Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          WixdxfdKZlV/l6gVPJorKecH7J/cyyb1XF0otaZlsQ0=
Subject key identifier:   42:C4:FC:43:74:2D:1E:BB:AA:56:43:15:8F:15:6E:2E:71:F5:92:5D
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       01902423E52B40C0B30EB746C96DC95E615F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          0EDD
Signing time:             Mon 17 Jun 2024 03:00:50 +0000
Manifest this update:     Mon 17 Jun 2024 03:00:50 +0000
Manifest next update:     Tue 18 Jun 2024 03:00:50 +0000
Files and hashes:         1: 5Y7lehKmlnnXL5BF2MLxgLzpXf8.roa (hash: LYyY0TsBTtVRumKHHgU28OWYtvu91+HEx0oXRn0TY2s=)
                          2: KqmeXwhk_pB4xkGxpNTTDTeiS90.roa (hash: eMpxO11wdE075wjBA9FLiiVnMrmiLtPj0r0REiNl7bo=)
                          3: Kr3OD_h7e8gEnrr0E6V1z57rUtc.roa (hash: 7tenFVgQg127sPgJWl0tLSet7Ggs/jXOBxEe507pzMo=)
                          4: ONAEd8o7j4tRHoEobBg0FrNhnnQ.roa (hash: Uoa+6kwjK3viuK4uPnXGVGULuDkWcIcziKgOTQvX144=)
                          5: xK41Ix21zUPN06W9_KMRvsPQA2Y.roa (hash: tw534xzF38TDRJqM4II5Y0cO+zBLyPJBIzLpjfKlvHA=)
                          6: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: m07J3O4BGxA8Or0HfTQpVUrbTFAlbHwqucIJuTLyc6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:23:e5:2b:40:c0:b3:0e:b7:46:c9:6d:c9:5e:61:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Jun 17 03:00:50 2024 GMT
            Not After : Jun 18 03:00:50 2024 GMT
        Subject: CN=42c4fc43742d1ebbaa5643158f156e2e71f5925d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:36:7b:05:a2:e9:94:84:fe:28:2a:2a:f5:
                    21:92:10:0b:d4:02:69:29:99:5e:d8:74:b7:cc:4e:
                    e4:20:7a:93:b5:36:f9:ec:66:a9:4c:c1:ab:95:c2:
                    3b:21:88:a4:0d:48:a4:10:32:1e:01:6c:e0:3b:2b:
                    db:93:36:79:86:07:e7:bb:27:0b:7a:64:ee:66:31:
                    62:a7:71:a6:2f:51:78:00:36:89:55:ab:94:aa:5f:
                    20:ad:fb:fe:21:39:ba:e3:b8:9c:20:41:9c:5f:81:
                    2f:2e:5c:14:3c:27:0d:3a:5a:a0:f8:9d:90:f0:fd:
                    42:ea:52:56:71:6f:99:e5:18:bb:6b:70:f4:22:44:
                    f2:c2:35:66:6f:1d:ca:d8:7a:6d:22:d2:65:8c:bc:
                    ba:b9:f9:31:82:a1:a9:16:00:01:b5:f3:4e:9b:d4:
                    59:2e:c9:de:8e:9c:35:4f:56:40:f2:2e:0b:2e:7b:
                    62:7a:34:c1:5c:7f:68:c7:0c:c7:f2:34:77:f9:5b:
                    bc:6b:19:3b:b2:ad:32:e8:c3:2a:be:87:d8:87:08:
