Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File:                     Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier:          LEhH+PxgROXDu0I6tbg5Duju6ZHv9mhG9kJz+vT8nS0=
Subject key identifier:   EF:C5:30:66:77:47:EB:23:73:37:E8:77:EB:99:33:73:51:29:A7:7E
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer:       /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial:       01901DEC16D2E1EA6A2D23482CE5664F973D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number:          023B
Signing time:             Sat 15 Jun 2024 22:02:09 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:09 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:09 +0000
Files and hashes:         1: DMw5-A9P9wRayzZptvt6INF9xuc.roa (hash: /QBi79+/SWOrz3Jl12/GmxQi8aFT/NWuJVZSw86L/8M=)
                          2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: CcmWHHM6qPfbWEXhn6dKBVOgLxkPTKEYO8hof6AfNXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:16:d2:e1:ea:6a:2d:23:48:2c:e5:66:4f:97:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
        Validity
            Not Before: Jun 15 22:02:09 2024 GMT
            Not After : Jun 16 22:02:09 2024 GMT
        Subject: CN=efc530667747eb237337e877eb9933735129a77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:98:fe:43:1f:b4:89:0f:ec:7e:5d:36:6e:
                    08:8b:5f:3e:a4:e7:29:75:05:ac:a0:b9:c9:21:60:
                    08:90:3f:46:f0:6a:d2:9b:20:f9:a0:6e:9d:d3:75:
                    98:0b:b7:74:8c:ac:d2:12:72:2d:ae:d9:16:27:10:
                    28:84:99:9d:a5:6f:3f:8a:79:ae:f5:a3:53:7e:47:
                    65:3c:cb:64:0a:d1:ae:04:d1:5f:13:04:2d:13:d4:
                    08:95:57:6b:e9:57:02:94:4c:9f:05:5a:a3:5d:f1:
                    b0:94:14:7e:bf:6f:a7:98:60:be:d6:be:a2:20:7b:
                    57:2a:ab:ae:1b:c9:49:bf:a5:1e:ed:38:94:74:d9:
                    ad:1c:f3:73:2b:d9:72:c4:87:7f:d7:5c:55:19:bd:
                    3c:03:8d:76:15:95:a8:11:67:73:5a:76:6b:fd:c2:
                    bd:2f:cf:06:52:64:6c:88:9e:17:e6:ab:6e:90:e2:
                    f2:2f:e4:2f:9f:73:3c:cc:7c:5b:19:b4:b5:ab:dc:
                    bd:24:49:3c:a3:98:1e:2f:4a:17:4e:13:25:c4:54:
                    8f:bf:70:73:70:f1:cd:c7:eb:48:54:50:58:0b:69:
                    70:7c:58:a1:b6:05:a2:cc:27:bd:a2:71:3c:0f:57:
                    f2:56:e4:0c:04:2b:46:14:70:e0:ec:d1:93:2a:6f:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:30:66:77:47:EB:23:73:37:E8:77:EB:99:33:73:51:29:A7:7E
            X509v3 Authority Key Identifier:
                keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:0f:17:f7:2b:7b:80:a9:9e:7f:26:6a:01:2d:80:dd:4b:
         ce:a4:0d:55:1b:1e:a2:fc:c0:1c:31:b6:65:37:3a:1d:d7:47:
         4d:22:18:21:e8:16:a3:e1:2e:b5:75:37:51:8c:0c:de:8d:87:
         b4:0c:cb:24:58:bf:c2:b7:65:a6:e2:fc:de:31:31:79:de:2a:
         89:a3:74:73:19:ce:43:59:2b:47:66:7d:72:7d:a7:02:3b:5e:
         c3:60:43:db:d2:c4:7c:0f:3f:de:e1:9c:6d:3a:4a:32:0a:17:
         c7:c2:8c:1e:0d:1e:af:19:21:84:c0:15:4d:fb:f2:0c:5e:82:
         f8:4b:0d:f5:9a:37:a4:64:4d:41:4d:87:66:19:8f:85:bc:0a:
         7a:0e:51:6a:e4:b7:f7:7a:dc:a5:13:1a:af:aa:78:5c:4b:ed:
         fb:16:f0:5c:b8:66:31:6a:e9:d1:50:83:8f:1f:2b:ab:c9:f8:
         78:38:48:ce:1e:a2:1a:0e:ac:88:39:ee:31:e7:e6:4b:3d:59:
         0e:b7:50:8e:8b:d9:f6:1c:68:03:de:d3:a2:78:59:ee:6d:ce:
         a0:9d:ed:d7:ce:7f:5d:ae:79:24:9a:b7:56:e0:ae:1a:ad:11:
         11:7a:fe:24:ca:d7:e3:21:7f:49:10:01:3d:b0:22:4b:22:64:
         56:b2:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:12 2024 by rpki-client on console-fra.rpki-client.org