Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File:                     YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier:          MCSfS7dPHUeaPUQ1aujyM3a3eMQGvf1RyMeus/7hPkA=
Subject key identifier:   11:93:79:E0:DB:C5:53:3C:AE:A5:E0:76:12:D7:13:FD:E9:9D:F7:E5
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer:       /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial:       01958C6103DAC0121C6D03576EB8AF1ED910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number:          0183
Signing time:             Wed 12 Mar 2025 22:02:02 +0000
Manifest this update:     Wed 12 Mar 2025 22:02:02 +0000
Manifest next update:     Thu 13 Mar 2025 22:02:02 +0000
Files and hashes:         1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: lsmAJUeFltbhLW7b/hoUfZfwgFGroUO3cOQt+IhkOJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:61:03:da:c0:12:1c:6d:03:57:6e:b8:af:1e:d9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
        Validity
            Not Before: Mar 12 22:02:02 2025 GMT
            Not After : Mar 13 22:02:02 2025 GMT
        Subject: CN=119379e0dbc5533caea5e07612d713fde99df7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:f2:d8:09:73:fd:46:39:79:64:28:d0:93:
                    a0:a4:f0:11:e8:f1:ef:5b:70:51:bd:ab:16:02:9f:
                    2a:d4:49:24:c2:8e:87:8e:44:9d:96:9a:90:59:9d:
                    04:c4:fe:91:f2:0a:32:88:ad:1c:7e:ba:3a:dd:df:
                    90:97:0f:75:8b:08:7b:cb:da:44:9e:c3:6e:7e:ae:
                    cc:fc:bc:0d:cc:b1:45:44:25:5a:13:35:98:e7:a1:
                    74:f6:a5:eb:81:17:3b:1e:88:db:b0:96:8a:a2:24:
                    5a:e4:6b:4d:df:93:cb:79:2d:e3:ab:6f:02:52:23:
                    3b:8e:91:64:73:a0:ea:28:99:c8:d3:45:31:8d:fa:
                    be:a0:e8:c5:4f:97:fc:88:89:b8:43:9a:e3:8e:b8:
                    5b:19:df:72:31:59:a8:49:d7:ff:e4:9b:37:b4:b0:
                    09:de:5f:c0:e3:6a:eb:56:d2:4f:31:34:ba:bc:aa:
                    e3:f3:1e:6e:aa:bb:46:01:f8:9f:d9:c7:da:d5:30:
                    c2:07:73:da:b8:7f:d5:20:60:e4:a3:a5:5c:55:c5:
                    f4:96:e0:18:89:4b:22:a2:b5:1b:9d:d9:c4:21:ac:
                    29:db:c9:74:59:e5:69:e9:56:6a:d7:5d:34:40:0e:
                    fb:a1:7c:35:e5:7a:84:d8:60:b8:ef:c0:59:d8:b7:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:79:E0:DB:C5:53:3C:AE:A5:E0:76:12:D7:13:FD:E9:9D:F7:E5
            X509v3 Authority Key Identifier:
                keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:df:01:dc:52:5b:7d:19:c3:9f:4d:72:1b:a8:59:5a:7d:81:
         fe:fb:52:f1:28:2a:99:37:a4:11:a0:68:93:54:b9:e4:c6:c6:
         15:75:8b:85:b6:c1:f8:04:1f:08:1c:30:11:93:e2:19:1f:c9:
         4b:28:9a:86:3a:9c:01:c0:f3:bf:b9:62:57:f0:c1:9e:f0:47:
         01:c5:b7:1e:54:8e:14:b6:0b:d1:9a:67:19:9c:7c:9d:8a:69:
         f0:9e:db:ea:5e:eb:e5:62:55:e8:12:8d:64:e8:15:9a:2d:2d:
         4b:c8:51:1a:c9:c0:43:64:b7:d2:8a:e8:ef:3e:6a:09:be:4e:
         8a:03:a0:67:d3:9d:c7:6c:46:ed:bc:2b:5b:9e:32:a9:e5:e1:
         a9:93:7c:8c:ef:12:c2:f5:11:01:73:36:49:53:6a:b2:16:47:
         81:f1:a6:f5:e7:11:e1:f3:b8:33:36:64:11:db:56:31:7a:d5:
         83:43:8f:99:4e:35:76:51:2e:fc:98:2e:68:78:e6:2c:10:aa:
         2a:b0:27:3c:6a:df:17:e5:77:58:76:06:0f:30:f9:95:6e:33:
         ea:a3:89:9f:41:58:4d:89:f8:aa:f4:85:80:16:eb:63:33:1b:
         66:ca:7d:24:0f:5c:82:40:08:d1:c1:ad:62:18:d5:33:b2:bf:
         86:21:e2:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYQPawBIcbQNXbrivHtkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2
ZWY5YzEwHhcNMjUwMzEyMjIwMjAyWhcNMjUwMzEzMjIwMjAyWjAzMTEwLwYDVQQD
EygxMTkzNzllMGRiYzU1MzNjYWVhNWUwNzYxMmQ3MTNmZGU5OWRmN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrHy2Alz/UY5eWQo0JOgpPAR6PHv
W3BRvasWAp8q1Ekkwo6HjkSdlpqQWZ0ExP6R8goyiK0cfro63d+Qlw91iwh7y9pE
nsNufq7M/LwNzLFFRCVaEzWY56F09qXrgRc7HojbsJaKoiRa5GtN35PLeS3jq28C
UiM7jpFkc6DqKJnI00Uxjfq+oOjFT5f8iIm4Q5rjjrhbGd9yMVmoSdf/5Js3tLAJ
3l/A42rrVtJPMTS6vKrj8x5uqrtGAfif2cfa1TDCB3PauH/VIGDko6VcVcX0luAY
iUsiorUbndnEIawp28l0WeVp6VZq1100QA77oXw15XqE2GC478BZ2LdBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGTeeDbxVM8rqXgdhLXE/3pnfflMB8GA1UdIwQY
MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt
M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw
LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId8B3FJb
fRnDn01yG6hZWn2B/vtS8SgqmTekEaBok1S55MbGFXWLhbbB+AQfCBwwEZPiGR/J
SyiahjqcAcDzv7liV/DBnvBHAcW3HlSOFLYL0ZpnGZx8nYpp8J7b6l7r5WJV6BKN
ZOgVmi0tS8hRGsnAQ2S30oro7z5qCb5OigOgZ9Odx2xG7bwrW54yqeXhqZN8jO8S
wvURAXM2SVNqshZHgfGm9ecR4fO4MzZkEdtWMXrVg0OPmU41dlEu/JguaHjmLBCq
KrAnPGrfF+V3WHYGDzD5lW4z6qOJn0FYTYn4qvSFgBbrYzMbZsp9JA9cgkAI0cGt
YhjVM7K/hiHivg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:35 2025 by rpki-client