Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File:                     YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier:          in+c0aOQ63j6sjeRK79AJatbmxiED/ywh4oHN3QEcIA=
Subject key identifier:   59:2F:9A:40:EE:77:EE:59:14:C7:36:26:0A:87:13:BF:E8:55:E1:24
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       01935207905B2C80AB426DA06E2F56A4BFCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 04:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:47 +0000
Files and hashes:         1: B8lj5un_puvuye0Jfja_t9BgW5c.roa (hash: P3LqNv75xlB3xC5sjcxegt8GHKKY/+KuvQkmY3h/s0Y=)
                          2: HTWMAaTmIui8YRsSWEtkfNN7zPo.roa (hash: +kS99tqLV7rTQxZKg9xRg7GZIlpwFyBPGQnzwyTLQm8=)
                          3: SBuFwo1G2Tw9ZLL8U_XwukslCY8.roa (hash: piz14vfRa+FIfPFAlq5Ou5o7bOut9fSiJIyhfzC7kZg=)
                          4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: BmVmKLHOiDd2ArysNgU41s1CW/hFYx1fvSukVIfEuQI=)
                          5: l6VaTvd3SFnEDXLh3CqzvoDm-B0.roa (hash: XyDimzYP6PKNv1LhCPkxaVMSs5AWv6rr9VUXOuQ0D9g=)
                          6: m4ZaNAjryBnKmYGIjG7kzaSGLxY.roa (hash: aDyxQeVUKQnIdI0z66YQQT1Tvz1bV3tGU371FonrpqU=)
                          7: ymmwU-S0s2qZKMYgvnfNrjAdQUQ.roa (hash: roWsHVRN5kmuNyxoDQBZjSEiQoZVe196TBlViKY9irA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:90:5b:2c:80:ab:42:6d:a0:6e:2f:56:a4:bf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Nov 22 04:00:47 2024 GMT
            Not After : Nov 23 04:00:47 2024 GMT
        Subject: CN=592f9a40ee77ee5914c736260a8713bfe855e124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:e5:1d:be:52:d2:f8:7b:18:8f:e6:2e:54:
                    70:34:69:bc:01:0f:be:34:6d:0a:86:08:34:3c:92:
                    70:40:d7:7d:53:76:43:15:07:c3:c4:f6:0d:ed:a9:
                    47:55:3d:25:35:97:c4:15:9d:eb:8c:bc:ae:bc:cd:
                    a7:51:f6:60:e2:d9:bd:0b:31:9d:43:ee:35:a6:43:
                    5c:85:20:0c:f9:8f:a5:f3:ec:dd:e6:7c:4d:c9:a5:
                    a1:86:48:42:28:fb:3d:b6:33:9b:d0:94:94:26:ec:
                    90:f9:6e:da:0c:b3:35:64:b3:2e:0b:e8:a8:4b:ec:
                    01:f0:31:b2:1e:f1:5c:f2:df:ec:38:3c:02:83:f9:
                    9c:a0:07:23:6d:1b:45:1b:3f:10:10:de:8b:ea:32:
                    bc:19:d1:da:52:6c:a9:d8:94:30:f7:b2:15:a9:f7:
                    01:77:5e:6d:6e:38:d9:13:a7:73:30:a5:b8:30:6a:
                    71:7b:e9:f5:b0:0c:3f:22:81:0b:6d:90:3d:87:e9:
                    d6:a8:01:34:bb:11:ec:29:1e:b4:30:a2:04:59:fb:
                    db:1a:ec:06:7d:d5:cb:42:29:d4:a2:02:e0:73:7e:
                    71:93:74:7e:9b:33:3f:62:f3:61:42:14:48:36:e3:
                    eb:76:36:70:6b:bd:28:b2:56:03:fb:21:4d:3b:73:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2F:9A:40:EE:77:EE:59:14:C7:36:26:0A:87:13:BF:E8:55:E1:24
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:b7:aa:2f:43:09:df:41:ed:10:33:5a:72:89:d5:fc:ab:
         7a:c4:02:b1:78:4f:cf:9e:80:9b:9e:11:de:d2:17:fc:40:93:
         72:79:8c:0c:6c:34:3d:3b:f3:74:d9:6a:18:56:41:31:42:e5:
         3e:9a:12:22:3b:e1:d1:95:6b:25:bc:be:37:41:54:73:a7:82:
         78:15:49:7d:2c:86:7a:6f:37:09:fa:30:64:a6:8d:fa:4f:d8:
         37:4e:8b:d3:71:15:d4:ec:1a:de:e4:3d:b3:2d:63:65:f2:78:
         b1:ad:16:07:a5:80:7a:fc:ba:63:c6:84:bc:55:f6:fc:53:71:
         00:88:5a:59:b5:1d:6c:8b:73:db:e0:62:e3:00:64:fc:76:bc:
         dc:38:6b:cf:58:62:c0:03:77:bd:be:d6:f0:c7:67:e6:b1:c0:
         3f:43:34:11:a5:53:51:02:bc:4b:ce:96:58:ba:91:20:ec:22:
         93:7d:a5:e9:fb:cb:1e:39:2b:63:65:7f:0a:06:31:a1:91:f6:
         3c:e8:7c:20:1d:bc:25:99:dc:29:8a:20:3b:66:1e:09:b5:e6:
         f2:d1:a6:0a:33:0a:fa:a0:bf:f1:1e:1a:3c:33:68:a5:05:59:
         17:a8:f0:34:f1:6f:82:6b:89:f5:af:4a:a3:84:16:6e:63:eb:
         a1:cc:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:48 2024 by rpki-client on console-ams.rpki-client.org