Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File:                     YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier:          Scu1Jy9EDeFHBZagAO2F0VouNZnEyPneFDbUqJvc8yo=
Subject key identifier:   22:56:B9:91:9D:51:8A:0C:A9:E5:93:E2:15:73:D4:EE:0D:29:EF:8E
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer:       /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial:       0193576486A57EDDF99FB30D99BFBA99A637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number:          0953
Signing time:             Sat 23 Nov 2024 05:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:25 +0000
Files and hashes:         1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: VrKqi+LvrV2cFAK1HWRlZib23F2fEtC8d3nmzpUE31w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:86:a5:7e:dd:f9:9f:b3:0d:99:bf:ba:99:a6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
        Validity
            Not Before: Nov 23 05:00:25 2024 GMT
            Not After : Nov 24 05:00:25 2024 GMT
        Subject: CN=2256b9919d518a0ca9e593e21573d4ee0d29ef8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:3a:9a:15:54:4e:0b:6e:dd:b7:79:26:a2:
                    c5:9f:5a:34:e9:7c:75:d7:61:bc:3f:8d:24:a1:a6:
                    7b:aa:d7:66:d5:02:30:74:dc:2a:bc:4b:02:34:26:
                    9a:8d:86:9a:99:b0:33:f5:29:2b:a1:1e:5c:83:c0:
                    e3:90:3f:63:9c:c2:67:31:4c:b0:09:ed:c2:df:2e:
                    81:cf:57:53:fd:28:77:c3:55:5b:d4:b0:4d:f5:25:
                    2b:04:3a:d9:8e:db:92:b2:4d:3b:2b:6f:39:bc:b6:
                    b4:5e:5d:f4:8e:1e:87:27:67:51:56:e4:e8:e3:78:
                    a9:b6:56:72:cc:23:33:f4:a0:1f:83:1e:ae:85:c5:
                    05:39:63:2d:96:4e:c5:5a:34:cf:0d:74:d2:6e:3c:
                    52:b4:68:d9:0f:13:0c:c2:6b:6d:ca:6c:21:77:d0:
                    28:aa:7b:45:7a:49:03:d3:40:74:6c:fa:ff:8d:0c:
                    a7:3f:37:d3:ca:0c:6a:07:20:3a:80:e4:79:54:b1:
                    78:d6:0c:c6:6c:53:10:3f:73:8c:d7:58:65:46:7f:
                    2f:0a:e1:93:c9:a9:14:c4:bd:6f:82:ad:5e:fe:ca:
                    f4:c1:e0:fc:63:9b:e8:99:ac:ca:0b:90:9b:de:1b:
                    91:5c:c5:85:58:9c:5d:3b:e1:8c:41:8d:fb:3a:27:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:56:B9:91:9D:51:8A:0C:A9:E5:93:E2:15:73:D4:EE:0D:29:EF:8E
            X509v3 Authority Key Identifier:
                keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:ab:1f:ba:0c:68:7f:ff:8c:a1:ab:90:18:a9:d3:40:21:
         95:39:59:1d:e5:63:ed:4e:c3:ed:7f:3c:bb:41:29:9f:65:bf:
         47:f0:31:d4:7a:72:02:cc:1d:85:6f:20:9c:04:a7:83:1d:86:
         2e:47:e4:e9:5c:e7:42:09:b1:ef:75:29:e0:35:5e:95:8c:7a:
         12:f9:11:8e:bc:c5:62:32:0f:c9:f4:0e:77:25:72:f7:22:c0:
         bd:f9:8e:c8:fe:17:18:20:4f:03:6f:21:99:8e:cd:91:ca:01:
         a4:a3:b1:1a:28:ae:39:ab:cb:84:a8:1e:06:65:60:48:0b:66:
         08:cc:37:50:e5:24:1e:01:e8:6d:6c:89:51:d4:88:e1:1a:15:
         7b:47:de:d1:bd:6b:3f:cf:7d:3f:99:ce:03:e7:c9:d5:53:32:
         58:9a:06:b8:c3:5d:82:14:3b:31:d6:02:75:9c:21:8b:d0:7a:
         14:cb:8a:10:7b:93:59:80:48:ac:50:2e:eb:39:4d:d3:2c:d2:
         46:6f:fd:14:e5:51:9d:fb:e6:d5:f0:25:ac:df:0b:46:19:86:
         97:95:ed:dc:ff:f8:b1:d3:3e:67:13:d8:99:1b:32:87:30:b6:
         df:b0:33:cb:2b:9e:4b:9c:69:fd:33:14:be:44:8b:aa:28:1c:
         e2:de:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:10 2024 by rpki-client on console-fra.rpki-client.org