Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File:                     lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier:          jqr3heBRTdtY1ObsEdCCLDa6urqaXumQjo2X5Jc5Wrk=
Subject key identifier:   A0:68:F3:63:33:EA:D7:5B:02:9B:CB:BC:50:CB:84:87:EE:33:A1:00
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       019040AFFC23BB8E17C757D8F91B98D1C229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number:          1038
Signing time:             Sat 22 Jun 2024 16:03:13 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:13 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:13 +0000
Files and hashes:         1: 18GFSfVDvqQuZheKb96BDaq3jP4.roa (hash: xENSuwYUl2OB7NBM0STzwtRhv0QHOBt0poeVLnBlCnc=)
                          2: KKkvJ1iVL8xE2-f7FDajzWDu9OQ.roa (hash: dyVx9gWb5taOJQDkinh9/eKM53Z31nY8oYv3kZmSJVs=)
                          3: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: CwLp5BZUwJlEFxPZ8rPVgsPP9HFYG+aYAzEX1O1fqRY=)
                          4: lgAnQt3KAbpdlD8J1OO4FdFMwOk.roa (hash: 7pk69z4q6deJEpcl7lC4V+u5M7x52KL5CSMwMrKW1yE=)
                          5: yLO3bqawGbMdqWu9QS44380lAFI.roa (hash: 7Ug0vJYcHts6Y+bv8Z7OpxQNFuagow5lxKmt2gZy3eA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:fc:23:bb:8e:17:c7:57:d8:f9:1b:98:d1:c2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Jun 22 16:03:13 2024 GMT
            Not After : Jun 23 16:03:13 2024 GMT
        Subject: CN=a068f36333ead75b029bcbbc50cb8487ee33a100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:39:0d:56:d2:19:9d:ea:11:96:3a:af:ef:
                    35:fb:dd:d1:50:70:a3:4c:2d:7e:3a:ca:20:b6:c6:
                    57:b9:df:ab:23:9b:e0:50:d5:2b:e2:85:fe:31:b7:
                    c2:00:d2:41:6f:a6:6a:ef:97:1b:16:bd:f1:65:39:
                    c1:0a:fb:34:a6:91:32:c0:bb:ac:b3:02:0f:99:30:
                    1d:70:a9:2e:1c:1d:6b:62:8d:9c:21:a9:d3:de:0b:
                    8a:60:88:3c:06:85:d3:ff:2f:4c:9d:e6:20:98:12:
                    8b:40:b0:a9:e1:66:2f:d1:dd:e5:a9:a7:e6:4c:5f:
                    fe:79:0b:a7:e8:3b:f5:8d:29:4b:94:1f:77:d4:d6:
                    99:19:3f:ec:3e:f3:4f:d0:6a:6c:27:c9:7d:eb:c4:
                    12:1f:b5:f3:fe:6f:45:23:6c:f7:29:66:58:23:6f:
                    28:00:a5:be:8e:7e:df:68:3b:18:d5:55:be:98:05:
                    a5:0c:2c:10:ce:7c:34:66:73:46:fe:c1:2b:ff:34:
                    a6:94:9d:c7:70:48:d0:c9:a3:b8:24:b9:22:c2:a9:
                    0f:c1:e2:8d:cf:20:b3:ce:c5:9c:87:ce:73:ec:7a:
                    5d:84:27:5a:af:75:b7:5c:12:ba:40:67:77:16:6b:
                    5c:c9:f9:65:15:5f:c5:69:4b:bb:ab:a1:0a:6b:b5:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:F3:63:33:EA:D7:5B:02:9B:CB:BC:50:CB:84:87:EE:33:A1:00
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:29:5a:99:f3:45:27:e4:29:ae:fa:cf:38:aa:6b:a4:61:
         70:5f:50:3f:ea:aa:c1:33:9e:d0:43:fc:a0:75:84:75:e9:33:
         8e:0d:65:d9:d4:5d:a7:84:82:d9:33:a6:d0:2e:ef:1f:87:17:
         f9:7e:ca:c4:af:1f:27:3e:a5:ef:b2:e4:a3:5d:e1:6b:ed:23:
         ed:5f:6d:f7:1a:2d:a8:a8:a7:35:b5:26:1b:fc:59:48:a1:21:
         d5:9c:57:06:1c:b3:ac:f9:79:17:15:1c:05:95:a9:eb:d9:b8:
         66:9c:de:ba:4c:7b:f5:22:af:db:a0:0d:bd:19:91:9f:86:3d:
         69:20:fa:d3:a3:e9:88:e1:0d:1d:99:b4:25:9c:73:d0:be:ac:
         e1:85:c1:3b:72:77:f9:89:e0:32:28:08:5e:c7:a9:d0:09:0b:
         55:d9:20:76:bb:59:61:74:34:39:f6:ea:61:9b:36:35:23:f4:
         b0:cd:72:2c:9f:a2:21:39:94:c6:b8:cc:6e:c7:5b:d8:e7:65:
         e7:b4:23:a4:3c:79:2d:c1:74:e8:f6:33:b9:a8:ba:a9:f6:f0:
         65:59:6c:80:f7:28:25:3b:cd:5d:72:70:85:d4:6d:d4:16:20:
         3e:2e:9f:67:49:6d:39:21:86:b4:05:02:e4:97:70:e9:da:0a:
         af:db:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:40:10 2024 by rpki-client on console-ams.rpki-client.org