Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File:                     yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier:          ayzJO+mm2oq1W+aKx/SO7cJodbN75Kk8qdwZ8CbkXsU=
Subject key identifier:   60:82:71:71:C9:81:43:AE:E3:1F:B3:9B:35:BF:5F:7F:BE:E1:2A:CE
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer:       /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial:       018F874B22A37C9D6DFFD5BB6A32D0CAADA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number:          047F
Signing time:             Fri 17 May 2024 16:03:19 +0000
Manifest this update:     Fri 17 May 2024 16:03:19 +0000
Manifest next update:     Sat 18 May 2024 16:03:19 +0000
Files and hashes:         1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: rLgNHVGXOMpFzFfnl0wD/pSaZR0byC6mQTJRGumxZpQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:22:a3:7c:9d:6d:ff:d5:bb:6a:32:d0:ca:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
        Validity
            Not Before: May 17 16:03:19 2024 GMT
            Not After : May 18 16:03:19 2024 GMT
        Subject: CN=60827171c98143aee31fb39b35bf5f7fbee12ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:fe:69:b8:36:bb:33:ae:ca:82:49:fd:8c:
                    af:12:25:23:52:76:cc:95:c2:f5:cb:12:fc:3a:5d:
                    f3:91:8e:f8:1a:d7:fc:74:7a:b3:12:0b:f5:b9:c0:
                    fb:a9:f8:7c:c9:69:d4:3f:4b:50:c9:4a:2b:06:2b:
                    48:5d:f8:8b:5f:6b:dc:00:5d:cd:8a:62:2b:9b:31:
                    9f:dd:ec:12:52:40:5c:24:e5:3c:6c:46:8a:91:1a:
                    8d:10:50:03:bc:52:e5:cd:46:10:ac:01:5b:18:4a:
                    43:f0:1f:73:a9:66:a5:cc:92:c8:48:f3:24:69:63:
                    0d:25:72:af:57:7d:05:77:85:79:e9:b3:80:68:3e:
                    d5:21:aa:7a:2a:19:b7:93:9e:f2:aa:fc:e8:6f:02:
                    7d:12:9a:d6:73:fa:4f:2c:c0:bd:6a:4b:7d:7c:15:
                    50:fb:0e:a5:c9:d5:2f:dc:25:89:ac:76:22:bd:a4:
                    1f:e5:be:c8:7a:75:c0:d3:86:eb:d2:cf:d7:cb:84:
                    1e:b4:f4:6c:31:51:ba:65:61:16:e7:d4:a0:9c:3d:
                    84:d1:aa:0d:26:68:c3:b7:fc:a5:4d:a6:fa:4a:b5:
                    84:10:5f:a5:e7:02:ff:40:6d:4c:d6:a0:52:77:9b:
                    f5:b8:59:8d:28:5b:55:89:7b:cd:48:67:8c:51:6a:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:71:71:C9:81:43:AE:E3:1F:B3:9B:35:BF:5F:7F:BE:E1:2A:CE
            X509v3 Authority Key Identifier:
                keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:dd:63:3a:8c:e7:c6:74:7c:04:1f:cc:c5:f8:c5:5b:0c:33:
         ff:23:67:e1:7e:dd:b9:d5:45:6e:9d:f5:39:1c:9c:0b:a1:b8:
         d4:67:5e:58:b4:05:8b:ac:e4:ed:f8:63:91:0b:6b:dd:be:3c:
         33:cb:ff:c5:5c:61:39:01:df:98:23:2e:87:5f:c3:92:10:d6:
         0d:c1:38:26:a4:6c:81:db:ff:fc:6a:f8:ae:ee:c7:22:35:29:
         84:55:03:f5:00:1d:0d:6f:42:a0:dc:3a:48:05:06:b1:02:92:
         02:5f:e1:db:b7:dc:54:ee:b3:75:ca:34:a7:29:60:14:0b:7d:
         d5:d1:d7:3d:d3:ac:96:e4:a9:7d:78:f1:e2:6c:a0:7f:32:9b:
         d3:e4:de:3b:b4:0b:9d:b2:13:1a:59:03:af:69:a7:ed:8b:eb:
         f8:d9:91:75:25:00:87:64:d6:06:22:5d:c7:28:c4:a2:37:fb:
         9c:65:96:59:a8:10:ef:29:9e:44:7f:4e:71:a1:4b:8d:db:c7:
         cd:d8:49:03:c0:3f:6b:3a:53:f8:a6:d6:28:7e:42:cf:cb:dc:
         cf:2a:a5:da:65:da:78:25:0b:dc:44:20:a8:87:4f:81:8a:9a:
         52:52:ec:17:4e:bf:49:31:5e:3d:e3:5b:5e:42:eb:0c:17:0c:
         f8:ba:cb:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSyKjfJ1t/9W7ajLQyq2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2
Mjk4ZDAwHhcNMjQwNTE3MTYwMzE5WhcNMjQwNTE4MTYwMzE5WjAzMTEwLwYDVQQD
Eyg2MDgyNzE3MWM5ODE0M2FlZTMxZmIzOWIzNWJmNWY3ZmJlZTEyYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAX+abg2uzOuyoJJ/YyvEiUjUnbM
lcL1yxL8Ol3zkY74Gtf8dHqzEgv1ucD7qfh8yWnUP0tQyUorBitIXfiLX2vcAF3N
imIrmzGf3ewSUkBcJOU8bEaKkRqNEFADvFLlzUYQrAFbGEpD8B9zqWalzJLISPMk
aWMNJXKvV30Fd4V56bOAaD7VIap6Khm3k57yqvzobwJ9EprWc/pPLMC9akt9fBVQ
+w6lydUv3CWJrHYivaQf5b7IenXA04br0s/Xy4QetPRsMVG6ZWEW59SgnD2E0aoN
JmjDt/ylTab6SrWEEF+l5wL/QG1M1qBSd5v1uFmNKFtViXvNSGeMUWrcxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCCcXHJgUOu4x+zmzW/X3++4SrOMB8GA1UdIwQY
MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt
YzE5ODY1M2FhYzVmLzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm
LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp91jOozn
xnR8BB/MxfjFWwwz/yNn4X7dudVFbp31ORycC6G41GdeWLQFi6zk7fhjkQtr3b48
M8v/xVxhOQHfmCMuh1/DkhDWDcE4JqRsgdv//Gr4ru7HIjUphFUD9QAdDW9CoNw6
SAUGsQKSAl/h27fcVO6zdco0pylgFAt91dHXPdOsluSpfXjx4mygfzKb0+TeO7QL
nbITGlkDr2mn7Yvr+NmRdSUAh2TWBiJdxyjEojf7nGWWWagQ7ymeRH9OcaFLjdvH
zdhJA8A/azpT+KbWKH5Cz8vczyql2mXaeCUL3EQgqIdPgYqaUlLsF06/STFePeNb
XkLrDBcM+LrL/Q==
-----END CERTIFICATE-----
Generated at Fri May 17 18:03:01 2024 by rpki-client on console-ams.rpki-client.org