Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File:                     y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier:          /v98RCd91/mt80Ssd0kBw/IKkob9wdSi5vWfGDRbsx4=
Subject key identifier:   96:D7:41:1D:0E:3E:9A:97:22:87:B9:C0:DE:F5:39:2C:51:AE:BE:D0
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer:       /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial:       01901DEC41EBC899C8B69D00278E8FB25F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number:          0121
Signing time:             Sat 15 Jun 2024 22:02:20 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:20 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:20 +0000
Files and hashes:         1: Ewv14BvtFSgw8NBPZ2dohBy9vqg.roa (hash: 8Gi41HTw3ZY6ZQYqrEFlrqdgCD0C1k6djjMkLnVhwOU=)
                          2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: pW9FGBYUHGvaxABkuQshLa+buvBRCXCk2wbv/on1kV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:41:eb:c8:99:c8:b6:9d:00:27:8e:8f:b2:5f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
        Validity
            Not Before: Jun 15 22:02:20 2024 GMT
            Not After : Jun 16 22:02:20 2024 GMT
        Subject: CN=96d7411d0e3e9a972287b9c0def5392c51aebed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:f5:29:67:94:2c:16:74:f5:be:9f:28:e1:
                    06:49:30:dc:f3:cd:d4:f6:d7:e6:43:9c:fa:3e:10:
                    0f:01:68:af:e6:62:04:82:ce:81:e2:1c:4d:c5:50:
                    d6:1a:8b:0c:ed:42:37:af:5b:68:84:96:7f:3d:a7:
                    da:bd:38:91:1b:17:1d:85:b6:6e:65:5b:51:c3:61:
                    a1:14:a5:31:5a:bc:1c:65:b4:9a:11:ef:78:94:fc:
                    3b:f8:67:2d:b2:59:ab:a4:16:64:5c:0a:c5:09:33:
                    ea:2d:4e:22:5c:47:0a:31:a5:c5:3a:31:1d:89:68:
                    4f:61:88:a4:23:0f:ed:8f:98:b9:01:79:e0:be:db:
                    98:6c:a9:3e:c8:dc:a2:7e:43:f9:28:5b:f7:e3:0e:
                    e0:5c:ea:64:e5:86:e6:e0:42:e0:f0:3e:35:f4:a8:
                    e9:83:98:ae:5a:24:b5:91:b6:64:d3:00:82:7d:d7:
                    9e:0c:12:65:0e:37:35:d9:72:01:9a:f5:4c:26:95:
                    d2:35:10:71:24:29:2f:5f:50:eb:5f:bc:5e:79:c9:
                    54:53:34:9e:82:d5:fd:a0:79:3b:9e:79:22:fc:74:
                    73:f0:51:13:fb:e6:9a:4f:05:01:4f:bf:83:ad:fd:
                    6f:a0:ea:74:9f:1e:28:ff:31:90:ac:28:a8:ef:16:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:41:1D:0E:3E:9A:97:22:87:B9:C0:DE:F5:39:2C:51:AE:BE:D0
            X509v3 Authority Key Identifier:
                keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:79:39:36:ef:44:bd:bb:d3:f0:68:f4:c0:1b:9e:6b:70:b3:
         d7:67:7d:82:cc:76:af:40:66:74:d4:24:ff:8a:ef:5f:3f:ab:
         94:26:6f:cd:f7:d2:6b:bc:14:2a:13:27:01:1a:bf:42:55:54:
         ca:01:2c:61:1b:05:8e:7a:df:f1:47:ec:d9:9c:b0:a7:25:14:
         2d:98:de:f4:f1:69:ff:21:85:39:3c:79:29:17:58:ef:63:5e:
         37:13:c1:4d:d4:c3:21:b6:5c:02:94:92:21:66:94:c9:51:c6:
         9c:35:68:ed:90:74:de:92:ef:a9:a1:a7:af:e8:82:f7:29:e5:
         39:90:61:56:16:e0:f8:62:bd:ea:6d:6b:85:2e:67:a0:95:0f:
         98:74:df:fa:96:d4:5f:a4:8e:40:26:da:5e:6e:ae:65:df:45:
         51:74:ad:a7:9e:63:63:07:e3:90:10:48:2a:47:2b:dc:4f:da:
         73:ec:74:b5:c9:b5:d8:4a:aa:85:5b:30:d6:ab:eb:05:77:8a:
         28:f5:8b:98:ad:48:a3:27:4d:46:c9:f8:9f:10:77:80:e4:68:
         8e:2c:13:d7:2c:14:8c:c7:c7:c4:dd:6c:9d:a0:a6:26:2c:77:
         91:fa:17:57:a1:06:0f:96:3c:3f:a6:5a:f7:9a:85:a2:1b:dc:
         68:bd:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:21 2024 by rpki-client on console-ams.rpki-client.org