a:ea:57:4c:5a:63:7f:50:9f:50:
         ba:26:7f:34:92:f3:13:d2:e3:f9:80:4a:b3:f6:6d:ef:c8:0e:
         6f:b0:50:3c:71:e6:3e:9f:3a:df:96:87:d0:df:1e:be:9c:fd:
         27:dd:64:12:d8:97:af:3f:36:ac:32:d2:d1:6d:9c:7b:96:14:
         72:fe:86:4b:96:b8:dc:71:75:3b:e1:7e:c8:69:47:b7:95:a9:
         f1:1c:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:33:14 2024 by rpki-client on console-ams.rpki-client.org