Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File:                     yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier:          NkI2+VekwSGhUpB4gnVpsJbZHh3IPH0eeQoVuRQZDbM=
Subject key identifier:   27:95:E7:48:D7:43:0B:10:C1:DC:FA:BE:8E:50:E3:45:4F:0F:66:9C
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer:       /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial:       019033976FB95AFF8F674DBB24AD8CCDF3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 03:01:20 +0000
Manifest this update:     Thu 20 Jun 2024 03:01:20 +0000
Manifest next update:     Fri 21 Jun 2024 03:01:20 +0000
Files and hashes:         1: EmcUcl_6Dhby46seFgpu1CWyPws.roa (hash: TLxUIg6DoFe+DYf4/43NLMSXkovCRrZ7/4ANlkDgpJQ=)
                          2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: ofzspv2ASgNy5Yengl2YAuZ2j0ocPqvNc1+bNzWvKX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:97:6f:b9:5a:ff:8f:67:4d:bb:24:ad:8c:cd:f3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
        Validity
            Not Before: Jun 20 03:01:20 2024 GMT
            Not After : Jun 21 03:01:20 2024 GMT
        Subject: CN=2795e748d7430b10c1dcfabe8e50e3454f0f669c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:58:64:58:72:1c:a6:3e:31:e8:68:96:cc:
                    0f:69:ce:b9:76:a4:82:47:bf:9b:2c:ff:b3:66:d5:
                    18:2b:ce:6c:39:f3:ae:93:76:94:6f:86:a2:66:fd:
                    76:9f:cd:12:5c:6e:49:52:58:28:1e:f1:38:ba:82:
                    ad:40:7d:e0:ec:07:b4:a3:32:40:1d:e3:e7:43:89:
                    b5:01:4c:32:fa:ef:e9:10:dc:c0:3c:4e:d4:b1:12:
                    53:fb:46:3e:4f:92:6f:1e:27:68:07:fb:52:54:42:
                    97:19:20:5d:37:4e:b8:f6:58:cc:3e:c9:45:97:35:
                    79:48:78:9c:3b:36:44:a1:f3:0a:58:4b:27:b0:9d:
                    3f:d8:61:b3:bd:db:95:9b:98:e6:75:2d:ef:8d:7a:
                    f2:7a:59:43:1b:58:be:64:5b:a7:7d:44:56:a0:a5:
                    ec:28:ac:3d:1e:25:62:2c:36:2c:db:f4:af:e0:fb:
                    22:58:b2:76:c8:45:54:0c:fb:27:55:cc:1d:44:b1:
                    48:a2:f2:d1:b5:ec:0d:bb:98:52:88:46:a2:8c:fe:
                    07:c4:c3:ab:b7:f2:de:8b:c0:2a:56:2b:7a:d7:b8:
                    ff:7c:d2:db:28:f0:90:a9:1d:f1:b7:b8:9c:dc:7b:
                    4c:30:c1:14:fd:34:62:56:dc:c3:83:08:b0:a0:fc:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:95:E7:48:D7:43:0B:10:C1:DC:FA:BE:8E:50:E3:45:4F:0F:66:9C
            X509v3 Authority Key Identifier:
                keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:25:40:b1:d7:c8:f3:5a:5c:2c:64:8e:cf:98:33:0a:d3:
         57:de:59:9e:fe:d5:8e:c9:e1:17:47:61:5d:1b:34:63:71:a8:
         87:09:d8:40:50:09:22:73:0d:05:0b:89:e2:f8:fa:d6:0c:c5:
         1e:b7:8e:ac:c5:55:7e:f2:90:a0:c9:41:22:a8:23:5d:96:63:
         59:9c:46:91:a3:bc:bc:8f:83:9b:46:67:ff:aa:d0:6c:85:af:
         52:25:23:33:7d:fc:ab:10:7d:a9:55:0d:43:89:70:71:71:2e:
         ac:9f:98:57:79:ea:b4:ca:fb:6a:16:14:1f:1f:2c:47:3a:0e:
         79:3a:d7:d3:29:7a:e8:b6:97:b8:8e:94:7b:bd:d4:5d:19:78:
         26:1d:62:a4:8d:5a:23:88:22:f6:52:ba:68:67:79:81:ab:3b:
         e0:d0:a2:a9:25:8f:44:2d:47:92:d6:87:e4:fc:84:cc:ba:48:
         9c:63:46:14:14:68:33:2d:cc:ec:e7:e6:c8:55:29:3b:85:79:
         8e:4c:9e:7d:4c:4c:d2:54:82:9e:62:92:74:e7:c5:de:c7:da:
         31:38:e6:77:80:42:d7:e6:ed:1d:5e:ce:58:10:ca:0c:45:19:
         1c:62:dd:f5:e6:59:b0:3c:8a:d2:fa:46:5e:00:62:41:38:3e:
         e7:c6:9e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:57:53 2024 by rpki-client on console-fra.rpki-client.org