Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File:                     yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier:          Q5PUeEpCcxKRyk2+ApCWBgg+4MBCg9GfN6590jB3gHI=
Subject key identifier:   3D:C8:4D:65:FF:B2:DD:88:8E:80:E6:87:22:51:F7:E3:6B:F5:01:03
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer:       /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial:       018F787AD9B3F6DB2B40B283DB387DC53C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number:          01EC
Signing time:             Tue 14 May 2024 19:01:08 +0000
Manifest this update:     Tue 14 May 2024 19:01:08 +0000
Manifest next update:     Wed 15 May 2024 19:01:08 +0000
Files and hashes:         1: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: OCaZlijIygDULsADFbmbh1d1Uu9e2PVKbu+5OKwE6Pk=)
                          2: z0ZTq5UmLetbF76I9y9vnkX4ez8.roa (hash: j7aeW3iCCthYtnhIjU/T884xKgADzQXK5W95k92tp4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 May 2024 13:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:78:7a:d9:b3:f6:db:2b:40:b2:83:db:38:7d:c5:3c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca334850daf371220520199229ebde90ef28b018
        Validity
            Not Before: May 14 19:01:08 2024 GMT
            Not After : May 15 19:01:08 2024 GMT
        Subject: CN=3dc84d65ffb2dd888e80e6872251f7e36bf50103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:54:4f:fa:90:52:96:e0:bc:ff:46:d3:40:
                    c7:c7:c1:a6:cc:45:fb:c5:48:bd:bf:cb:32:55:44:
                    bd:16:c4:f8:3c:ab:d6:09:e4:71:26:ed:a0:e8:88:
                    0b:bd:55:e3:d2:1c:cb:be:0c:27:c0:9a:86:cb:e2:
                    fe:dd:06:cf:d2:53:5f:4c:36:f4:1f:24:dc:86:1b:
                    e9:7b:96:33:b7:f7:81:f4:9f:6b:c9:aa:f7:3c:c4:
                    6f:7a:f6:26:8d:49:58:d3:b6:b9:3a:ea:5b:17:14:
                    17:59:07:87:38:0a:43:ef:87:a1:b0:87:49:3a:0d:
                    8a:ac:74:4a:23:22:ea:fc:ff:fe:c1:6f:1b:0c:57:
                    88:95:0b:6c:d9:42:de:cc:b5:02:68:5f:98:1b:63:
                    9f:df:48:91:1f:5a:27:a4:0a:d9:0b:28:0b:d4:70:
                    bc:f4:a0:b7:3d:45:ae:45:0f:5d:fb:4b:5d:59:9b:
                    5e:1e:bf:48:d2:96:d1:1f:9c:05:4d:83:53:c6:dc:
                    ca:aa:b3:56:0f:f8:5a:48:f4:ad:4d:bf:71:b2:18:
                    3b:26:c5:b0:ca:1e:55:13:77:e9:46:1c:5e:c1:06:
                    e8:58:39:58:23:3b:eb:c7:d6:52:85:5e:cb:f8:30:
                    15:91:6f:dc:82:43:dd:a2:a3:ce:9b:14:fe:d1:f1:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C8:4D:65:FF:B2:DD:88:8E:80:E6:87:22:51:F7:E3:6B:F5:01:03
            X509v3 Authority Key Identifier:
                keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:fb:87:3d:bf:a4:87:c5:e2:5f:21:f5:0b:20:aa:11:7b:
         3c:43:fd:7c:90:db:ce:9e:03:21:d5:dc:f6:98:df:4e:5a:97:
         4e:eb:ae:a9:c5:c5:8f:44:64:98:b8:c2:5c:94:a8:49:a4:94:
         5b:91:8c:14:b1:25:42:79:29:22:74:fc:fb:c9:0b:24:f9:09:
         bd:dc:4f:dc:32:be:6c:ba:dd:67:d7:dc:f1:3b:12:fc:a2:d4:
         32:35:8f:0a:d7:62:d8:65:35:d3:e0:24:e8:64:df:f5:41:5a:
         16:3d:b7:6f:83:56:2d:4f:9e:b1:84:74:3c:27:ef:4d:72:2b:
         28:e5:fe:5c:5b:f9:63:5d:1d:62:dd:2c:24:91:a2:56:24:a4:
         ea:a2:a5:15:48:c2:5b:d6:74:7d:a5:c1:9b:49:05:60:5a:17:
         8a:60:04:41:0d:d7:83:c0:bd:d9:57:7d:b1:b4:c5:4e:b8:af:
         d0:1a:92:d0:0f:7f:68:66:8f:f8:f6:11:83:aa:41:f3:2e:39:
         55:b4:57:4b:88:c5:ad:42:98:94:8a:7c:b5:51:c0:57:88:b0:
         d5:bf:db:93:29:0d:85:b5:30:f4:dc:59:9b:c3:23:07:1d:db:
         b9:b7:21:08:b8:6b:27:d4:e0:43:54:1d:c1:b8:57:0f:54:50:
         9c:e4:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 20:02:05 2024 by rpki-client on console-fra.rpki-client.org