Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File:                     YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier:          ElxFUDAAEFhhMKQxZW5dTEe9Yq0592RKXy5SJWbwbRA=
Subject key identifier:   96:50:57:C6:7B:D9:24:43:22:89:C3:6C:F3:3B:BC:3B:1E:A9:C1:15
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer:       /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial:       018F8E266047DA91B9749929825C4ACE9CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number:          102C
Signing time:             Sun 19 May 2024 00:00:30 +0000
Manifest this update:     Sun 19 May 2024 00:00:30 +0000
Manifest next update:     Mon 20 May 2024 00:00:30 +0000
Files and hashes:         1: 1-YkingjFzU8Fh2UJS_Xc8MgGDc4.roa (hash: b1GnzjoSOtbHfujUHkUPt9BXi7RuhW+uYEOk8oVvMNk=)
                          2: 7sxBQLCw1ValpILI7wErQQrai7E.roa (hash: OCyrfN7Ss8+4A+mY8iuKa7cEMA8Yp6g7ZAHad4frs90=)
                          3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: W2v9o3QsFv+lSVRwS9xLnaf+deOdVkSOQNL4Tx5RTgI=)
                          4: e25OHTlFYBDQr3tLqfCHzXXCLtw.roa (hash: MbbObHSe4RRnRuUjtDYoGAVAGwzwkHUk163eIIa+sK4=)
                          5: qr-3OPb4RsPOH8377nSPB-vpkwM.roa (hash: YMEUr7cXKPql0kW0pEtoN/w2pEvljTCiu0rnAfIVBW4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:60:47:da:91:b9:74:99:29:82:5c:4a:ce:9c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
        Validity
            Not Before: May 19 00:00:30 2024 GMT
            Not After : May 20 00:00:30 2024 GMT
        Subject: CN=965057c67bd924432289c36cf33bbc3b1ea9c115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:94:be:35:0a:2e:b2:1c:d8:3c:08:45:8b:
                    f8:0f:06:ad:4a:71:03:0a:c5:e0:11:a7:e6:18:87:
                    71:24:8d:34:8d:ff:87:6f:e3:73:d7:ea:84:4c:1e:
                    8d:73:a0:ca:22:65:04:b7:b6:bc:16:4d:d5:fd:1e:
                    da:1b:9a:2a:2d:0f:03:b4:69:1d:9d:c2:e5:f4:54:
                    a7:4a:ca:ed:9d:5d:9f:0c:10:42:c5:fb:f2:08:1b:
                    d6:a2:f7:a1:a5:ff:ff:70:83:b1:5c:3e:f9:46:96:
                    e4:01:29:64:f3:29:25:8e:a1:23:41:19:44:65:88:
                    37:19:d6:69:44:d2:2d:e6:de:21:32:36:15:69:b6:
                    de:c3:30:4c:1a:55:db:4d:eb:db:32:69:26:b4:9d:
                    c6:16:09:af:3b:7b:2a:88:4e:39:fc:5e:a8:2e:4d:
                    54:a4:0e:a8:80:4e:35:aa:b5:a7:f8:7d:9a:84:e5:
                    af:2e:cc:1a:13:84:cc:9e:b6:12:01:5a:d6:0a:d7:
                    d5:8e:af:18:1c:56:26:c0:97:c0:00:e3:91:9b:63:
                    01:98:0c:7c:57:a4:1e:8b:be:80:bb:01:6e:f3:a0:
                    cb:4b:7a:61:85:45:11:97:a4:be:af:7c:c2:9c:7d:
                    00:0b:c0:27:ef:ff:a4:11:25:81:f7:6c:dd:a3:c2:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:50:57:C6:7B:D9:24:43:22:89:C3:6C:F3:3B:BC:3B:1E:A9:C1:15
            X509v3 Authority Key Identifier:
                keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:02:a3:66:e0:63:bb:83:69:01:7b:92:57:1d:1a:29:d8:85:
         8d:08:a4:44:e9:09:a9:36:ed:c7:1a:ad:57:44:97:9c:05:0f:
         ea:15:31:cb:56:b6:65:63:4e:7a:62:8c:95:33:38:e3:d2:b5:
         2c:d1:5b:0b:be:d8:9d:fe:4b:49:ee:88:cd:6d:76:e8:d0:f4:
         d5:65:89:b1:df:59:87:8c:65:27:28:d2:16:42:8e:0a:7b:b7:
         8c:2e:95:27:0e:3a:de:5a:10:15:2b:57:64:12:26:be:72:8c:
         52:fc:64:c2:55:7b:84:0f:0e:3b:fe:8e:9f:13:92:20:d0:43:
         cb:74:22:9b:56:c4:a2:d6:dd:b0:7b:80:2d:3f:6e:6b:43:e6:
         c6:c9:c2:73:3c:0d:78:fc:c3:c7:0a:db:00:13:38:16:50:d3:
         c7:c5:b1:1e:45:24:01:81:5e:cb:dc:b2:06:ae:5e:fb:e8:98:
         67:a6:bd:84:0e:3f:04:03:fa:90:da:b4:58:69:69:1e:1b:cf:
         6d:cb:69:4c:4e:66:2c:60:f4:4c:18:85:0f:97:0e:5c:ab:14:
         63:2e:28:52:ae:03:8e:f0:c7:2f:aa:0d:01:63:f0:01:ce:44:
         55:49:ef:20:bc:e2:dd:27:5a:a6:eb:1a:7e:19:a7:54:09:88:
         01:a9:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:01:48 2024 by rpki-client on console-fra.rpki-client.org