Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File:                     YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier:          pNOJqADNvHG0IJCm+hngMtsVKn7rVHZfBcb9Fjkt130=
Subject key identifier:   16:22:A5:31:5C:A4:A7:02:7A:23:7D:78:B6:93:0F:29:92:8E:67:AB
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer:       /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial:       019355AD3DE44B79BCDA282F425378524CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 21:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:37 +0000
Files and hashes:         1: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: QHOS94myUP/g8o2eNjG7XiDnOn3/mfCSyFI2DneF3RU=)
                          2: n7hS9TYtixwCIO6ZnHs1ZHnXDNE.roa (hash: szSyN1QLEmGBmjO0SJXw3mGNLmqC4toJE/ZJ5qgr1nc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:3d:e4:4b:79:bc:da:28:2f:42:53:78:52:4c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
        Validity
            Not Before: Nov 22 21:00:37 2024 GMT
            Not After : Nov 23 21:00:37 2024 GMT
        Subject: CN=1622a5315ca4a7027a237d78b6930f29928e67ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:55:06:f9:67:dc:42:f7:f8:77:93:0f:47:
                    49:48:7d:6b:d1:a6:cd:8d:60:11:39:d1:65:b9:bc:
                    a8:01:89:bf:3c:2a:9b:7d:51:44:1b:b0:47:5f:dc:
                    f8:3d:39:c5:98:8e:0a:ef:10:26:89:34:1b:b9:c0:
                    c0:d1:b7:c4:94:c7:a9:53:a2:f9:23:b4:ab:43:51:
                    0c:96:b2:47:e4:7c:8f:ee:f0:dd:46:2a:e5:45:dd:
                    04:d2:e0:06:80:d7:b7:15:1e:16:7b:ac:78:69:1d:
                    ff:e8:81:d9:19:c6:61:ee:b5:da:63:ca:cd:a9:b8:
                    c5:ce:03:f2:4a:06:26:9b:04:40:d2:c2:50:e9:1f:
                    d2:99:f7:55:14:2c:76:44:90:9a:ab:df:4a:c3:e4:
                    2f:0e:a3:b7:cd:85:d0:48:b0:33:79:c6:17:a9:19:
                    13:7e:18:52:41:55:de:f5:48:d1:38:a3:6f:0e:64:
                    cc:29:a6:8c:ab:cd:fa:60:95:c2:2e:e5:dd:22:6f:
                    94:5f:91:6c:8b:25:e3:39:09:62:9d:61:33:7d:61:
                    2c:7e:3e:5b:1a:81:b1:4c:23:b0:74:66:1b:00:8f:
                    3a:87:38:79:70:8e:fc:7a:3b:7a:2d:ca:27:36:d2:
                    32:f4:c7:f9:1f:1a:16:a8:d9:7f:e6:e0:7c:f9:15:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:A5:31:5C:A4:A7:02:7A:23:7D:78:B6:93:0F:29:92:8E:67:AB
            X509v3 Authority Key Identifier:
                keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:97:16:de:c8:99:26:c2:3a:5d:39:49:ed:23:03:f7:72:de:
         30:08:4a:cc:38:01:56:06:25:b0:5a:77:92:ce:1d:d7:ea:6b:
         62:63:f1:9a:fe:57:10:75:d7:13:1b:52:55:ef:4f:0d:e7:71:
         e8:ae:31:89:8c:48:f7:cb:ad:64:3a:ce:1c:73:ef:9d:31:20:
         42:1b:2a:b4:ad:6e:9a:bb:65:e9:46:f8:4d:3f:35:27:89:a3:
         e7:b8:2a:0f:5f:6f:98:1f:9a:61:29:a8:01:0a:11:dd:c7:02:
         f6:99:1c:5a:8d:29:52:28:f9:96:39:17:2b:fb:9e:ca:42:1e:
         fd:68:4d:a0:e5:04:af:cd:df:07:d7:3b:e5:87:41:52:c2:d4:
         c0:fa:be:aa:0c:0c:fc:57:8d:94:97:1a:0b:5c:1c:fc:03:bc:
         7d:92:61:66:a8:ee:6b:b6:40:a2:f6:f7:91:7e:fa:6c:9c:16:
         62:22:d7:b7:b5:77:28:02:89:a9:fb:7e:95:bb:88:fb:b7:ab:
         fb:c3:ff:34:d2:7c:c4:f6:ab:34:20:98:7e:f2:f4:e9:7e:ea:
         46:2b:61:c5:b3:5a:e1:97:9a:f5:9b:69:b0:2a:27:b4:12:1d:
         c2:b9:19:17:81:48:1b:d3:05:52:89:05:36:87:a7:91:ba:8a:
         30:1a:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:19 2024 by rpki-client on console-ams.rpki-client.org