Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File:                     yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier:          +JGLAzoxj2aIEJ7QHU3kGZ1JTqGZIZlX/IZtWSWO1Ic=
Subject key identifier:   DE:B5:CA:3E:C4:9E:AE:29:68:60:01:A5:E5:C0:F1:97:D4:2A:AD:76
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer:       /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial:       019041F767855A9BD64F46E2EAE0C3AEA513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number:          0E6D
Signing time:             Sat 22 Jun 2024 22:00:51 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:51 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:51 +0000
Files and hashes:         1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: p5jyiI3hbN9sH9Uz2YOi/FZAd+Cq/nHGZlzCmEBd8hw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:67:85:5a:9b:d6:4f:46:e2:ea:e0:c3:ae:a5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
        Validity
            Not Before: Jun 22 22:00:51 2024 GMT
            Not After : Jun 23 22:00:51 2024 GMT
        Subject: CN=deb5ca3ec49eae29686001a5e5c0f197d42aad76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:43:ce:3e:82:ca:59:95:18:46:70:bd:4f:
                    a0:b2:67:61:0b:6e:d6:3d:ae:f5:50:96:45:a2:59:
                    eb:70:96:62:d1:b4:cf:8a:bd:20:59:50:1f:32:8c:
                    fa:94:a8:28:b6:8e:b6:c1:a3:fe:ef:e1:0c:4e:98:
                    d9:15:7d:b0:1c:d0:9a:27:ec:bd:30:ae:5b:2b:93:
                    62:33:c5:80:1e:05:08:0c:14:39:1d:aa:a8:87:fa:
                    f6:29:e5:74:2d:2a:89:54:4b:e0:7f:7d:e9:12:01:
                    3f:76:01:d1:c5:43:80:9b:ee:54:1b:79:70:f2:19:
                    0b:ac:6b:34:7e:4b:22:05:93:dc:6b:0c:18:a8:90:
                    53:6e:6d:01:4f:28:af:ea:c7:25:5f:39:9a:45:b7:
                    c0:ba:21:31:d6:cc:0a:47:59:d2:f1:fb:08:5c:11:
                    67:41:09:29:23:d5:79:a5:d3:56:06:fe:1f:7a:8a:
                    eb:24:e6:f1:ec:87:d8:8f:0c:d0:81:ef:e7:52:58:
                    1b:7a:77:5e:37:13:71:f4:75:0d:e7:c4:62:11:76:
                    7a:4b:26:80:c7:3b:4e:46:25:00:2f:e7:17:d0:58:
                    ef:a5:e4:16:bb:ae:07:dc:fa:93:1f:ed:af:cf:cc:
                    2a:c6:47:07:de:b9:0f:0f:ad:f2:8e:c5:d9:80:c5:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B5:CA:3E:C4:9E:AE:29:68:60:01:A5:E5:C0:F1:97:D4:2A:AD:76
            X509v3 Authority Key Identifier:
                keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:82:68:d9:a1:71:3c:38:e9:f7:90:a0:25:d6:5b:64:f6:
         7f:96:6f:67:b7:cc:52:0b:73:48:b1:7b:ba:3d:71:8f:10:6a:
         71:59:cc:e9:67:eb:23:e5:0c:55:da:18:0f:f9:19:6e:4f:6a:
         e7:c4:08:5d:dc:fa:40:cf:27:34:2a:e6:2a:db:d8:cc:19:9b:
         39:77:16:7c:02:f3:6c:94:69:b2:53:28:f3:74:3c:39:c5:e6:
         55:a9:38:0d:c1:be:c6:44:c4:93:d4:f3:36:fc:67:a6:cc:3b:
         45:93:c2:91:b5:b9:72:c4:a1:3e:d1:fa:8f:05:d9:93:e9:49:
         da:90:25:69:df:7d:d1:7f:e6:ca:44:7d:fa:c9:6e:04:11:2b:
         fc:99:8e:ec:75:cc:cf:af:62:fc:b2:27:e5:e6:a5:cd:d1:21:
         d8:24:2f:bb:83:32:70:c2:c2:79:ea:d3:bd:9e:b0:5c:c6:fa:
         1f:19:3b:f2:a8:c3:e1:28:e6:0a:b3:84:b6:69:5f:1b:f4:e9:
         67:17:b9:ae:fd:96:93:60:96:53:eb:1c:dc:65:b5:af:55:2f:
         fc:2d:ac:bc:c4:01:0e:db:34:bc:f1:d5:2d:37:03:a0:b5:cb:
         4c:1c:49:23:f8:2c:1d:b6:d9:4e:16:bb:63:af:0c:ef:de:54:
         79:b7:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:36:33 2024 by rpki-client on console-ams.rpki-client.org