Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File:                     79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier:          ao24l4rNK5yq+6A1sEtU56o9+bafj6MOWB0ZGsJ0sh8=
Subject key identifier:   43:B0:98:0F:41:69:7E:BF:11:E4:6B:48:BD:3D:AF:80:F0:B1:CD:27
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer:       /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial:       018F1E244CD7008B1B395495BFC9B629D6C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number:          1018
Signing time:             Sat 27 Apr 2024 06:00:46 +0000
Manifest this update:     Sat 27 Apr 2024 06:00:46 +0000
Manifest next update:     Sun 28 Apr 2024 06:00:46 +0000
Files and hashes:         1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: a0yo5yX6FD+DqwnSlrd37CtFT9RK4fKfVw0dtxvRTng=)
                          2: 8pVDjNrT0Lo_DTMhW-4PrCKM130.roa (hash: JW5TFLxnJ5N0TC38ptDSHk0w2LdZNuX3CDW39bq3oeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:24:4c:d7:00:8b:1b:39:54:95:bf:c9:b6:29:d6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
        Validity
            Not Before: Apr 27 06:00:46 2024 GMT
            Not After : Apr 28 06:00:46 2024 GMT
        Subject: CN=43b0980f41697ebf11e46b48bd3daf80f0b1cd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:aa:c8:4a:7f:af:7e:e4:cc:59:11:39:3f:
                    be:e3:f2:ff:fc:8c:30:89:ec:f1:e0:31:f5:09:f1:
                    7f:e5:6c:99:88:30:f1:35:a7:05:4f:73:f8:b9:fc:
                    2f:79:9f:81:52:f2:51:48:f4:02:bb:2a:4d:d4:9b:
                    2a:c1:05:c9:d3:bc:de:9f:88:50:91:ff:88:3a:10:
                    2a:26:1b:a8:96:0e:b0:87:b2:fa:ff:44:7f:d2:6c:
                    59:cc:ea:e7:99:56:0f:5b:51:c1:dd:72:c3:2a:9d:
                    5f:f4:9c:ad:84:52:6f:87:59:fe:40:66:56:b2:d1:
                    ef:f5:b5:3c:bf:f4:96:5e:b4:54:63:27:92:37:46:
                    8d:d8:1b:94:e4:2f:b2:d1:1f:16:f2:6b:43:df:70:
                    e5:cb:1d:11:45:de:63:c1:86:b0:13:1a:ae:65:41:
                    04:2d:bc:5a:08:a8:bb:41:77:cd:78:60:dc:20:d7:
                    f3:7c:c9:41:8b:e3:7c:2f:6b:3d:8c:15:0e:58:42:
                    d1:9c:ff:c4:d6:36:28:7b:10:14:95:4e:bd:e3:2e:
                    8f:c5:3c:84:f1:ce:9f:10:47:d1:10:80:18:9c:47:
                    62:0d:cb:63:9b:a4:7a:9b:d3:0d:49:ed:0d:f7:ff:
                    4c:7e:1a:83:7f:af:e6:9e:4e:bb:09:f0:87:6c:b0:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B0:98:0F:41:69:7E:BF:11:E4:6B:48:BD:3D:AF:80:F0:B1:CD:27
            X509v3 Authority Key Identifier:
                keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:0c:28:73:94:72:d9:4c:b3:c5:76:b1:cc:a9:91:d2:d1:
         18:e7:a5:92:b8:31:96:69:e7:3a:e7:36:12:63:55:56:22:b4:
         d3:41:73:c1:4c:f6:cf:11:37:17:36:42:03:a2:02:a6:6a:b3:
         b6:ed:42:e3:a4:4f:e3:ab:80:53:2d:62:e1:d6:95:f3:9c:34:
         3a:a3:70:53:a5:e8:f6:56:e7:4b:58:c7:ee:7a:28:d4:60:ac:
         3e:e1:7e:6e:b8:60:93:54:41:d6:fd:92:7f:e5:d3:be:2d:81:
         73:a3:60:95:36:5e:89:16:53:a6:3e:d5:91:f2:ff:36:97:c9:
         7d:e4:4e:b6:fe:6b:ef:a4:ab:3f:c7:af:00:52:65:d1:d3:73:
         92:58:46:28:e9:4d:d1:72:c3:22:98:8a:f0:84:b9:7e:30:82:
         fe:b4:ae:16:00:5b:3c:3b:e0:a3:fa:9f:e5:fe:7c:7e:4a:80:
         aa:3d:d0:76:22:27:50:8d:ad:70:2e:e9:b2:57:4f:8b:0e:13:
         5f:25:e7:58:31:f9:30:37:bf:5c:dc:24:1e:c2:b4:25:fe:04:
         39:a2:09:b2:bc:e1:20:14:b6:1e:5d:81:61:c6:37:ed:ba:a5:
         72:59:08:83:bd:cb:5c:93:f2:1a:61:7b:d7:f2:7b:45:87:4e:
         13:4e:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:57:50 2024 by rpki-client on console-ams.rpki-client.org