Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File:                     Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier:          k8JwjYiNBv0SfonYqiN9qlxKIKhdAVOu/MA/ackhYws=
Subject key identifier:   9C:F1:26:8A:49:80:67:94:57:7E:75:06:81:E7:5E:03:A6:A4:6D:EC
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer:       /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial:       01905FCA7BE40352E688F2742133151B3885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number:          11E7
Signing time:             Fri 28 Jun 2024 17:00:23 +0000
Manifest this update:     Fri 28 Jun 2024 17:00:23 +0000
Manifest next update:     Sat 29 Jun 2024 17:00:23 +0000
Files and hashes:         1: 9xPqFnRbDR3ATFDsUDrScTG_PNw.roa (hash: hlTbSEYaEj+ZMVOrAjpXa9SXDsiZzJvIglTuzxzFXFE=)
                          2: NKuMQFxvmybG-m3mXwwf2p18RBk.roa (hash: IPwwMjnq0YSGvTNuN1mg/kYLIJC0yrIzjOjuXrtJCtg=)
                          3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: phFsFeGfao7GQNgHusLNl7yztxKcKnFUZ6AeJsKoz2I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5f:ca:7b:e4:03:52:e6:88:f2:74:21:33:15:1b:38:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
        Validity
            Not Before: Jun 28 17:00:23 2024 GMT
            Not After : Jun 29 17:00:23 2024 GMT
        Subject: CN=9cf1268a49806794577e750681e75e03a6a46dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:7e:6f:b6:81:1b:19:7f:26:c6:a2:2d:3c:
                    32:18:55:5a:05:36:d2:0f:ca:d1:13:f7:7d:33:77:
                    8e:0f:85:c9:12:0b:05:0f:52:bb:6a:c7:6b:51:6a:
                    08:c6:c3:d3:9c:b9:b0:f7:58:09:49:5f:e2:00:ae:
                    51:9e:6c:e9:97:2c:26:72:03:bd:3b:08:ba:9f:17:
                    63:f1:49:6a:0c:54:35:99:a5:af:c0:f7:6e:d4:04:
                    b6:04:05:04:2a:bb:69:a4:88:fd:ee:a9:37:bb:0b:
                    7d:b0:e1:7e:f2:cc:96:b0:47:5c:e1:be:8c:2a:00:
                    83:2a:7c:f6:6f:df:80:3c:9c:6d:46:8e:af:15:2c:
                    6e:f9:2d:0c:b3:31:37:c0:f7:50:c1:1a:de:9b:43:
                    dd:b0:58:cb:0e:00:1b:e9:c9:f0:6e:5f:34:eb:2b:
                    f3:c5:05:1b:aa:65:4d:5a:4e:29:c8:c0:95:e8:53:
                    24:44:03:c0:bf:8f:91:41:b8:7f:e7:9e:53:59:b2:
                    44:af:8c:29:92:51:44:b3:3e:ed:7f:11:19:a3:a2:
                    95:83:1a:56:77:c7:73:5f:0f:50:4b:d4:c2:6b:4d:
                    4e:6d:e8:94:09:db:6d:92:47:3b:11:32:92:84:0b:
                    57:9e:1e:f6:a4:27:14:4e:6e:29:15:93:10:06:5c:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F1:26:8A:49:80:67:94:57:7E:75:06:81:E7:5E:03:A6:A4:6D:EC
            X509v3 Authority Key Identifier:
                keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:ff:f3:a3:4f:bd:ac:64:85:02:87:9a:c8:66:78:f9:d1:
         2c:fb:ba:13:e7:c4:48:1a:c8:99:12:27:cd:e6:87:7e:e3:a3:
         8f:3e:0c:ba:d1:fb:6b:37:02:0c:d6:eb:ba:89:d8:27:26:08:
         46:3a:38:64:42:b7:da:9f:e2:6a:98:26:2b:01:41:6d:95:d0:
         52:b0:01:3a:3d:62:bd:30:62:48:6a:50:9c:8d:0c:b5:8f:bf:
         2a:cd:ad:cb:4a:3a:6f:ae:9b:2c:80:a2:96:9d:2b:a6:e0:25:
         c9:e8:2c:23:30:e0:53:f3:bf:cb:48:57:5c:1b:67:d8:93:1e:
         2c:28:01:8c:c7:ff:b0:85:11:5c:28:60:38:d9:0f:17:43:fa:
         6e:fc:5b:58:69:69:60:69:0b:16:90:db:4c:7f:8e:ba:42:25:
         8c:54:a5:da:d5:2a:1f:bd:eb:9e:e7:5d:7d:20:a1:1f:6b:9c:
         89:26:d8:86:37:bc:3d:95:76:8c:e4:75:21:41:c9:29:76:53:
         9d:52:e2:04:c1:cb:b6:62:8f:2c:01:79:ac:b5:ca:e0:f7:04:
         7d:bd:26:97:bf:b9:61:26:a8:1b:0e:b4:ef:7a:d5:5f:9b:96:
         fa:39:40:b7:26:d9:89:e8:60:11:50:cd:0d:61:c2:87:e8:6b:
         38:29:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:43:13 2024 by rpki-client on console-fra.rpki-client.org