Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File:                     YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier:          +Qo1JMDKTgfHcCRqUhRe/f3rEjSnASq7wDWa3Z6OZMA=
Subject key identifier:   A6:7C:33:D2:25:BA:D3:D2:AC:DB:57:46:F5:CF:2E:0A:2F:19:4E:ED
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer:       /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial:       019356F71A29C9FEE551638694DD5D967164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number:          057F
Signing time:             Sat 23 Nov 2024 03:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:54 +0000
Files and hashes:         1: 90E-1oTk3dbxIsnj45nACUWMVUo.roa (hash: UL6Hr2SbciyU2lqvmZZqhDtA1GGNt9C3cDIhD+6opk4=)
                          2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: 5eJh+oA7U5YhUayPSZUZOy+NIiMxwbCEVrAlQllVDAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:1a:29:c9:fe:e5:51:63:86:94:dd:5d:96:71:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
        Validity
            Not Before: Nov 23 03:00:54 2024 GMT
            Not After : Nov 24 03:00:54 2024 GMT
        Subject: CN=a67c33d225bad3d2acdb5746f5cf2e0a2f194eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:bb:9d:72:30:02:38:e7:e9:e7:e2:fe:e9:
                    6f:74:26:0b:0b:9f:c7:1b:1b:68:ee:d8:70:96:56:
                    1c:47:f6:03:d0:46:33:8a:b8:3d:51:2f:03:cf:b9:
                    6c:d1:f6:b3:ea:24:c6:2e:83:8d:df:c4:f3:66:d2:
                    3f:21:8a:a5:b2:c1:d4:90:ba:76:ce:c1:74:08:61:
                    47:7f:85:08:79:39:e7:98:2b:63:61:6e:d4:df:a8:
                    db:45:66:7c:d3:74:53:3b:ab:c8:8f:fa:36:86:32:
                    7b:b3:15:f4:30:7f:7e:2d:eb:aa:fe:82:08:6a:7e:
                    f6:7b:e4:f4:d5:62:00:06:51:bd:ad:84:76:10:72:
                    02:42:01:ff:a8:80:14:c9:24:55:87:13:af:bb:b1:
                    7e:96:7a:0f:cc:03:90:92:56:0f:a6:41:2e:a5:9e:
                    ec:c4:e1:df:14:2f:ee:fb:5d:04:12:25:79:90:fe:
                    a9:7e:4c:58:85:41:3d:f6:ae:44:0f:ba:b9:23:1e:
                    7a:3c:e3:2a:3d:86:26:d6:c6:a3:81:88:f1:82:be:
                    32:62:b2:5e:2a:9f:11:7e:37:63:f7:e4:38:d1:c7:
                    89:fb:71:3d:a1:a2:b8:33:9d:e0:59:c0:7e:16:49:
                    5d:85:1c:2d:38:f9:bf:11:fc:a5:f6:ad:35:9d:cd:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7C:33:D2:25:BA:D3:D2:AC:DB:57:46:F5:CF:2E:0A:2F:19:4E:ED
            X509v3 Authority Key Identifier:
                keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:21:6f:e1:7d:c7:02:46:bb:cf:49:0f:54:d1:da:3d:4d:
         2e:6b:83:7a:93:60:12:8e:d4:ab:d0:d2:3b:73:6e:39:03:03:
         ed:9e:51:84:42:bb:e8:a5:e1:70:02:35:2d:0b:22:a7:f5:dc:
         40:4b:d8:f9:28:1f:63:d0:56:b9:5e:71:a8:ca:97:9a:f8:85:
         b1:31:f6:87:51:4e:c7:5f:c3:5e:04:61:ba:cd:e0:db:96:51:
         44:bd:7f:09:e2:b5:a6:58:b9:70:7a:27:2c:27:8a:f7:de:96:
         63:42:5f:45:95:7d:17:74:76:62:98:0a:65:e1:08:f4:68:56:
         c2:c8:75:9e:dc:7e:75:13:42:dc:09:2c:1d:48:9e:c3:55:6b:
         e2:09:94:24:4e:f4:24:07:28:67:d7:29:1e:59:68:9a:88:32:
         5b:b6:ef:e3:c8:78:13:1b:58:23:26:a8:89:38:d5:e4:a4:3a:
         d9:d6:15:f7:b2:1b:04:16:dd:7f:ce:40:2a:b2:a5:97:3e:e5:
         db:1e:74:1e:93:f8:ee:25:99:49:f2:05:02:17:56:cc:13:5b:
         7b:00:e6:6d:ef:dd:90:20:4e:8f:57:04:09:66:2f:57:c6:fe:
         53:52:57:31:af:ca:da:25:90:55:24:99:9c:5e:6a:e5:75:67:
         1b:eb:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:20 2024 by rpki-client on console-ams.rpki-client.org