Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File:                     YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier:          5KkNqiCteuVwkWsBRqK08XcLV7Uz5RniMFW2c3fIzuM=
Subject key identifier:   3B:63:2D:9E:66:C8:33:9D:87:0D:0E:7F:DC:1E:41:0F:A5:48:24:5A
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer:       /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial:       018F8938DD3825B4C06C6C89D490ABE65143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number:          0123
Signing time:             Sat 18 May 2024 01:02:36 +0000
Manifest this update:     Sat 18 May 2024 01:02:36 +0000
Manifest next update:     Sun 19 May 2024 01:02:36 +0000
Files and hashes:         1: 8Sw9OhoTm_oicEprSpfKDgkFmJg.roa (hash: Bs437V5Md69bhj7D4Ex5ybvDVMNlk7HozNVBWQv9MT8=)
                          2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: TezVYbm5jB0kyyXfwZsegfLkk3HjkJ4MJSQ4/SxA+sM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:dd:38:25:b4:c0:6c:6c:89:d4:90:ab:e6:51:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
        Validity
            Not Before: May 18 01:02:36 2024 GMT
            Not After : May 19 01:02:36 2024 GMT
        Subject: CN=3b632d9e66c8339d870d0e7fdc1e410fa548245a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:dd:ff:7b:56:b3:3e:68:dd:97:db:47:34:
                    ce:66:22:14:15:69:6a:f2:8a:38:35:ac:61:30:79:
                    c3:20:24:0e:38:c0:52:33:d1:67:fe:8d:b4:32:83:
                    89:b3:21:b7:a0:79:1d:8d:00:fb:33:a7:3e:82:24:
                    ba:3d:e8:fc:b3:a4:aa:cd:73:35:23:93:dc:4b:1b:
                    6e:31:a1:9d:75:d1:42:cc:33:a8:d0:6c:82:42:1e:
                    fc:5b:60:4f:4a:2f:b5:77:b4:5b:e8:e9:c3:37:e9:
                    53:77:11:e1:b6:5b:68:86:ab:bb:1e:00:0c:ab:b0:
                    60:ea:e2:4b:e5:f6:34:7d:34:87:85:28:8c:2a:f0:
                    26:2b:46:00:44:4c:55:2d:5f:3b:ea:24:89:92:c0:
                    2e:8b:eb:e8:13:1c:b8:f4:15:53:00:27:6c:1f:7f:
                    3f:65:cc:c5:ca:ac:b4:ec:c3:77:eb:09:85:f8:b7:
                    b8:d3:6a:d9:92:51:01:ea:a7:bc:ec:e5:e5:70:e8:
                    19:5b:96:48:aa:d9:30:c8:95:4e:78:01:36:95:fe:
                    bc:9b:d8:2a:27:58:91:aa:52:b8:df:fe:52:24:6f:
                    31:25:3c:10:6d:f7:8a:48:e1:92:6b:6f:f9:ff:7e:
                    4c:ed:63:2f:92:c0:9d:0d:8d:97:3c:c9:80:0f:56:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:63:2D:9E:66:C8:33:9D:87:0D:0E:7F:DC:1E:41:0F:A5:48:24:5A
            X509v3 Authority Key Identifier:
                keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:76:d9:31:06:37:36:8e:b5:49:14:cd:98:fc:58:49:5e:78:
         be:38:78:9a:a5:fa:0a:01:1c:af:2f:08:01:a1:3d:36:4b:20:
         6e:a4:86:40:0a:6a:5c:73:cb:ba:9d:91:d2:76:80:bc:37:99:
         4d:46:e6:ea:d0:1b:b7:9f:30:ff:cf:ec:bf:5b:63:75:ec:69:
         16:47:32:df:cd:1a:a3:07:cf:90:b6:97:54:6b:76:e0:59:4c:
         5d:1a:1f:65:86:55:05:2a:14:fd:8b:74:09:a2:52:f1:f0:c8:
         97:8d:1f:18:32:60:9e:75:49:64:fb:f7:fc:06:c8:a4:6d:18:
         c2:8a:01:0b:05:5a:a3:87:d2:6e:68:0c:f6:3e:4b:01:3f:7f:
         d4:b5:6d:2c:b0:16:a0:a4:6f:42:97:9a:88:f2:9d:54:38:47:
         61:87:ca:ea:d4:88:60:50:8f:ba:9f:fb:cf:34:52:9a:8e:84:
         4d:36:e5:fa:9e:ca:0e:9c:2e:fe:24:46:90:e8:ea:3a:92:06:
         e3:73:83:aa:38:7d:ec:3a:a2:bf:f7:8e:9a:cf:7d:2f:75:b4:
         b4:8d:91:c1:51:9f:bd:8c:9e:bc:69:61:91:2a:b3:88:7e:0f:
         71:0f:df:db:b6:8f:54:1b:9f:80:2f:d0:9f:20:eb:49:39:37:
         21:e2:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:04:49 2024 by rpki-client on console-ams.rpki-client.org