Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
File:                     y34FPHGZWsyb8TM_55w9W_1ulk4.mft (raw, json)
Hash identifier:          h1zkMiyWhU7nOM2ImCpraAUpnHJuF+Nh1qgyzZfOLOU=
Subject key identifier:   94:45:78:1A:00:F0:B8:7D:0A:54:CE:53:7D:1B:94:1C:33:18:26:3E
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Certificate issuer:       /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial:       0190452FE2537E979219D0F8F063B7F242A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
Manifest number:          0848
Signing time:             Sun 23 Jun 2024 13:01:24 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:24 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:24 +0000
Files and hashes:         1: sNphM0EQpMEW8BKx6K-zEqEHMaw.roa (hash: uywkZF8R7LMAwkoIXhMl4kCHkxczesYS85cBKiOKmA8=)
                          2: y34FPHGZWsyb8TM_55w9W_1ulk4.crl (hash: OaRqrWd3TpVQyoWvWS8DcfnsL0/1po+ljTeilCq2XoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:e2:53:7e:97:92:19:d0:f8:f0:63:b7:f2:42:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
        Validity
            Not Before: Jun 23 13:01:24 2024 GMT
            Not After : Jun 24 13:01:24 2024 GMT
        Subject: CN=9445781a00f0b87d0a54ce537d1b941c3318263e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:d7:23:23:2a:43:48:e1:61:b8:79:39:e0:
                    48:fa:6c:fa:c2:c8:25:ce:1f:eb:f6:2c:f4:bc:b1:
                    62:be:8a:9c:8d:55:f0:f0:17:6f:e0:7e:da:c3:54:
                    a0:29:34:0b:bb:60:6e:20:a9:92:8c:88:5d:46:84:
                    a6:da:02:3d:cc:6a:7b:ca:12:d6:3a:4d:b9:51:9b:
                    7b:cf:bc:b3:df:a6:f3:4b:63:a8:1c:06:9f:e0:e1:
                    b6:ec:e8:78:a0:2e:83:b3:e4:87:2d:9b:92:e9:c7:
                    09:06:52:64:c3:54:ff:8b:e3:3d:96:87:ed:9e:3d:
                    ea:a1:85:67:5b:ef:35:fe:9c:88:6d:1a:c7:bf:2d:
                    a2:17:73:c0:50:53:a3:92:87:00:06:22:11:a5:83:
                    56:d5:2b:43:16:71:6d:fd:f8:6d:49:70:fa:21:cd:
                    7b:71:a9:b3:f8:bb:3d:b5:02:03:33:2e:89:12:6b:
                    a9:96:a0:20:de:b7:ad:07:07:17:66:3a:51:44:bd:
                    17:66:ef:27:d9:8b:4e:02:f1:8a:27:fa:7e:9a:be:
                    3e:dd:5a:69:8a:89:6d:8c:04:f3:9a:f6:82:e7:35:
                    2f:2f:f1:cf:c6:8a:19:e9:81:ad:8d:ca:db:f8:ca:
                    f2:74:81:4b:bb:de:b4:1c:39:40:63:74:1a:2c:7b:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:45:78:1A:00:F0:B8:7D:0A:54:CE:53:7D:1B:94:1C:33:18:26:3E
            X509v3 Authority Key Identifier:
                keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:2f:d3:d2:42:e7:df:1b:d2:18:30:7a:a0:c4:67:26:34:
         35:3e:56:bb:19:d1:d8:01:cd:cc:d9:6e:ee:65:de:92:de:98:
         61:db:8d:e9:4b:23:e6:d1:86:f9:65:88:e8:a1:5a:d6:70:4f:
         b0:09:7f:51:03:2a:26:e0:00:64:2a:d6:52:69:7b:2f:7e:9b:
         b1:ad:38:0f:fa:6a:1a:0d:8c:15:21:c5:4c:a7:7f:d8:5e:d3:
         d6:f7:d9:e2:6d:0c:36:3f:af:4d:ef:73:3a:a3:be:a9:19:0f:
         2f:b1:d9:94:ad:2c:a1:56:6f:a8:e9:14:17:9c:10:5d:78:42:
         54:89:2e:97:98:51:50:8a:4d:48:b9:74:61:aa:cd:0e:05:95:
         9c:4b:35:f5:9c:b8:4e:6e:4a:13:93:17:82:09:5a:1b:ca:9c:
         fd:ae:ff:d1:91:46:23:b3:3d:95:37:2f:a2:80:e8:60:c6:44:
         ec:ff:3d:69:c8:11:38:8e:47:d5:e1:ab:75:cd:3c:fa:02:9a:
         e6:3d:5f:f9:c5:67:de:c5:2f:81:62:7f:36:2b:d7:07:35:37:
         75:9f:83:cc:49:33:45:2e:ed:c9:9e:6b:0b:b3:c2:e1:58:23:
         09:84:69:a0:6c:9d:08:8f:ad:f9:f1:6a:2d:b8:9c:be:5e:09:
         7a:94:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:17:31 2024 by rpki-client on console-fra.rpki-client.org