Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File:                     YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier:          JITlcYCh5n+SlKjbaFd/j61E1T4OHkjDBQaf0fmTnmY=
Subject key identifier:   5E:72:46:74:04:DC:8C:98:82:DE:78:9B:AE:04:16:2C:12:07:D7:51
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer:       /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial:       019367EA64A5F4CA3A9B9489EF5FFB4F4E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number:          090C
Signing time:             Tue 26 Nov 2024 10:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:34 +0000
Files and hashes:         1: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: 5zLEy0VWBWHGmyitbe+i01vizQt73CA8UAidkUH2C3s=)
                          2: y9mgZIZmw7mMYyegRqVVO-xeN6c.roa (hash: xKeAaRilnhjxmZGTSCsr0pgEFxbJBQ80Sr6b/1Y7OAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:64:a5:f4:ca:3a:9b:94:89:ef:5f:fb:4f:4e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
        Validity
            Not Before: Nov 26 10:00:34 2024 GMT
            Not After : Nov 27 10:00:34 2024 GMT
        Subject: CN=5e72467404dc8c9882de789bae04162c1207d751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:0e:1b:77:db:2e:1a:56:b7:f0:bd:af:f4:
                    bf:a5:16:2c:c2:b5:52:ae:ac:13:a4:7d:86:ae:7d:
                    f0:ee:5f:aa:23:bd:85:8a:99:6d:d2:a6:de:b3:2d:
                    62:97:60:20:5a:6d:30:ec:55:0d:bc:92:eb:90:ca:
                    8c:fc:24:58:1e:12:49:31:39:01:3a:f4:95:49:c6:
                    22:ac:b1:54:57:cf:5a:e0:f9:05:a4:54:e5:bf:4c:
                    ac:0d:3f:0f:e5:01:b8:4e:30:22:d1:31:e3:ad:1e:
                    44:aa:3c:cc:71:72:9a:f8:73:88:47:a1:2b:0c:dd:
                    6b:14:8c:d5:bf:ee:86:4c:16:28:d5:55:15:6f:33:
                    cd:5c:ee:2e:e7:8b:7e:a0:ac:9c:95:13:91:df:1f:
                    37:49:dd:3c:50:b3:7b:ab:c2:15:b7:52:9d:73:4d:
                    93:22:ec:d9:29:69:0a:3f:f8:6c:56:08:0f:f3:47:
                    c2:b2:c9:8e:ef:35:10:1b:f5:29:b9:9b:fc:9d:87:
                    de:96:d1:ec:d7:4f:09:ef:78:9d:fb:17:81:d5:a1:
                    59:83:d0:7e:c2:2d:79:c0:f7:b5:a2:31:c5:58:db:
                    e6:ea:62:7a:fb:10:ea:9b:17:88:68:73:d0:3d:37:
                    d3:1e:78:fe:73:50:ca:3b:14:08:26:f1:66:f8:fa:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:72:46:74:04:DC:8C:98:82:DE:78:9B:AE:04:16:2C:12:07:D7:51
            X509v3 Authority Key Identifier:
                keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:2c:61:64:97:8e:09:52:d4:b8:4f:8f:97:56:ca:a1:ec:
         c9:00:12:d3:15:07:59:6a:32:d7:94:a1:8a:cf:1f:8d:de:fd:
         ab:e3:d6:b7:1e:82:15:65:d7:3e:d3:b2:32:df:50:64:cd:44:
         c0:69:53:fe:a9:01:69:ff:d0:19:77:34:ad:f2:8f:6c:0d:44:
         84:5b:61:ad:9c:6b:7f:6d:53:02:e5:0f:93:0f:a4:cb:20:78:
         eb:7f:57:24:c6:f7:bc:13:5b:5f:2a:ef:38:53:a9:93:ab:9b:
         3b:b0:0b:82:3c:cb:28:9d:0d:d2:4d:11:07:7f:91:70:de:20:
         09:b2:ea:8c:ff:1e:87:d5:23:86:30:75:08:d6:3d:5b:8c:6e:
         34:ff:94:cc:d1:18:46:40:1c:76:0b:cb:a6:b9:42:79:9f:c9:
         28:4b:7c:8c:bd:a5:4e:03:d3:1f:27:07:4b:99:79:07:e0:83:
         98:4e:23:ab:cb:f2:34:f8:eb:73:79:c3:de:04:bd:36:f6:b4:
         3f:fd:f4:ed:62:84:8e:f9:e4:da:7d:d0:2e:94:f3:46:45:a2:
         ba:73:7e:28:1c:55:ee:8a:ea:5e:17:ab:e4:9d:7d:33:fc:57:
         a8:17:aa:4d:f6:ea:15:86:7a:40:67:49:1f:04:fd:8a:da:b4:
         9a:a5:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:32 2024 by rpki-client on console-fra.rpki-client.org