Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File:                     Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier:          mBR21LyPCA6cEEvTE8A17HJBIWzPQbXwKrINBe05fPw=
Subject key identifier:   EB:FC:7D:27:7F:86:F9:0B:74:1E:4B:F9:BC:94:7B:73:40:B1:FF:17
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer:       /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial:       018F85C85FCD499C57BBCE251D581820C073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number:          0406
Signing time:             Fri 17 May 2024 09:00:52 +0000
Manifest this update:     Fri 17 May 2024 09:00:52 +0000
Manifest next update:     Sat 18 May 2024 09:00:52 +0000
Files and hashes:         1: 9lqNTB-Sy4YR1Ab0XI57a66X9Bg.roa (hash: Aq5VEaDTAfSmxn/0pxATZ4zrvvQwH4BRl0xMdXrXbuw=)
                          2: IRM-p8ylbn9c8W6kf8BdXILzovk.roa (hash: tNBGNv92MO/GO8MtTj/HKP1LC3LJvQGjPoRc6wHnmwo=)
                          3: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: VI49K7R88rVThAANVuwIPEelDVNIc8XXakufXcrWXkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:c8:5f:cd:49:9c:57:bb:ce:25:1d:58:18:20:c0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
        Validity
            Not Before: May 17 09:00:52 2024 GMT
            Not After : May 18 09:00:52 2024 GMT
        Subject: CN=ebfc7d277f86f90b741e4bf9bc947b7340b1ff17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:88:d3:55:07:54:53:c2:95:86:1c:1e:50:
                    a7:18:10:16:6e:f8:d4:9f:d2:cd:df:6f:5e:9f:5e:
                    0d:af:2f:e2:6a:1c:7c:4b:03:2d:a6:c0:3e:64:ec:
                    df:eb:b7:a0:b8:9f:09:6d:c0:a7:c8:5c:f9:b2:66:
                    cf:51:46:10:8a:3f:bb:6f:ea:9c:c0:d6:09:99:6a:
                    d8:48:f4:ae:99:64:1a:6e:d1:f0:a2:25:9e:01:5b:
                    98:4b:8a:f4:9e:e4:88:79:2f:08:22:56:b6:d3:ed:
                    09:ac:03:26:d7:c9:7f:95:74:1a:71:a8:29:d5:1c:
                    8d:9a:1f:dd:2e:40:fc:5f:5c:2a:1f:9b:fa:90:db:
                    0e:f5:61:80:39:79:18:74:80:3c:c8:4c:7f:bb:e0:
                    c0:4f:0b:0d:f2:98:dc:5a:e3:52:de:93:d3:46:6e:
                    9f:f7:37:b0:e8:11:d4:9e:2b:02:63:27:33:8f:2b:
                    ad:66:20:00:27:af:ad:86:5b:02:b4:40:dd:62:fa:
                    ef:98:db:a8:57:1b:ce:f8:63:19:00:55:67:d5:5b:
                    de:ab:7a:a4:cb:22:c6:c7:0a:9b:13:2a:52:f8:71:
                    ee:24:62:82:5d:49:e0:5c:db:4b:3c:1d:e8:ec:f3:
                    b2:cd:3c:b3:31:9e:75:f7:9e:48:9e:05:2b:68:e4:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:7D:27:7F:86:F9:0B:74:1E:4B:F9:BC:94:7B:73:40:B1:FF:17
            X509v3 Authority Key Identifier:
                keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:af:0c:7e:cd:97:39:af:1c:38:50:02:d7:16:9b:2b:47:
         bb:93:b7:47:72:70:bd:df:4c:02:13:f8:49:db:cc:1a:b2:c1:
         c3:c3:4b:3f:b8:66:ae:34:67:de:3e:89:23:b7:fe:a8:0b:d6:
         db:39:fc:15:3a:01:b2:31:5a:59:a8:a7:fb:83:34:e4:c5:ab:
         82:95:cd:95:f3:bd:f8:f4:b1:45:87:5c:5d:57:c5:0a:c1:ce:
         1b:a8:06:b6:eb:5a:63:8e:e6:37:f5:10:b9:00:ba:6d:ad:bb:
         0e:96:6d:4c:f5:19:13:a4:85:d6:33:37:5a:86:fb:75:4d:c9:
         37:4e:71:fe:36:da:02:80:01:6f:68:04:c5:cc:79:76:3d:21:
         ee:29:b6:11:db:4c:fd:49:7f:4c:d2:66:9e:e1:d0:84:3b:30:
         31:6b:85:1f:19:8a:62:dd:09:42:04:14:9c:02:cb:36:a9:b2:
         6c:b4:6a:88:45:b2:b3:4b:5a:a6:13:2f:6b:c9:7a:21:20:9a:
         f9:54:be:01:82:53:d0:6a:38:84:d5:83:68:77:21:98:40:a7:
         15:0b:96:3f:4c:11:3c:0c:50:a3:d1:d1:a1:70:8b:95:63:f7:
         b3:65:d1:90:8b:27:00:06:d3:c6:6d:8e:e2:fc:e0:7e:b6:82:
         fb:45:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:55 2024 by rpki-client on console-fra.rpki-client.org