Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
File:                     _yS3L1-QQNTSJoj16lEfYV8VAEw.mft (raw, json)
Hash identifier:          OLs6bOEMIbjpXzxfDu4feiZ/XC08mA5qasO/FvsgPto=
Subject key identifier:   A7:9B:15:A7:50:EF:6F:E8:CB:60:EA:DE:00:B2:C8:B8:74:BE:9D:81
Authority key identifier: FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C
Certificate issuer:       /CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
Certificate serial:       018F87ED290299A6744BF9C64E9E1EBB0DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: F2WEHd37tJPKXfKnNbCgfAL8xBk.roa (hash: Y++OIw5H6psqrbf44uHtn8kjnZcMNTHmN3OMMaBUxpo=)
                          2: _yS3L1-QQNTSJoj16lEfYV8VAEw.crl (hash: 5MtfKkoF/+s0L4hTpYpzoDM06NIauyzGF1NEi+TOAWQ=)
                          3: xGMiPELHN0xps6jTX2uaCpUA-Uk.roa (hash: nFXiZ/NZNvOmrGYayRVbxhA1gDDAZRPYjlCQaExjR0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:29:02:99:a6:74:4b:f9:c6:4e:9e:1e:bb:0d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=a79b15a750ef6fe8cb60eade00b2c8b874be9d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:a4:3c:76:b9:a2:54:b2:23:56:e6:ae:13:
                    f1:43:1a:78:41:6f:81:1a:bf:e5:57:f9:17:ee:1e:
                    c3:bf:e4:be:09:5b:c7:87:1a:7e:3b:1c:90:b8:11:
                    ce:50:dc:de:43:d5:81:18:9d:b4:32:7b:0d:24:fa:
                    11:f5:27:4b:2b:4d:8c:25:a4:76:6a:e1:eb:f9:0e:
                    75:5d:4d:19:70:37:f3:b9:80:47:cb:a1:24:68:73:
                    a3:e4:67:f8:29:53:cd:28:93:50:b5:dd:a4:10:2c:
                    15:7f:05:dd:3c:69:c8:3a:5f:0e:9b:ed:70:56:37:
                    46:1b:18:af:1c:81:24:88:23:8a:82:7d:88:a9:ec:
                    96:1c:91:bb:60:a6:32:c4:c8:88:b2:dc:de:31:de:
                    4d:95:68:22:08:1b:19:36:e0:b5:86:b3:96:f6:40:
                    90:bc:2d:af:99:ef:5c:fa:d5:9f:41:1c:18:dd:42:
                    9d:14:b2:b6:55:ff:1c:2a:0e:31:3a:79:d8:a0:7a:
                    6c:ff:91:f6:b2:20:ae:60:7b:ca:db:80:e0:c0:38:
                    a9:6d:46:af:0a:eb:84:f6:c1:24:e9:d1:de:25:fd:
                    89:31:e6:a3:99:d7:be:c9:4f:0b:b5:7f:5f:f9:0e:
                    82:ec:54:c8:24:18:76:30:00:4e:38:d4:8e:14:cc:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9B:15:A7:50:EF:6F:E8:CB:60:EA:DE:00:B2:C8:B8:74:BE:9D:81
            X509v3 Authority Key Identifier:
                keyid:FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:8a:d3:e1:5e:74:4a:df:82:c5:73:2c:87:34:a0:69:85:
         74:f6:e9:5f:b5:95:97:30:73:aa:9b:de:65:61:59:47:4c:1b:
         a9:fb:94:20:52:dd:47:15:a8:86:74:32:c7:02:52:dc:bb:8f:
         80:bc:bf:5a:c9:3b:c5:67:74:2e:70:fd:59:91:f6:be:d6:12:
         23:9f:59:0c:dd:5a:cd:e5:21:0f:3e:8d:28:c3:d8:85:f2:a1:
         67:64:17:3f:8b:1d:bd:a1:9f:81:fe:c1:b9:86:8b:ce:d7:03:
         f7:87:e2:0c:a9:5b:64:36:0a:57:9e:36:8a:74:ec:1f:9e:86:
         57:75:20:b9:ae:d7:46:e0:86:17:65:6a:e3:e4:0d:9b:77:99:
         23:c0:40:a0:64:e2:c4:9c:3f:a7:0d:b7:18:35:55:1d:a5:01:
         6a:94:5b:cb:b2:0f:01:df:57:8f:6d:ee:eb:39:17:2a:ff:36:
         c0:f5:d0:1e:24:45:01:60:45:1d:0c:53:f6:f3:70:8a:c0:19:
         53:0c:e9:22:1b:4b:b7:12:8e:82:19:a5:a0:cf:8f:14:09:9e:
         79:e7:d8:10:a5:2a:2d:55:af:0d:fa:65:e9:61:4f:ec:c5:b3:
         a1:af:30:73:66:0b:93:2d:23:df:f8:ae:a0:d1:76:78:d6:d7:
         04:7e:00:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:46:20 2024 by rpki-client on console-ams.rpki-client.org