Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File:                     YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier:          eNU/mhg2Egvy2llhklPJtBe4kV5U4EnuB0W+vBUfc38=
Subject key identifier:   D0:74:20:31:D7:95:5D:39:2E:47:F9:B9:CD:EB:B1:0C:2E:7A:56:74
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer:       /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial:       018F87B61421D77662817640D4DE1356F69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number:          0972
Signing time:             Fri 17 May 2024 18:00:07 +0000
Manifest this update:     Fri 17 May 2024 18:00:07 +0000
Manifest next update:     Sat 18 May 2024 18:00:07 +0000
Files and hashes:         1: CpWj3IlNaZsDdqOC9MZMAFcqMYM.roa (hash: SSMf6zjOlE7w2XlmhgfKLfYaXTxXxEW0J7QTkuJ7g0M=)
                          2: G57LHrHvMbdM_H5EBFwROmWy7oo.roa (hash: A6TfLlRClA13tXnyNFSSmjWJXM20qsQ0eIm/BgmEj0Y=)
                          3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: 5R1kXaIVtARcQtu2fWkg42QUK9eP68hzuS5KI/wr6zM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:14:21:d7:76:62:81:76:40:d4:de:13:56:f6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
        Validity
            Not Before: May 17 18:00:07 2024 GMT
            Not After : May 18 18:00:07 2024 GMT
        Subject: CN=d0742031d7955d392e47f9b9cdebb10c2e7a5674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:f7:92:c2:a7:f8:49:3a:06:5f:c7:69:b3:
                    1b:14:cf:da:3f:75:06:2b:3f:0a:24:5f:cd:b7:c8:
                    af:d7:ee:7d:49:54:61:fe:17:d6:82:15:6f:30:f1:
                    5a:51:a6:b6:45:3e:80:99:47:23:0f:26:06:73:21:
                    bf:42:b6:51:8f:fd:9c:be:40:02:49:0b:09:76:b0:
                    cd:1a:9c:b1:15:56:15:94:c7:ba:14:9f:14:43:6e:
                    22:c4:d7:d2:cd:31:ae:73:48:3d:c5:2f:f7:4b:14:
                    b3:05:b5:24:a3:1f:6b:3c:b5:c8:bd:a7:50:01:70:
                    3e:54:af:09:b2:26:f6:6d:0d:78:b7:62:25:c5:67:
                    f0:f4:41:27:59:a7:88:e1:de:f9:dd:19:f5:8f:4b:
                    e1:f6:2b:64:7c:27:c2:23:b6:04:fc:19:e0:0f:fd:
                    69:77:38:1e:f7:57:a7:83:68:7e:52:7a:d8:f4:c0:
                    8c:84:4f:e2:4b:39:02:5d:79:38:75:71:8f:d3:45:
                    95:fd:d3:1e:4c:99:1a:af:8c:27:61:0b:1a:23:dd:
                    b0:92:d4:62:56:12:b7:82:f3:c5:97:88:de:1e:a8:
                    b1:77:ce:ab:33:38:6e:75:b2:bf:81:13:d9:8e:42:
                    bc:23:fc:aa:9c:c3:58:ad:50:66:03:e6:32:a9:53:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:74:20:31:D7:95:5D:39:2E:47:F9:B9:CD:EB:B1:0C:2E:7A:56:74
            X509v3 Authority Key Identifier:
                keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:43:21:f1:af:29:ea:a7:c7:a1:7a:a4:93:14:24:46:96:
         db:74:9e:9d:63:a8:df:48:cb:c2:0e:a8:2f:10:70:e6:2c:15:
         43:18:52:bc:e8:1d:aa:69:2c:9b:cc:50:96:b8:3f:73:31:dd:
         bc:2d:d2:c3:23:01:89:0d:c5:e5:43:a5:7a:c2:07:b0:42:14:
         31:15:6a:0e:dc:4e:41:12:97:b9:56:3b:a3:b6:96:12:ab:b9:
         81:2a:c3:03:46:83:2c:cb:f8:6b:f3:89:d7:f2:79:93:87:51:
         ae:dc:fc:cd:e3:02:31:66:9b:48:57:88:33:62:62:c7:42:5a:
         59:be:07:af:d8:bd:b9:ca:5d:8a:a7:66:71:7d:78:0f:b6:28:
         76:67:d4:28:2c:98:09:2f:a8:d6:61:13:53:68:9c:34:d1:16:
         54:ed:95:fd:d9:eb:b6:99:ae:9b:24:62:78:83:7b:09:66:fb:
         87:d4:85:9e:9a:2e:c4:08:fa:63:2b:56:a7:92:43:73:6a:c3:
         aa:75:8d:b6:da:52:0a:eb:93:76:e9:36:76:84:10:80:46:5d:
         8b:23:da:5c:f2:da:c5:05:bf:10:19:59:ac:aa:16:11:8f:7f:
         32:1b:f7:c6:a8:6d:bb:0f:8a:1a:8b:0d:89:c7:b1:8a:90:d2:
         22:19:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:34 2024 by rpki-client on console-fra.rpki-client.org