Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
File:                     yfcvcKzNptLmEzWoFzDm9u5RPMU.mft (raw, json)
Hash identifier:          Mh+1rdXGyL2Ft4FLaJtGdxk8yYnQGb7kj0v9OPJginw=
Subject key identifier:   43:7C:69:A0:EC:89:24:A1:34:E7:9F:CB:90:DA:DB:75:C8:4E:46:7B
Authority key identifier: C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5
Certificate issuer:       /CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5
Certificate serial:       018F8938B9310131BB25C7C24C26B8FC9877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
Manifest number:          1175
Signing time:             Sat 18 May 2024 01:02:26 +0000
Manifest this update:     Sat 18 May 2024 01:02:26 +0000
Manifest next update:     Sun 19 May 2024 01:02:26 +0000
Files and hashes:         1: yfcvcKzNptLmEzWoFzDm9u5RPMU.crl (hash: 97KCN03eZhcWjjUp3AxrBMWqyMnqzloRVwKPGsVj9j0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:b9:31:01:31:bb:25:c7:c2:4c:26:b8:fc:98:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5
        Validity
            Not Before: May 18 01:02:26 2024 GMT
            Not After : May 19 01:02:26 2024 GMT
        Subject: CN=437c69a0ec8924a134e79fcb90dadb75c84e467b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:3f:f3:02:4a:b2:fa:99:2e:6e:79:c0:21:
                    12:b4:92:94:ab:f5:a6:31:81:e1:42:f5:1b:9f:ed:
                    9b:91:dd:e4:5d:e1:cd:0d:ab:8d:65:c3:b9:cb:8a:
                    0c:86:41:5d:12:a6:7f:1c:3c:db:7e:7f:f7:56:1a:
                    d9:1e:7a:08:1f:5f:d9:39:af:73:df:22:d0:c3:a4:
                    66:7d:9f:95:82:e5:e8:35:95:a5:96:55:d9:b9:f2:
                    e2:b1:61:3b:4d:3a:08:84:a9:fb:46:ea:bc:28:cc:
                    4f:0b:54:00:ac:d6:7c:13:d0:61:e3:3c:99:ee:0a:
                    1a:6c:7f:e4:0c:ce:17:00:86:53:5e:ee:ae:42:05:
                    52:b3:dc:bd:9c:e5:3c:d7:bb:d8:eb:7d:aa:02:26:
                    94:22:23:b4:7b:98:6e:53:3c:15:40:1e:bc:ff:5e:
                    06:ff:eb:ce:9e:45:79:c2:bd:dd:a4:5c:21:ed:64:
                    e5:93:98:3b:41:4e:af:46:a7:31:dc:e5:28:36:c9:
                    9c:c0:16:5e:b2:97:6d:07:e5:35:3e:7c:80:c7:e3:
                    3a:b6:e3:19:06:44:4c:b2:15:f2:6d:af:0e:0b:7c:
                    fd:7c:c4:f3:a2:38:31:29:da:e6:6e:88:20:1e:b7:
                    be:78:d1:91:95:c6:d5:b0:6f:1d:ad:d3:e4:e6:9e:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7C:69:A0:EC:89:24:A1:34:E7:9F:CB:90:DA:DB:75:C8:4E:46:7B
            X509v3 Authority Key Identifier:
                keyid:C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e5:55:53:c2:2c:9e:87:f2:97:e3:ea:41:bf:40:1b:73:30:
         46:2b:09:c2:87:86:7e:ae:3f:e3:74:7c:da:0a:07:6a:c4:fc:
         f7:f6:2a:63:5f:fa:11:a0:7a:0a:da:a6:77:a0:c3:68:1b:98:
         6c:73:cb:ee:16:71:4a:d8:8c:83:fc:2b:4d:4b:55:05:c2:92:
         9b:dc:97:0b:67:55:05:b7:e3:88:65:63:a4:a0:3c:b5:b3:0d:
         ba:f4:90:cc:64:f9:5d:c6:dd:10:e9:17:79:7f:81:ad:20:e2:
         91:10:42:26:0f:24:61:36:6b:1a:32:df:2d:0f:bf:f4:f3:0c:
         58:d2:b7:ba:22:aa:d8:c6:ca:52:c3:54:38:6c:43:9f:21:9e:
         37:1e:71:02:b4:17:1b:12:a2:99:56:20:ca:aa:15:4e:cd:4f:
         8c:72:77:55:7d:47:9b:75:e5:9a:a8:41:16:2d:fa:7e:2d:e1:
         aa:87:c7:4b:8c:94:15:89:e3:5d:a6:ec:6f:43:d8:e3:92:39:
         f2:0a:05:9d:b8:9a:8b:2d:38:49:1f:f3:16:7a:ef:a6:62:23:
         c3:3b:e7:e9:06:14:d1:20:11:05:66:f5:12:ef:20:2a:a8:90:
         a5:76:55:95:84:2e:67:d7:95:fa:09:68:dd:7d:21:87:33:c5:
         f5:de:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:23 2024 by rpki-client on console-ams.rpki-client.org