Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          vARIbChtSmPWShe+h2aa7CtDL4uimJbLfx3Ty9USZ98=
Subject key identifier:   A6:51:3E:71:66:C0:04:65:02:D8:4D:48:F0:7E:48:79:E0:45:AA:85
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       018F885B58DEF88F2352AE66C38DA8366289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          03FD
Signing time:             Fri 17 May 2024 21:00:38 +0000
Manifest this update:     Fri 17 May 2024 21:00:38 +0000
Manifest next update:     Sat 18 May 2024 21:00:38 +0000
Files and hashes:         1: Nw1XQa-CejdNt6fVlx4QzZHNHNQ.roa (hash: FoOVcmzYEhwtBVrwTB6UTxhVEwARWI2KwomzjXMUwX0=)
                          2: jy5A7JBlpqrd6J9-BVVK_iGc9L4.roa (hash: zFiG8FBJQtns11+3LP3voLJsqN5VbeI5785wAVOFhus=)
                          3: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: TgsrSlw0y99VdKDeDhh6y+n0wf55+j8iu+fA4Qgo2sI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:58:de:f8:8f:23:52:ae:66:c3:8d:a8:36:62:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: May 17 21:00:38 2024 GMT
            Not After : May 18 21:00:38 2024 GMT
        Subject: CN=a6513e7166c0046502d84d48f07e4879e045aa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:9c:bc:ac:bd:03:19:5f:82:a2:f3:a1:c1:
                    2b:03:75:14:3d:31:39:2c:61:28:0a:fd:17:fe:bb:
                    08:17:65:33:fb:bf:a3:51:07:1d:41:d8:62:09:af:
                    18:83:93:40:c7:d8:1f:af:5c:b1:8b:5d:e2:c4:87:
                    8d:eb:27:67:8b:2b:7e:5f:fc:d4:05:34:da:a0:67:
                    81:24:74:5f:8e:51:f7:ca:a3:a2:53:57:6a:9e:60:
                    51:36:71:e8:05:99:4d:a6:0d:ac:8e:43:ce:7d:87:
                    63:e3:15:34:45:38:69:7c:53:5c:e5:ce:05:4e:eb:
                    6c:5f:2d:10:1f:02:11:86:3e:5f:59:b2:3a:b6:49:
                    d3:d7:e2:57:1a:50:8a:46:06:c9:94:99:8f:24:d8:
                    44:d2:73:c5:7f:f1:b8:b4:89:a8:69:b6:46:f8:ec:
                    1d:a7:51:44:35:5e:d8:82:a1:b2:e3:69:b9:b2:75:
                    bd:71:00:cf:d6:57:a0:27:28:c5:b4:24:2d:ca:8c:
                    5a:cf:cc:02:83:03:03:d6:e7:20:6e:4f:54:39:19:
                    69:d5:fe:83:5f:e0:24:4d:d8:42:d4:dd:75:ef:ae:
                    ac:cf:46:ec:51:54:ff:a9:6c:2d:05:39:6e:5d:d4:
                    09:16:76:17:0c:fa:79:16:e5:60:f4:57:62:32:bc:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:51:3E:71:66:C0:04:65:02:D8:4D:48:F0:7E:48:79:E0:45:AA:85
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:b1:e7:5f:7d:7a:41:a5:f5:e6:66:32:28:bc:cf:cf:60:
         b5:18:53:e9:6a:2e:2d:05:ab:a1:48:0c:11:5c:9d:47:27:60:
         a7:9a:5c:75:77:87:ba:db:3a:15:da:42:c0:c7:a7:64:20:7e:
         dc:4b:ce:93:83:e6:fe:1d:c7:f7:59:2b:25:11:d8:0e:10:c8:
         bc:fe:d1:99:ba:1d:79:32:a6:ae:62:9c:aa:88:65:46:48:fe:
         27:9e:bc:e4:fd:47:66:b7:66:09:b5:f7:97:5c:c7:81:e5:03:
         63:93:d4:47:47:ec:aa:28:4c:75:34:d1:bd:e5:94:04:e0:6d:
         eb:7c:7e:31:e6:27:ef:94:c0:31:03:73:16:fa:94:6b:b8:7f:
         fc:19:c4:58:89:c1:2d:c0:9c:3e:db:ff:45:1d:b0:95:69:94:
         9e:9f:95:d5:a3:15:89:05:1c:cd:4d:c3:60:46:cf:87:e3:0f:
         41:0d:72:ac:89:0a:79:2d:55:39:c6:7a:e4:dd:b2:b5:c5:b4:
         a9:e7:ac:9e:a9:e6:e3:f9:e9:f4:c3:50:aa:c9:19:a2:48:26:
         e4:b8:9f:be:05:d2:f1:08:d2:d3:51:1e:f0:e0:8f:11:ee:e6:
         d3:58:92:16:f8:06:c5:5a:9b:e7:ca:e7:3c:64:0c:de:83:d1:
         a7:cb:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:34:59 2024 by rpki-client on console-fra.rpki-client.org