Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File:                     YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier:          F4j67bhF9fqRZacMPC5h7cfOLjt3FRKuz8BaJ60Li4c=
Subject key identifier:   A5:55:F2:A4:0D:08:B9:AA:D0:08:56:4B:85:ED:9F:1F:FD:1A:C0:F1
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer:       /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial:       01901DEB52022CB37942D55456F307CC1EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number:          1156
Signing time:             Sat 15 Jun 2024 22:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:19 +0000
Files and hashes:         1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: E6VtBtbhjcqEe7+ZjkDxDNWsODpyn9M7Sd4+dGPUnBA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:52:02:2c:b3:79:42:d5:54:56:f3:07:cc:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
        Validity
            Not Before: Jun 15 22:01:19 2024 GMT
            Not After : Jun 16 22:01:19 2024 GMT
        Subject: CN=a555f2a40d08b9aad008564b85ed9f1ffd1ac0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:a8:c4:0a:f7:3a:b3:69:ec:08:4a:8b:7d:
                    2d:03:fc:1f:6f:52:17:78:0a:37:8c:a9:06:f5:02:
                    9f:3a:ec:d2:e0:c1:bb:b1:5c:74:a2:c9:a8:9e:91:
                    28:a1:c9:cf:85:75:0b:c8:4e:de:b5:d0:51:66:52:
                    9e:8e:da:96:8d:f2:99:8f:7f:18:86:24:9e:ed:34:
                    1c:3b:4f:3e:53:1e:22:f3:58:8c:55:71:39:05:f9:
                    e2:9b:75:5b:b8:9a:32:56:86:66:53:90:c7:c3:e8:
                    70:78:93:6e:2a:cf:21:d7:87:ed:28:63:7c:3b:03:
                    b8:df:fb:5a:01:44:58:bc:7e:4c:b0:f1:5e:ed:2e:
                    d6:91:0a:5f:c9:bf:aa:17:46:25:63:5a:29:6f:7a:
                    61:ce:c7:f7:eb:ca:0b:bb:49:21:24:6c:69:38:31:
                    03:26:4f:d3:85:b8:aa:82:5d:4f:d1:bc:2d:09:6f:
                    3e:53:25:74:c0:e9:e5:10:ef:b3:9e:a6:be:51:9f:
                    95:d4:ca:67:a9:5b:03:6c:a9:4b:2d:17:52:aa:b9:
                    08:06:86:ce:7f:08:ea:c3:a0:e2:19:cb:14:69:5f:
                    fd:ed:9c:57:fa:30:11:08:fc:a3:c4:ab:fc:76:b4:
                    1c:01:6f:73:dd:df:0d:5c:d1:74:bb:16:e0:5a:12:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:55:F2:A4:0D:08:B9:AA:D0:08:56:4B:85:ED:9F:1F:FD:1A:C0:F1
            X509v3 Authority Key Identifier:
                keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:f9:ee:76:57:37:1f:de:81:f3:44:49:d2:47:63:f3:e7:
         d5:7c:a8:86:a2:d1:1e:e6:26:fd:a6:25:4b:89:3d:70:b6:e6:
         cf:cd:7e:03:8c:ca:c7:bf:6f:d1:1e:bf:07:d8:6b:f3:c1:7c:
         98:68:bd:23:d3:5f:85:a0:c3:75:49:3a:d5:bf:ae:b9:74:85:
         19:8d:a5:20:ea:8b:38:91:5c:05:2e:56:08:8e:b8:a1:a5:5b:
         f6:a8:39:ab:b2:3a:14:ad:a0:b1:74:80:56:37:ec:d8:f7:f0:
         d1:58:60:cb:fe:51:43:4d:56:71:d4:80:4b:7b:d8:5c:ba:4f:
         c1:9b:a1:2e:a0:9a:67:39:c4:23:b4:d4:35:07:0f:43:13:32:
         40:44:9a:b2:59:d2:fb:43:61:66:8f:67:a7:3f:7a:30:25:58:
         5f:9b:ac:55:55:b7:ba:13:82:51:06:b1:e5:0a:27:dd:a5:81:
         90:4f:8e:09:89:9a:70:5e:7b:97:8c:e1:3d:d1:75:ba:70:15:
         5a:77:70:0d:4f:1d:e6:1e:87:23:26:37:a3:c0:96:f9:95:4c:
         d6:c8:73:ca:24:c6:db:f7:f3:0f:f6:1a:f0:75:aa:9a:b9:68:
         bb:90:fd:49:9a:a6:c0:ef:3e:96:50:18:a0:97:a6:d1:c8:eb:
         96:3c:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:02:18 2024 by rpki-client on console-fra.rpki-client.org