Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File:                     YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier:          7VV92RcVVlbhHv0AU5xzPzNHQks1ZfgabBRthZHmvtg=
Subject key identifier:   F6:A5:48:4D:7A:A7:4D:37:93:54:3D:CA:7A:8D:E5:00:5A:92:04:0A
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer:       /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial:       0190486A34A713EED9216993D9F6C9A65CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number:          0A8C
Signing time:             Mon 24 Jun 2024 04:03:58 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:58 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:58 +0000
Files and hashes:         1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: 9vo1H11LyW9A+lTgnvGBawK6qx9KjfQCTc5jTwRvKoM=)
                          2: mDGSqEXnupb0XNcqMiAxRFSLaBs.roa (hash: z9SuoPV8YdVg7sanzzab4NW4lfMgjBJGzSiefOdKHkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:6a:34:a7:13:ee:d9:21:69:93:d9:f6:c9:a6:5c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
        Validity
            Not Before: Jun 24 04:03:58 2024 GMT
            Not After : Jun 25 04:03:58 2024 GMT
        Subject: CN=f6a5484d7aa74d3793543dca7a8de5005a92040a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:a9:af:a7:57:af:f4:6d:e9:91:81:da:23:
                    0b:93:03:d8:b8:39:30:5d:5e:b9:bc:c0:c5:ad:06:
                    37:a7:89:1b:7d:d5:a5:da:b0:22:e5:69:b8:d7:a7:
                    6c:06:a2:a3:9a:b7:ea:8c:da:17:7e:44:a7:ac:07:
                    8f:3e:33:3d:12:e8:ac:78:d9:d0:e7:81:ec:fe:87:
                    de:76:c8:2c:49:59:19:a5:42:72:e6:ec:91:b9:3a:
                    34:77:d3:6c:eb:57:2b:5b:5a:a6:75:25:61:57:7e:
                    49:f9:d0:99:dd:8e:c5:5b:cd:f7:f1:87:dc:60:1f:
                    8b:67:f6:15:dd:d3:6c:59:6c:8e:55:d4:c1:71:1d:
                    af:22:ac:1d:3a:da:a8:4e:8d:26:71:d2:8d:fd:c5:
                    c0:5a:e0:10:a9:82:0f:1e:34:7e:17:ce:64:3c:8e:
                    fc:21:f0:72:03:cb:c3:f9:ca:8e:1c:61:51:6e:25:
                    cd:a5:3f:4c:8f:8f:d0:80:ab:b4:64:7d:cf:be:02:
                    26:7b:85:24:50:6f:fd:80:62:c2:1a:5d:8d:d4:0f:
                    d1:06:9a:49:4d:0f:ae:e1:46:74:5f:39:ff:ac:60:
                    3e:d6:ec:a2:06:0d:89:9f:5e:31:92:d2:cc:0c:d4:
                    05:66:8c:39:85:9b:18:41:7f:34:db:26:2f:42:6f:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A5:48:4D:7A:A7:4D:37:93:54:3D:CA:7A:8D:E5:00:5A:92:04:0A
            X509v3 Authority Key Identifier:
                keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2c:b1:e6:91:73:ab:ef:01:42:23:a5:1d:50:10:4f:da:7d:
         b7:01:e7:25:94:5f:09:ef:a0:97:1f:b8:6a:27:a5:77:92:36:
         5d:f4:9c:74:73:20:6d:e2:4b:a2:88:c9:4c:68:41:e2:39:37:
         3f:1c:7b:f0:73:dc:ce:21:3f:e5:68:82:4b:1b:a4:70:6f:fd:
         5f:03:90:f1:a0:d9:18:94:2b:3c:00:a4:d4:25:cf:d1:a9:94:
         2d:69:7d:58:62:04:2f:ef:32:ad:ae:c5:1c:db:62:34:43:87:
         17:15:25:f5:0e:de:1f:35:21:86:07:36:c9:0c:62:09:5e:20:
         35:e4:aa:9d:9d:08:3a:77:ea:78:ba:cb:9d:e6:a0:9b:fb:cc:
         b7:f9:61:19:2f:91:ac:f5:9f:f2:f8:e1:a3:48:ed:b3:22:7a:
         45:79:d3:c6:58:29:fe:05:f0:e4:65:fb:5c:7b:fa:8f:19:3e:
         57:8d:9c:39:e3:cc:52:24:53:33:4a:7c:b6:92:bc:0d:99:92:
         c3:65:fe:5f:6a:b3:af:3f:0c:e1:80:48:58:b7:b8:bb:c8:8d:
         16:9e:8d:c3:54:60:23:a5:ee:61:b0:f2:5d:41:67:cc:a4:d4:
         10:74:87:a5:e1:1d:4f:2b:28:d4:01:b6:35:53:1a:3a:e5:1a:
         2c:6d:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:17:05 2024 by rpki-client on console-ams.rpki-client.org