Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
File:                     YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json)
Hash identifier:          Di0OsJ9zLx0cceAxV+exFjJezr9j3hu8jvIMEf/ppgU=
Subject key identifier:   42:7E:8A:B6:11:3D:CB:5F:16:E8:29:64:F1:9F:D4:E2:0D:B0:12:4F
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Certificate issuer:       /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial:       019044F8F0B4943D0ECE4FB4007C9A7CCE2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 12:01:23 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:23 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:23 +0000
Files and hashes:         1: S6N_DpDrvilhHQvUn80TztRdHMg.roa (hash: UuyFYrk4wuUiVfKe6FXt/cjJwfvhlSEZlOuyyr9r134=)
                          2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: GwVR44ypgdhhToXRVurqioRyaB6vH4s97JW+oad9Bjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:f0:b4:94:3d:0e:ce:4f:b4:00:7c:9a:7c:ce:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
        Validity
            Not Before: Jun 23 12:01:23 2024 GMT
            Not After : Jun 24 12:01:23 2024 GMT
        Subject: CN=427e8ab6113dcb5f16e82964f19fd4e20db0124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:94:c7:18:e1:b2:b8:e4:3c:5b:e7:96:a5:
                    92:f4:62:4a:21:f2:33:7c:26:fa:75:46:b0:98:c4:
                    00:ce:9c:74:27:32:1a:f9:59:23:3c:33:d8:52:36:
                    fa:ca:7c:22:d7:37:06:93:9b:c0:b1:72:6e:bf:d3:
                    ee:e1:56:c6:f9:fc:29:fa:37:20:3e:84:ea:c0:56:
                    78:06:7e:44:a9:0b:e0:89:8e:80:d8:e4:e5:cc:34:
                    90:55:82:14:c5:07:ea:bc:9c:fe:e9:e4:98:d3:60:
                    35:bb:99:f7:77:17:83:34:68:09:10:f1:6f:2a:a7:
                    2e:87:9b:a4:1a:60:f8:bc:43:3c:13:c3:60:4e:36:
                    0e:fa:29:c5:ab:c1:f1:5d:8d:d1:7a:15:eb:76:84:
                    e3:8e:e2:0b:d3:02:d6:aa:28:4f:db:44:e5:ec:ea:
                    86:c6:bf:b1:06:e0:e2:e4:39:93:ee:36:2a:df:51:
                    dd:79:5f:64:62:f5:35:f9:49:27:b0:8a:06:72:a6:
                    9b:0b:3e:4f:e5:02:45:47:c9:38:11:72:b5:f9:d5:
                    e7:8e:8a:47:6b:99:3b:b1:ce:d1:be:ee:74:de:81:
                    df:d6:87:78:a3:ac:14:57:aa:da:5f:65:16:2b:85:
                    16:77:e3:7b:59:cd:6f:c8:8d:84:07:f0:0f:35:ec:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7E:8A:B6:11:3D:CB:5F:16:E8:29:64:F1:9F:D4:E2:0D:B0:12:4F
            X509v3 Authority Key Identifier:
                keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1d:c2:c6:cf:21:aa:ce:ea:a4:de:8f:ab:7b:26:53:f2:29:
         ba:73:6a:82:52:28:fa:b5:d3:be:28:a5:c6:66:e0:f7:4d:33:
         a7:f4:6d:3c:90:80:2b:33:80:af:8d:36:55:30:97:1f:d8:03:
         47:ca:46:d5:e4:2e:5e:8e:45:21:37:4d:5b:64:cf:d9:f2:55:
         3b:0d:dc:c1:40:75:c0:4a:39:b8:ed:f1:ff:a2:37:26:6c:28:
         05:97:fe:f2:33:dd:22:93:ba:43:fc:78:b4:b9:ce:97:48:95:
         42:ae:6a:b2:d1:9f:3e:d8:b8:d0:7b:23:a8:48:60:3f:44:cc:
         74:a7:e3:b8:56:1e:1a:bc:4b:8f:83:d7:76:8f:86:fd:6a:01:
         e4:3c:b0:d7:cd:ac:03:b2:5e:5c:28:be:ec:0e:99:73:54:07:
         c6:cd:d3:eb:74:d0:c9:da:fe:60:33:f9:f1:45:b7:7f:7b:9b:
         fa:6d:ad:4f:0b:94:5f:74:dc:45:d3:ab:7b:92:76:d7:45:b4:
         73:04:94:d6:a4:72:75:e0:b0:90:06:f7:3a:8b:08:30:0e:27:
         3e:61:18:7c:27:0a:d7:aa:f2:65:8d:69:db:d3:62:cd:36:3b:
         42:4e:d5:b9:8c:45:48:fb:6d:78:1c:40:a7:3b:b3:01:b0:32:
         c7:83:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:52:32 2024 by rpki-client on console-ams.rpki-client.org