Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          JU+rRkGKyyth9h38SRvC6XAjUHC4ROAttFHmhW2FXFo=
Subject key identifier:   72:AE:11:FF:3C:1A:AD:9A:1F:B6:7A:D3:92:21:12:85:27:C3:EF:72
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       01935162A8DBBAD1244F80D15D14C97AE669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          0F1D
Signing time:             Fri 22 Nov 2024 01:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:40 +0000
Files and hashes:         1: 7xfgsw4vF1uMpjpZopMaqQ5eYGY.roa (hash: v553qwTVn5dRO80MIqQUHtW54Ds6JlD4YQ0S3QL+jeM=)
                          2: 8cHcyPFFC1bdrwa60Peqmyf8Go4.roa (hash: fnJ/j6HykmJJlfKj1x//gEbILNMJiBlBqadi8rZe1aE=)
                          3: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: cbPATUPXAvm36zPULJfM5qrCWn3Vku0+Sx2wuFgzMTQ=)
                          4: ayQXDZCwXLW_Kz3wVRcrWEo-nr0.roa (hash: R+c+6LE4QRsEnemCf3aKWWKnWUGeXYbr7NP3fsGXxHY=)
                          5: mFNsBilLyxXqvtnffKG4VhkvL10.roa (hash: ymdm7W1zjg231T9fsqVN2GS6oXrYzrvrolw+EB4niCs=)
                          6: wt2B69tCZA_A3YI4TnnVgvsJ5lc.roa (hash: qrAmUWiYvJCRnMiDRAoZV55T8eXfRYDce8yWe4xHCUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:a8:db:ba:d1:24:4f:80:d1:5d:14:c9:7a:e6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Nov 22 01:00:40 2024 GMT
            Not After : Nov 23 01:00:40 2024 GMT
        Subject: CN=72ae11ff3c1aad9a1fb67ad39221128527c3ef72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:5b:b7:0e:3c:cb:05:d6:da:7c:10:0b:5e:
                    34:9a:14:f5:f9:98:86:a3:05:79:dd:1f:4b:ff:43:
                    6f:2a:7e:82:e8:f0:48:ad:d3:2e:9f:78:cf:9c:05:
                    4a:d4:ee:fd:da:68:e2:1e:1f:75:eb:b0:fc:c9:1b:
                    50:0d:ba:c5:a1:9c:62:96:b0:10:ae:74:b3:e1:99:
                    5c:a4:cb:5e:da:65:37:3f:47:43:ae:50:f4:9a:bf:
                    90:97:cc:f0:77:e4:b8:35:db:96:29:81:a3:57:03:
                    13:28:ca:f6:84:32:58:0b:c0:c7:91:3e:55:97:1c:
                    0a:ab:c0:15:d2:96:27:b7:cb:c4:f0:ca:e0:c4:f5:
                    0c:4c:1e:32:3f:27:81:9c:30:89:3a:da:f9:09:27:
                    1f:44:52:86:24:21:c5:b2:63:a7:9b:f4:b0:b4:61:
                    27:9a:c5:ba:37:e0:9c:0a:79:0c:37:23:6e:17:7e:
                    45:36:b5:cb:e3:a9:ca:07:50:78:2c:33:8e:84:84:
                    91:94:e5:8c:2a:87:b0:86:03:6c:09:05:9a:5c:bf:
                    cf:db:21:0b:94:81:ee:03:f9:e3:8e:03:ce:af:98:
                    85:36:ff:f3:9d:94:4e:fe:b5:fa:f2:e0:7f:90:21:
                    14:a6:95:85:eb:fa:93:d9:f1:d7:b5:11:5f:f8:71:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AE:11:FF:3C:1A:AD:9A:1F:B6:7A:D3:92:21:12:85:27:C3:EF:72
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:b2:d8:11:ed:44:9e:df:63:0d:96:a0:0f:90:a2:ae:66:
         87:4f:4c:cd:d6:85:8a:f3:51:23:86:dd:bf:68:5f:74:b8:7d:
         b4:92:9f:4f:6b:6a:86:e5:82:8e:86:db:f0:ff:84:7a:ac:be:
         6d:64:6c:69:5e:6f:c1:31:d9:ef:29:e7:e6:6b:ab:78:75:cf:
         4f:9e:93:05:bd:f1:67:49:84:de:4e:99:af:66:51:45:72:d2:
         b8:c9:ac:ec:1f:e1:9b:0b:1e:93:b1:4d:23:8c:8f:f7:dd:86:
         77:50:4d:94:73:04:a2:63:99:4d:60:b8:88:05:f3:c2:e4:76:
         08:61:9e:2f:22:0e:98:e7:00:f4:a0:92:12:4d:81:d0:96:b2:
         24:c1:28:57:58:ca:86:5a:9e:53:de:61:3d:0b:fd:69:91:22:
         56:22:55:70:15:eb:66:f1:31:6c:e3:31:91:6d:01:57:23:35:
         e6:8d:d5:79:c9:9a:82:56:26:e1:7d:b6:52:24:75:c9:aa:d0:
         c3:fc:c5:38:1b:55:42:00:29:e5:4a:54:c8:58:bd:f6:5a:82:
         90:1d:69:08:db:24:31:94:3e:85:4d:54:0a:9a:46:8e:18:d3:
         04:39:c2:08:da:8c:86:9a:65:04:83:80:64:13:42:10:3d:29:
         54:fb:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:59 2024 by rpki-client on console-ams.rpki-client.org