Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File:                     _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier:          eWgamKvJ99VggvLbpBWV3qusj779m2hG3dFKPHITzZI=
Subject key identifier:   A0:10:5A:ED:5F:30:DD:CF:E1:89:77:CF:3C:68:6A:80:48:25:0B:A1
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer:       /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial:       018F885B5620D9303135029C6C60F89A2779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 21:00:38 +0000
Manifest this update:     Fri 17 May 2024 21:00:38 +0000
Manifest next update:     Sat 18 May 2024 21:00:38 +0000
Files and hashes:         1: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: kfsOWbNafogBOR9G88ETBzuoZBpWMF/0kTDrp8BqKzs=)
                          2: p2VzljyIf7LvNMX0sxnsxfW8r3g.roa (hash: u4zSF+HUGYwx5CX4seLQpFdH/lDcVRqW/fJnqV/Pr3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:56:20:d9:30:31:35:02:9c:6c:60:f8:9a:27:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
        Validity
            Not Before: May 17 21:00:38 2024 GMT
            Not After : May 18 21:00:38 2024 GMT
        Subject: CN=a0105aed5f30ddcfe18977cf3c686a8048250ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:1c:b9:1f:eb:29:eb:1d:15:e8:37:05:8c:
                    e3:d9:b2:53:ad:bd:61:c8:2d:af:3c:08:5c:7f:01:
                    27:dd:0c:88:18:3d:29:57:3f:73:ea:6a:76:b5:33:
                    41:02:09:5b:75:06:66:aa:18:dd:61:5e:b3:49:2e:
                    e3:f3:6e:98:e4:1b:34:8f:6e:4b:ef:65:b1:c9:af:
                    4b:2e:65:c9:88:fb:90:77:c6:30:5c:e0:e6:e1:17:
                    d9:d5:8b:e7:cb:42:80:d7:e9:c0:6f:c5:21:37:20:
                    9b:86:31:63:e7:c4:1c:ab:dc:a4:fa:5d:dd:06:85:
                    fd:f5:4c:83:90:01:de:40:98:2c:4c:62:5c:45:a7:
                    9e:e3:02:80:02:52:25:cb:5c:87:23:72:b5:2f:0b:
                    bc:28:ca:99:10:6e:cf:9b:29:e5:89:2c:5a:26:6d:
                    1f:b5:d0:a1:50:75:a5:6a:4f:15:73:4a:4a:f8:10:
                    5f:51:70:9a:c6:d7:3b:79:90:d6:3a:23:5c:2f:ae:
                    20:c2:11:d6:57:a4:48:d1:d7:b6:2b:9c:03:8d:fd:
                    12:27:3d:7c:9a:bb:70:fc:dc:23:8e:8c:ef:ea:94:
                    f3:7a:7c:63:a6:39:e4:a1:07:b1:d2:6c:76:de:76:
                    96:53:ab:60:51:2a:f7:da:27:d9:a1:a3:9a:ab:20:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:10:5A:ED:5F:30:DD:CF:E1:89:77:CF:3C:68:6A:80:48:25:0B:A1
            X509v3 Authority Key Identifier:
                keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:d4:87:de:b4:5a:da:9a:d3:7f:7b:97:56:13:65:4a:0f:
         92:58:12:a0:9c:3b:92:be:cb:b2:7f:29:41:84:eb:58:ed:05:
         b9:f5:89:3a:78:a0:4e:e0:67:c4:28:cc:3f:f5:42:53:5b:08:
         ce:7b:cf:78:33:17:c6:e9:a0:df:7d:fe:98:36:d7:a4:3b:80:
         4a:30:93:9d:94:66:93:ee:a9:91:89:85:c7:a9:22:b9:4b:54:
         fc:a3:db:0c:14:1a:4c:41:45:f4:df:83:0a:b2:94:0b:38:51:
         21:3f:d8:2d:4d:16:1f:e8:19:fa:84:38:b4:87:5a:a9:e2:0e:
         48:8a:28:60:02:c8:1b:c2:fb:f9:1e:24:19:56:92:db:60:54:
         ab:db:84:49:19:3a:be:34:0e:03:4a:89:dd:08:bb:ba:fe:25:
         d5:f8:e8:cc:b4:f9:0c:bc:9b:f8:23:bc:fb:09:61:f2:9e:21:
         e2:05:16:b5:70:89:91:46:44:2a:c9:d1:13:dd:5c:78:81:db:
         28:51:ec:5a:ef:16:64:8b:1c:24:d6:76:30:fb:57:84:c1:cc:
         e9:49:2b:27:74:1f:73:cc:14:b1:08:e5:45:f9:f4:0a:53:e6:
         a8:56:b4:47:a0:c5:e1:31:91:b3:7d:d4:3d:63:b4:d3:10:22:
         05:0e:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:31 2024 by rpki-client on console-fra.rpki-client.org