                    84:38:29:fc:90:e8:8a:2e:b8:24:6a:f2:6f:f8:e4:
                    0b:5e:01:ee:35:53:18:34:b8:67:11:72:ee:62:b4:
                    2f:f0:8a:0d:a1:48:57:b3:3e:b0:62:7d:e9:36:93:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:FC:43:74:2D:1E:BB:AA:56:43:15:8F:15:6E:2E:71:F5:92:5D
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:7c:91:e6:d3:bd:36:9e:89:96:e1:f1:2f:1c:9f:40:26:
         89:c6:9a:e2:2b:f3:f6:c9:23:c6:00:bd:93:d7:78:0e:2b:f9:
         64:2d:ee:8d:10:80:57:e7:84:5b:ec:1f:02:94:6f:fe:83:b7:
         5f:be:9f:b2:45:ad:d1:85:3d:20:d1:21:f3:f1:81:20:fa:5b:
         cb:e3:ef:63:c4:af:94:1e:06:0c:0c:98:a1:d3:09:fe:2d:d7:
         f2:90:bb:0a:26:4f:30:5c:ff:9a:f3:67:fa:0d:8e:2b:b5:c2:
         31:ec:5c:3c:44:82:00:34:6e:e3:64:d1:45:3a:42:f3:ed:a4:
         28:a1:1a:15:cd:8c:8e:82:06:b1:82:0e:94:b7:13:5f:d3:38:
         a8:44:63:b3:98:a4:20:80:2c:98:99:23:9a:0d:e5:e3:f4:4c:
         60:35:6f:f6:da:31:5d:cb:5a:01:3c:dd:f3:0d:bc:94:d9:4b:
         16:aa:20:73:5d:08:bb:be:d0:b8:73:19:10:2c:aa:75:cd:7a:
         51:26:0e:b7:46:d6:96:da:ff:36:91:a2:ac:52:bc:65:81:ae:
         9c:29:62:99:cc:4c:ea:43:81:62:16:9f:03:59:68:b7:5a:81:
         6c:d0:4e:95:31:a1:89:19:54:1f:ec:41:ec:f6:d3:e6:62:89:
         10:6a:51:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAkI+UrQMCzDrdGyW3JXmFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjQwNjE3MDMwMDUwWhcNMjQwNjE4MDMwMDUwWjAzMTEwLwYDVQQD
Eyg0MmM0ZmM0Mzc0MmQxZWJiYWE1NjQzMTU4ZjE1NmUyZTcxZjU5MjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Y2ewWi6ZSE/igqKvUhkhAL1AJp
KZle2HS3zE7kIHqTtTb57GapTMGrlcI7IYikDUikEDIeAWzgOyvbkzZ5hgfnuycL
emTuZjFip3GmL1F4ADaJVauUql8grfv+ITm647icIEGcX4EvLlwUPCcNOlqg+J2Q
8P1C6lJWcW+Z5Ri7a3D0IkTywjVmbx3K2HptItJljLy6ufkxgqGpFgABtfNOm9RZ
Lsnejpw1T1ZA8i4LLntiejTBXH9oxwzH8jR3+Vu8axk7sq0y6MMqvofYhwiEOCn8
kOiKLrgkavJv+OQLXgHuNVMYNLhnEXLuYrQv8IoNoUhXsz6wYn3pNpPfOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELE/EN0LR67qlZDFY8Vbi5x9ZJdMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGt8kebT
vTaeiZbh8S8cn0Amicaa4ivz9skjxgC9k9d4Div5ZC3ujRCAV+eEW+wfApRv/oO3
X76fskWt0YU9INEh8/GBIPpby+PvY8SvlB4GDAyYodMJ/i3X8pC7CiZPMFz/mvNn
+g2OK7XCMexcPESCADRu42TRRTpC8+2kKKEaFc2MjoIGsYIOlLcTX9M4qERjs5ik
IIAsmJkjmg3l4/RMYDVv9toxXctaATzd8w28lNlLFqogc10Iu77QuHMZECyqdc16
USYOt0bWltr/NpGirFK8ZYGunClimcxM6kOBYhafA1lot1qBbNBOlTGhiRlUH+xB
7PbT5mKJEGpRcg==
-----END CERTIFICATE-----
Generated at Mon Jun 17 09:54:52 2024 by rpki-client on console-fra.rpki-client.org