Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File:                     YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier:          095bB5nhS23n3fQr8KDO6OhcoP35A0MQ6yZubV78dzA=
Subject key identifier:   AD:50:95:C7:7A:12:35:73:17:BE:2B:37:DF:12:59:1E:D0:7D:BB:0F
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer:       /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial:       0190452F9A47B9F4D48E044C7179B49EBC33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 13:01:05 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:05 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:05 +0000
Files and hashes:         1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: XRf5N8Pkn5kn/mr27aZB8uIVmLZuYn72epk3+tTicOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:9a:47:b9:f4:d4:8e:04:4c:71:79:b4:9e:bc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
        Validity
            Not Before: Jun 23 13:01:05 2024 GMT
            Not After : Jun 24 13:01:05 2024 GMT
        Subject: CN=ad5095c77a12357317be2b37df12591ed07dbb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:0e:5b:57:ee:ed:ce:1c:52:d0:45:1c:1b:
                    ca:fe:35:bc:ea:9d:f7:63:00:c4:17:88:f9:3d:6f:
                    4f:3a:d3:2b:7a:56:9c:3d:66:b6:46:03:9f:92:ac:
                    b4:dc:57:e4:1a:0f:09:11:b0:1d:5c:8f:ee:f9:fe:
                    6b:4d:d4:0f:a5:bd:61:01:fd:7b:95:7f:64:93:08:
                    ba:f1:ca:76:0b:f5:f1:5b:98:6a:80:60:e8:a7:24:
                    b3:14:68:ce:44:75:37:c8:b7:8d:75:84:cc:d5:99:
                    30:0a:ca:3b:ae:f8:a2:fa:48:15:b0:a5:6d:3c:9f:
                    e7:c4:09:83:0b:cf:53:5b:b7:ea:e6:6f:cd:6a:27:
                    bf:11:af:27:ae:05:32:e3:d4:db:19:4c:98:83:ce:
                    44:d9:3a:f3:a6:2f:1c:66:c0:91:0f:94:9b:b3:be:
                    5b:0a:6a:94:71:7c:b3:55:44:56:6b:57:06:43:64:
                    6b:c8:ee:69:8a:68:13:72:f3:7b:aa:9e:6f:a8:5a:
                    34:9c:6b:c8:e2:26:8e:c2:d6:31:f4:9c:3c:31:b1:
                    b4:08:c1:8a:87:4c:ca:35:b2:f3:11:bd:96:65:ee:
                    3a:77:10:17:94:11:0c:59:02:cd:9e:c4:fc:74:41:
                    18:83:6b:2f:ac:7d:ca:6e:07:04:72:9a:a1:5f:68:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:50:95:C7:7A:12:35:73:17:BE:2B:37:DF:12:59:1E:D0:7D:BB:0F
            X509v3 Authority Key Identifier:
                keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:6b:d1:7a:32:85:ec:e5:52:85:30:1c:99:37:2a:04:df:
         2c:96:87:61:55:e3:cd:d9:3f:dd:00:1a:3a:02:78:3a:f6:35:
         d8:85:14:84:93:de:9f:1f:49:ff:58:e8:85:f6:0a:83:03:fa:
         35:c1:66:71:4d:1e:1d:8c:5b:21:6b:f9:13:a7:99:fc:7f:85:
         8c:d5:d4:6e:d1:b8:8a:2c:60:fb:54:4e:5b:89:10:3d:b7:dc:
         ed:b2:5e:d9:c1:25:b8:c7:60:6e:58:f1:55:65:ff:3a:0b:12:
         97:43:e8:e1:ff:d7:52:49:7d:3a:28:21:af:e5:96:7f:35:21:
         e3:25:41:87:54:04:ee:ee:92:bb:78:8e:da:5c:7d:13:2c:1a:
         b0:0c:84:cb:05:30:9e:24:f9:63:ab:cb:82:90:8e:64:85:9a:
         ea:04:49:85:14:00:d5:11:86:69:43:38:c6:5b:d3:31:d2:58:
         8a:72:41:14:36:c4:f2:f7:5e:92:6d:9d:23:37:77:51:23:5d:
         1a:5e:d0:a7:c7:4a:9f:f3:2c:25:05:86:31:be:1c:53:a7:ad:
         22:e9:a5:51:fe:f0:53:de:97:73:89:77:c4:09:bd:4a:26:0b:
         db:20:59:49:f8:9d:df:28:84:06:e8:18:ae:ae:b1:1b:5b:4b:
         95:f5:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:27:54 2024 by rpki-client on console-fra.rpki-client.org