Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
File:                     ydpiiCTNWbFCcrQFiolkLktHvdw.mft (raw, json)
Hash identifier:          pHruHoKaCLVRlj056RmiyayNo+5gwdmwfscRA9jUjYE=
Subject key identifier:   AB:6C:2E:46:10:74:5D:CD:CE:60:08:68:61:71:3F:EB:1C:11:C8:C2
Authority key identifier: C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
Certificate issuer:       /CN=c9da628824cd59b14272b4058a89642e4b47bddc
Certificate serial:       01901DED9DF68EC3D8EFC63FB17B08AEBC2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: KDxunpW-4iZeTy4vMHtcdCcpnws.roa (hash: nDu7xvio4HE0grvSRmg1fU4iIQ8ThdrfaQA+5CZ2uyM=)
                          2: ydpiiCTNWbFCcrQFiolkLktHvdw.crl (hash: wRPzH+qVKIB5+nB+gO3GTxp4/Ry9o05vy3T3xoMAUXc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9d:f6:8e:c3:d8:ef:c6:3f:b1:7b:08:ae:bc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9da628824cd59b14272b4058a89642e4b47bddc
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=ab6c2e4610745dcdce60086861713feb1c11c8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2a:c4:6c:eb:7c:c8:32:8d:c1:11:7d:4d:df:
                    e8:c9:e0:67:83:86:18:59:a0:7d:a1:b6:14:b0:7e:
                    48:63:91:7a:40:1f:5d:85:97:a0:97:9b:bf:74:f2:
                    b7:04:3e:4a:fd:c9:04:ff:f0:51:10:b6:f6:8d:c1:
                    76:6d:f1:a7:10:57:dd:3f:07:a1:72:99:9c:89:ee:
                    2d:bd:fa:c1:4f:47:d6:1d:ac:35:89:02:f8:bb:fa:
                    46:6f:63:17:f9:7d:29:e4:70:31:cd:61:bd:bb:59:
                    9a:e6:6b:64:6b:ff:96:58:da:6e:63:3a:6e:7d:00:
                    80:e8:40:8d:15:d7:28:a4:61:07:0f:50:a1:41:52:
                    b1:e6:dd:d9:b9:61:3b:4e:07:5f:9d:2d:79:74:4f:
                    a6:97:74:1c:08:e3:21:85:56:14:fb:74:60:35:67:
                    b2:2b:41:c6:d5:bb:dc:2c:27:1e:5a:1a:74:8b:2f:
                    06:15:2a:50:5f:e6:be:32:9a:95:47:84:c4:72:10:
                    a3:aa:be:26:25:52:ac:df:af:26:52:81:eb:59:f0:
                    d6:41:e7:3d:a3:1c:2a:ba:38:85:e7:44:6c:76:1f:
                    86:88:f6:d2:3e:7d:3e:35:71:79:9f:6a:62:7b:56:
                    f6:c6:7b:4d:6e:ff:04:3d:a6:29:c2:83:b7:62:28:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6C:2E:46:10:74:5D:CD:CE:60:08:68:61:71:3F:EB:1C:11:C8:C2
            X509v3 Authority Key Identifier:
                keyid:C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:66:52:81:8b:77:80:21:e9:88:d7:e0:8b:8f:96:a5:39:00:
         66:73:0e:11:40:6c:6e:29:9b:a3:aa:e7:bd:17:23:bd:65:9e:
         47:b2:0f:8d:78:de:02:ad:a2:91:1f:0f:93:b2:4a:9d:99:cc:
         71:49:99:ba:9f:0f:6d:3f:d3:34:5d:f5:bd:a5:2c:da:8e:d5:
         68:00:bf:a6:b6:35:4a:4c:d8:74:b1:9f:ea:22:42:b1:69:f9:
         44:c3:20:b8:1a:4b:b6:e2:cf:ce:58:4d:c0:7e:4f:d1:91:f8:
         e2:78:5c:8d:3d:56:6c:30:d9:be:76:8b:1a:af:4c:4f:91:a0:
         7a:1a:09:31:b8:df:1e:12:63:8f:44:d4:c1:6e:b6:d5:0e:aa:
         09:a2:2f:e7:eb:28:33:8a:b4:c9:3a:42:46:11:1e:7d:2b:9e:
         f6:09:08:4c:59:25:83:f3:dd:f7:1f:08:75:8f:a4:56:ff:45:
         13:a9:4a:cd:71:ee:80:03:cd:a8:85:06:60:cb:a1:ee:7c:b9:
         c2:e6:19:40:d1:76:cf:db:e8:01:92:0b:c1:e0:48:8e:f5:37:
         8d:7d:0c:2f:ef:62:65:16:2d:b3:89:95:da:e8:b1:d4:b5:93:
         d7:65:fd:4f:70:d4:12:3d:c3:97:af:13:16:3d:1f:90:7f:f4:
         f2:8f:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:39 2024 by rpki-client on console-ams.rpki-client.org