Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
File:                     YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json)
Hash identifier:          HKyy0GqhkRGfnVlc9sIeT6BxoHB6q+zVh/dCzChCzuU=
Subject key identifier:   77:C2:8C:81:CF:40:CC:F8:8B:DA:7B:5F:95:55:D8:78:5C:FA:5D:76
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Certificate issuer:       /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial:       019355E3F7438486AC3D2F1C30931F3002DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
Manifest number:          1248
Signing time:             Fri 22 Nov 2024 22:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:23 +0000
Files and hashes:         1: 7U5BOUk5ZxxwVE8sLDyVQRGI0hE.roa (hash: rwMaCZVQtGgyX47xm0AkQKv27ModF6drItYb8xAPbPg=)
                          2: HVnbEGjNPPWrTvzKC2Vbye7OHqE.roa (hash: YsKVwoIjHE51aObHgm0Ec747oVbJFx11OHUGUSvApLg=)
                          3: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: RE/BYJsZ5A9rvRf9PE6c5APnhMv8sPtRiLlI9sZznps=)
                          4: vXY9tl3Roc44WswaMXfkNjvlrJ0.roa (hash: AKiSk8+bo48RuDAerYeQQLtmWCcKjfBJe3Wd0qJSXj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:f7:43:84:86:ac:3d:2f:1c:30:93:1f:30:02:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
        Validity
            Not Before: Nov 22 22:00:23 2024 GMT
            Not After : Nov 23 22:00:23 2024 GMT
        Subject: CN=77c28c81cf40ccf88bda7b5f9555d8785cfa5d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:de:54:71:3b:f1:29:54:5a:61:77:20:22:
                    22:60:fc:84:8e:6c:ab:b1:51:63:a6:d9:f5:9a:1d:
                    7e:e2:30:b8:3d:a9:93:14:6e:72:92:fe:c9:fb:9c:
                    2f:2b:14:9f:be:41:30:a5:6a:11:69:aa:c8:6d:df:
                    5d:dc:1b:23:70:d8:1e:ac:d8:e2:87:ea:69:5f:0c:
                    e0:33:0a:75:31:34:7d:e8:a0:50:60:6b:af:7d:e7:
                    71:a3:5c:75:c2:c0:15:ac:07:5e:5d:2e:55:27:cf:
                    70:2f:5c:40:46:fb:42:22:b2:52:31:b4:87:3f:0d:
                    53:f1:99:a7:71:81:76:d5:f3:08:d2:df:ef:b2:38:
                    3b:dd:58:df:6b:93:61:d7:ca:4f:69:d9:20:0e:7b:
                    b6:73:be:87:13:81:c9:87:76:df:c7:40:7a:e7:cd:
                    61:d5:86:69:b7:c8:23:64:b1:f5:79:0a:dd:f3:15:
                    a0:9d:95:cb:5a:f7:53:17:3f:47:9c:31:3c:f6:b4:
                    43:3e:15:3a:69:e6:1d:b8:a3:08:a9:a3:40:64:45:
                    88:57:3f:ae:03:dc:e8:95:93:29:98:5b:37:9e:e2:
                    21:ae:e0:81:68:48:99:df:52:77:1c:54:f3:c5:d3:
                    6f:e0:cd:6c:ac:b7:22:de:ec:03:01:52:7e:55:a0:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C2:8C:81:CF:40:CC:F8:8B:DA:7B:5F:95:55:D8:78:5C:FA:5D:76
            X509v3 Authority Key Identifier:
                keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f3:ce:88:19:0b:1b:9c:4b:1a:59:77:f7:99:29:91:23:46:
         9a:05:3f:2a:0e:32:1f:c9:67:3b:e6:4a:ca:fc:16:35:33:a5:
         ce:87:70:ed:07:e4:13:11:8b:a1:53:73:6a:7e:a6:cc:c9:ca:
         a1:46:71:2a:b0:33:cb:1f:1e:99:03:88:eb:53:45:e0:e5:fa:
         47:9b:bf:07:88:7d:c4:54:bd:1a:25:2b:16:38:c8:7b:2a:ac:
         0e:48:d5:0c:db:91:ba:d2:0b:d2:69:b0:53:7c:ca:af:5e:cd:
         95:00:c9:a5:34:f3:62:ad:e5:ab:19:43:80:99:91:8d:23:0a:
         fe:c8:5d:bd:e9:21:43:34:f0:d2:fa:3f:f5:a3:9e:ab:43:80:
         69:e8:d7:78:af:86:36:a2:c2:71:4e:06:ae:5e:4a:3f:79:b3:
         cf:ce:eb:e1:2f:19:8b:c8:f1:97:e8:5b:43:92:33:cd:17:ff:
         28:e9:fc:a4:61:b9:80:c4:83:85:74:49:3a:78:ae:42:d4:a0:
         a4:fe:fb:9c:05:4f:05:68:78:b1:10:6e:a0:20:51:8f:96:ea:
         76:84:65:d1:ca:35:15:29:6a:2b:8b:41:35:e5:c4:6e:fa:7c:
         9a:59:34:94:9c:9f:62:f6:e3:e0:99:ab:45:dd:f0:23:b5:fe:
         c6:4c:35:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV4/dDhIasPS8cMJMfMALfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm
Y2FmMmEwHhcNMjQxMTIyMjIwMDIzWhcNMjQxMTIzMjIwMDIzWjAzMTEwLwYDVQQD
Eyg3N2MyOGM4MWNmNDBjY2Y4OGJkYTdiNWY5NTU1ZDg3ODVjZmE1ZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+veVHE78SlUWmF3ICIiYPyEjmyr
sVFjptn1mh1+4jC4PamTFG5ykv7J+5wvKxSfvkEwpWoRaarIbd9d3BsjcNgerNji
h+ppXwzgMwp1MTR96KBQYGuvfedxo1x1wsAVrAdeXS5VJ89wL1xARvtCIrJSMbSH
Pw1T8ZmncYF21fMI0t/vsjg73Vjfa5Nh18pPadkgDnu2c76HE4HJh3bfx0B6581h
1YZpt8gjZLH1eQrd8xWgnZXLWvdTFz9HnDE89rRDPhU6aeYduKMIqaNAZEWIVz+u
A9zolZMpmFs3nuIhruCBaEiZ31J3HFTzxdNv4M1srLci3uwDAVJ+VaB7SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfCjIHPQMz4i9p7X5VV2Hhc+l12MB8GA1UdIwQY
MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt
MTYzZmI3MDAzZTVkLzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk
LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/POiBkL
G5xLGll395kpkSNGmgU/Kg4yH8lnO+ZKyvwWNTOlzodw7QfkExGLoVNzan6mzMnK
oUZxKrAzyx8emQOI61NF4OX6R5u/B4h9xFS9GiUrFjjIeyqsDkjVDNuRutIL0mmw
U3zKr17NlQDJpTTzYq3lqxlDgJmRjSMK/shdvekhQzTw0vo/9aOeq0OAaejXeK+G
NqLCcU4Grl5KP3mzz87r4S8Zi8jxl+hbQ5IzzRf/KOn8pGG5gMSDhXRJOniuQtSg
pP77nAVPBWh4sRBuoCBRj5bqdoRl0co1FSlqK4tBNeXEbvp8mlk0lJyfYvbj4Jmr
Rd3wI7X+xkw18w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:57:02 2024 by rpki-client on console-ams.rpki-client.org