Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File:                     YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier:          qnutScffmPI4P/S1JoBeoIrEW+zFTv9kUy/1O5xa/SU=
Subject key identifier:   61:A0:C3:82:A8:01:2B:10:B1:72:3F:15:10:14:71:2B:C6:36:D7:6C
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer:       /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial:       01901DEC9C9DD210159F1E502E8D075D85D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:44 +0000
Files and hashes:         1: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: NBJIonOcWJFWzSko/Cl1YXtsyQHkJTndnsfY4Gt4joA=)
                          2: kbueeR8S6K_OPuqrGgv3vEeH5hU.roa (hash: IADKibPdM/DHOcsOdRCDzrNgtvJt7L+UVkkKe873Hwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:9c:9d:d2:10:15:9f:1e:50:2e:8d:07:5d:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
        Validity
            Not Before: Jun 15 22:02:44 2024 GMT
            Not After : Jun 16 22:02:44 2024 GMT
        Subject: CN=61a0c382a8012b10b1723f151014712bc636d76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:7d:d9:ed:c2:d5:76:72:42:97:33:21:9b:
                    be:4a:23:32:0a:7d:48:c8:3c:3b:3d:68:3c:01:7d:
                    aa:c0:36:3f:cb:29:8c:88:aa:f3:81:0f:af:5f:69:
                    da:3e:f9:c4:97:d4:13:5b:0b:5f:c3:e9:e8:95:78:
                    de:45:4b:e4:b8:1f:e2:17:af:24:b2:06:8e:92:3b:
                    14:b0:f4:d0:7a:ab:e1:a4:2f:fc:bc:35:09:b3:e3:
                    c6:63:ab:b0:c9:f7:37:4b:2c:ef:79:c8:eb:4a:a3:
                    2f:9c:bf:cd:7b:15:33:b1:7f:60:42:af:34:07:13:
                    b9:d5:9e:fc:93:d1:85:60:ad:16:94:df:6f:66:7f:
                    ca:d5:a5:d6:d3:80:74:c6:ac:57:f0:c5:90:be:92:
                    79:0d:9e:c6:17:d3:43:0e:13:4a:1f:8d:1e:87:f4:
                    cb:9c:2d:a6:25:e2:70:70:c6:40:c6:0e:57:ec:72:
                    62:78:cf:46:bd:85:e7:eb:d1:9d:61:b4:67:42:d9:
                    ec:c5:a8:62:40:9a:fa:03:1b:30:45:29:a6:cf:b1:
                    87:c0:b4:a0:1d:76:6b:37:bd:9f:cb:c8:11:42:0d:
                    91:96:69:08:0f:a0:03:23:d3:26:e8:37:8b:78:71:
                    f2:68:1c:d4:92:f8:1c:3b:9f:a0:28:19:8b:42:7d:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:C3:82:A8:01:2B:10:B1:72:3F:15:10:14:71:2B:C6:36:D7:6C
            X509v3 Authority Key Identifier:
                keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:48:b2:76:da:fb:26:ff:05:63:bf:78:fd:ae:37:10:ff:
         bd:da:8a:5d:13:ae:c6:2d:31:e0:a2:29:50:e7:31:27:52:ca:
         10:6c:ee:ce:b3:32:82:0c:1a:49:a3:07:65:7a:85:92:32:92:
         72:f9:01:47:bb:1e:49:04:ef:6a:14:e9:5b:70:7c:5c:89:4f:
         5c:71:3d:cf:9a:69:28:02:c5:7a:da:95:a0:5d:b3:04:d0:cc:
         35:18:28:84:3d:b0:47:7b:a5:6d:24:7d:f2:f0:07:7b:b0:38:
         5c:e4:2a:5d:ce:33:d2:4f:90:25:0a:14:82:88:3e:a5:80:06:
         9a:d3:c6:eb:7a:38:17:d2:18:65:b3:47:0d:53:81:83:65:fe:
         22:c2:35:56:df:2b:7b:a7:af:d7:eb:4d:d1:df:f9:34:d1:d4:
         de:31:8b:9b:ae:c6:a2:d0:1a:0d:68:c3:ab:34:5f:ec:ff:88:
         44:99:36:3f:21:01:ec:9a:02:8e:49:e2:21:4d:57:86:a4:4f:
         61:b7:5a:09:a3:3d:70:29:25:9b:95:b0:27:59:ca:1b:c5:28:
         0b:7a:be:34:a7:58:f0:78:fc:04:e0:e8:57:57:bf:57:71:06:
         b9:5e:9e:16:ab:3f:b6:58:aa:51:05:ea:57:2b:05:70:04:1c:
         e9:88:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:51 2024 by rpki-client on console-fra.rpki-client.org