Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File:                     YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier:          te+UzhCSDfYqSWC6vYj0i7n64vS4P1SQrBjutExz084=
Subject key identifier:   3D:48:2E:2E:66:EC:0D:94:C3:AF:95:01:AA:12:BE:05:E2:BF:FB:CF
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer:       /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial:       01901D0F1F4B04A6ED79014B4D2D1654E2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number:          0C66
Signing time:             Sat 15 Jun 2024 18:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:48 +0000
Files and hashes:         1: X4yu8N6fzZRHf29LRRyfASf8aUY.roa (hash: m4ZXig00CTVsHk/nstd/t+YbwGbzVxa/iHuVD4bygSw=)
                          2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: uJ3hze3/T/etFsfFdeC9Gldffd7QLexVtLWtgp3KY50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:1f:4b:04:a6:ed:79:01:4b:4d:2d:16:54:e2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
        Validity
            Not Before: Jun 15 18:00:48 2024 GMT
            Not After : Jun 16 18:00:48 2024 GMT
        Subject: CN=3d482e2e66ec0d94c3af9501aa12be05e2bffbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:06:ee:68:f3:56:7b:83:d9:5f:55:57:7c:
                    48:48:31:54:f9:00:15:68:56:2c:af:52:45:39:d1:
                    cc:4b:1d:85:1f:6f:da:bc:76:fb:c6:cd:25:5c:e0:
                    f9:26:5a:1e:0b:b5:cc:6c:e1:8a:01:bf:29:e3:8d:
                    c8:bb:9d:f4:85:e9:98:38:4f:c3:59:8f:3e:1f:1e:
                    d3:ba:96:b0:95:78:f3:b1:09:65:d3:97:2c:2b:2c:
                    d6:1f:f2:ce:09:70:3a:7a:23:cb:d4:85:f4:f9:60:
                    8f:6e:e9:8e:bf:20:e0:d0:65:a1:2d:ae:8f:da:bc:
                    4e:40:93:45:d3:a2:7d:da:74:d0:ba:32:62:2f:9f:
                    fc:66:a5:42:48:18:66:65:28:33:e9:3d:a1:6c:cd:
                    0c:32:67:b4:b5:89:64:82:6d:be:93:31:f3:39:77:
                    e3:f2:5a:a5:0d:50:23:2a:f8:94:2d:a3:49:5e:6e:
                    79:4f:f9:e0:82:32:7c:41:5d:8f:cb:cd:41:46:1d:
                    7e:5a:b9:7f:4a:04:e5:47:4a:7e:92:75:2c:14:7b:
                    bb:a3:8f:66:72:2a:d3:5c:f2:13:91:7a:5c:90:32:
                    40:e8:9d:71:b3:34:f8:3f:82:47:07:a7:6a:dd:2f:
                    a0:93:11:38:cf:4d:17:91:04:b9:9d:79:f3:ed:6a:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:48:2E:2E:66:EC:0D:94:C3:AF:95:01:AA:12:BE:05:E2:BF:FB:CF
            X509v3 Authority Key Identifier:
                keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:95:df:09:b1:7f:66:eb:1d:6e:27:c7:15:cf:7f:fe:94:4b:
         5a:03:0a:3e:02:e0:ac:56:ec:11:0b:52:5b:1b:78:78:cd:20:
         14:68:42:5d:99:cc:b5:66:df:01:4a:29:09:71:bb:6a:2f:27:
         8b:7b:76:10:4a:2a:49:10:2d:f1:5f:8c:52:a4:f9:7e:da:7e:
         7c:c1:6c:53:7c:bb:9d:c4:42:94:25:24:5e:86:33:23:dd:17:
         2a:ff:db:39:e8:37:a8:e9:95:80:a0:c8:fa:74:94:1e:55:e1:
         3d:8a:8f:e0:7b:66:2c:14:aa:e0:56:8b:7e:f7:f6:ca:0b:d6:
         b6:cd:03:6b:da:eb:e9:fb:21:2b:ef:ae:a6:72:31:a8:e6:82:
         d1:62:67:99:63:e9:58:89:73:77:e1:e8:2b:12:c6:48:7e:4d:
         5d:d6:64:2b:00:33:7a:0c:24:81:8b:2d:eb:08:27:4b:ff:f9:
         ff:98:56:67:dc:02:98:34:45:e2:b4:06:60:f7:f0:d2:53:30:
         48:58:8f:17:8f:04:9a:9d:a4:9b:26:06:97:67:d3:8d:e4:f5:
         81:e4:01:8d:df:0e:c6:9b:1c:6e:9c:f7:c4:f2:a2:8c:c2:1b:
         84:49:95:71:c3:09:7b:d8:46:e7:2c:39:ca:3e:92:bf:5b:d3:
         43:d5:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:01 2024 by rpki-client on console-ams.rpki-client.org