Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File:                     yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier:          0VVI0chBolP/oZ/qc/QjNGxoIAWd0tZmNELcu6foe4k=
Subject key identifier:   B3:84:28:34:01:41:7B:1D:71:04:67:7F:05:82:47:A0:15:F7:14:DD
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer:       /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial:       01923AA702D9F5268F8DA1F6D44220CB0862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number:          12E3
Signing time:             Sat 28 Sep 2024 22:01:16 +0000
Manifest this update:     Sat 28 Sep 2024 22:01:16 +0000
Manifest next update:     Sun 29 Sep 2024 22:01:16 +0000
Files and hashes:         1: IPeB_4oFUosWM_xpZez_bTsnFr4.roa (hash: uGGbyq/v5AW/NTT8wHa5ucEHEe+2ry5QXVT1i+SbQlw=)
                          2: vK-Xsy_lxlY2UwmSEVNVXo5cJSo.roa (hash: hKMGzMk4nuJMT7X2pKv7bDghCdHa03TC4wFkoY766lY=)
                          3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: ui4vYemwcgJ+vIkfXbqOUi4OySwe//F+1N4/0FdyyZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:02:d9:f5:26:8f:8d:a1:f6:d4:42:20:cb:08:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
        Validity
            Not Before: Sep 28 22:01:16 2024 GMT
            Not After : Sep 29 22:01:16 2024 GMT
        Subject: CN=b384283401417b1d7104677f058247a015f714dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:e8:4d:c9:1a:f0:00:97:6a:a0:e1:17:d0:
                    6e:9e:94:ad:ae:83:8f:95:36:dc:3b:0f:a2:e5:08:
                    b9:70:c4:b5:ea:fb:c6:44:f3:95:d3:5e:4c:60:a6:
                    73:bb:9e:bb:8b:12:e9:43:d7:a4:55:ea:96:f7:43:
                    97:a7:c3:92:c8:76:3d:2f:59:b2:b7:ad:e6:fb:5b:
                    59:77:97:36:45:d4:26:fd:3e:f9:3d:85:80:a2:64:
                    d9:c9:81:4f:24:33:b6:31:77:3c:54:3e:7a:4c:13:
                    89:a3:2e:13:18:ed:b5:ad:72:c3:34:1d:f2:17:b4:
                    15:f9:48:44:91:f7:62:b9:fc:c4:35:9d:a8:e0:1c:
                    69:41:1b:9f:8b:f0:25:8c:7b:9f:41:12:3e:ae:b0:
                    b3:78:36:8a:45:89:d1:55:b5:d1:84:60:e4:e1:48:
                    88:f8:4b:e8:36:81:64:30:45:e9:10:14:9b:5c:da:
                    85:2f:6f:8d:08:35:b3:36:fc:3e:b5:63:9e:dc:88:
                    cc:67:06:15:ab:9c:ca:b7:00:e1:3c:9b:be:f5:e7:
                    80:6a:01:84:38:ce:c1:5e:1c:c2:7f:c1:bc:be:bf:
                    60:43:97:ab:58:a1:b6:fb:cc:f1:cc:4a:3b:4a:f5:
                    48:3a:ff:e2:6f:0b:14:84:f2:1e:21:6c:84:e4:09:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:84:28:34:01:41:7B:1D:71:04:67:7F:05:82:47:A0:15:F7:14:DD
            X509v3 Authority Key Identifier:
                keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0f:f1:58:14:75:04:26:55:22:ae:a7:16:f4:79:84:2c:2e:
         44:97:f9:1b:98:a7:a9:c6:6d:32:91:f3:31:c1:1b:11:c7:03:
         92:2d:3e:a1:d5:ee:fd:7c:5d:2b:85:27:f8:22:0b:63:51:ef:
         b7:0d:03:cf:5c:a8:32:3e:99:27:74:33:2f:6f:68:82:54:37:
         80:ce:24:61:75:14:50:2b:b2:37:6e:a3:3a:a4:10:e3:54:01:
         df:ac:31:00:0b:1b:09:e7:b0:5b:42:09:b7:e2:ac:d9:cf:8e:
         74:9f:d3:6f:a3:32:56:6b:2a:e3:c6:91:c1:51:93:5d:58:c1:
         fb:5a:c6:60:45:0a:58:e6:1d:d8:9b:98:55:cb:0a:e6:8a:fa:
         ea:72:a3:54:60:92:e8:5f:e5:06:8c:e9:03:dd:0d:cd:c4:ce:
         78:97:79:73:e4:f0:46:da:50:b7:80:1f:8d:32:79:77:7a:11:
         53:98:63:3a:f7:1c:ed:ab:f9:14:14:87:ff:85:66:91:75:32:
         38:92:f3:90:e9:a9:cf:59:15:0b:78:5a:0c:43:39:57:a5:b0:
         68:24:66:b6:d7:ce:99:d7:87:2a:8b:45:42:96:3a:f5:66:3d:
         13:5b:d2:02:c3:03:99:2d:8d:f2:99:c0:6e:30:41:73:d6:7a:
         be:22:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:31:32 2024 by rpki-client on console-ams.rpki-client.org