Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          WBxGwTgFzdbNyPToFXA4/rv3pfuSBzf8GFovQrW5LBw=
Subject key identifier:   79:94:1F:A0:8E:AD:17:3E:2D:9A:EB:2A:DA:6F:72:46:5E:B9:38:3A
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       0193523E08BD40BD622DB063B7A8D27A98AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          1083
Signing time:             Fri 22 Nov 2024 05:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:17 +0000
Files and hashes:         1: KqmeXwhk_pB4xkGxpNTTDTeiS90.roa (hash: eMpxO11wdE075wjBA9FLiiVnMrmiLtPj0r0REiNl7bo=)
                          2: ONAEd8o7j4tRHoEobBg0FrNhnnQ.roa (hash: Uoa+6kwjK3viuK4uPnXGVGULuDkWcIcziKgOTQvX144=)
                          3: Yr0mXihiGEr4lvAQMjAAwKMFaFE.roa (hash: n36VABd3L6VUn/VOFphwSNeq2FZcUu2ftl6O5n6SAXE=)
                          4: rxYwDMR-LGxX1nGVtPcshXiF0-c.roa (hash: 977GjtOVmG02UMUxMkgHwGQ8L3eGt+TBWZfdw7W8FF8=)
                          5: xK41Ix21zUPN06W9_KMRvsPQA2Y.roa (hash: tw534xzF38TDRJqM4II5Y0cO+zBLyPJBIzLpjfKlvHA=)
                          6: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: kA4T73kNZMa5HZJvS3JHOLCIvcoNEf2lgZOvW20fkg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:08:bd:40:bd:62:2d:b0:63:b7:a8:d2:7a:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Nov 22 05:00:17 2024 GMT
            Not After : Nov 23 05:00:17 2024 GMT
        Subject: CN=79941fa08ead173e2d9aeb2ada6f72465eb9383a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:d8:2b:3a:93:37:bc:16:d5:c1:d1:56:78:
                    db:0b:2c:f2:c7:b2:9d:62:b9:7d:d6:12:99:76:e2:
                    13:17:c7:6d:71:2d:59:fd:7c:bd:b5:f8:0d:e6:c8:
                    55:b2:fd:2b:4b:e5:43:c3:67:f1:25:e1:73:f1:c0:
                    04:89:55:a1:28:24:a2:72:17:79:b1:13:d0:0c:2b:
                    73:bb:70:e1:9a:ee:01:11:4f:55:7f:8d:95:15:7a:
                    ae:cd:9a:8c:4a:71:c5:92:81:14:95:09:1e:13:98:
                    5b:2c:e1:ec:3b:1b:ae:39:aa:f5:48:13:65:5b:e3:
                    ce:62:25:a6:17:35:2f:87:a8:64:3c:70:1e:69:3e:
                    8c:b0:9a:a3:d2:89:87:e3:2c:89:41:ee:d3:8c:57:
                    0c:ff:7c:dd:fd:8a:46:cd:f6:02:00:4f:1d:18:0a:
                    01:34:cb:79:c8:c3:f7:06:48:10:e3:b8:e7:88:05:
                    42:c6:a8:49:48:83:e9:83:66:52:cb:3f:06:c0:d6:
                    91:70:96:50:d6:65:99:94:a9:a7:a6:23:47:46:b8:
                    eb:f2:18:2f:45:d3:12:01:82:5c:51:91:c0:9c:bf:
                    a0:ab:85:de:1f:ad:5f:4d:97:80:8c:2a:d4:16:74:
                    bb:55:4e:23:4b:75:0f:ce:1b:30:b8:fe:04:13:f7:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:1F:A0:8E:AD:17:3E:2D:9A:EB:2A:DA:6F:72:46:5E:B9:38:3A
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:9d:8a:d1:74:6f:24:dd:0a:25:c3:b6:1f:74:ab:a0:10:
         54:50:db:76:fd:42:ce:7f:ea:a7:09:fe:1f:f1:60:ec:da:96:
         bf:a2:70:f6:5d:4c:a1:30:a8:f1:13:da:95:8f:7e:b9:c4:08:
         0e:c8:fc:0b:ab:f5:86:29:59:9b:73:e8:7a:86:e1:90:b8:08:
         a8:6f:f7:16:de:ed:9b:93:2b:3e:ec:cf:29:0f:c5:dc:ad:8d:
         17:22:d1:1b:54:64:65:71:bf:8e:21:19:a3:cf:b8:e9:6a:bc:
         b1:97:3d:08:67:f5:91:79:f7:4e:cf:c5:a1:40:10:9d:17:2b:
         83:16:cc:71:9f:5a:db:62:4e:e8:d2:7c:63:de:e6:ce:36:cd:
         6b:2f:eb:53:ac:4d:27:24:36:b7:79:23:64:3b:39:ab:73:03:
         b3:13:44:14:63:95:00:6d:a5:fb:1e:35:12:17:41:9a:30:1c:
         d2:d8:c8:aa:e9:8b:ca:0b:53:a9:95:d9:53:f9:55:65:0c:15:
         67:a4:bb:b1:42:48:2c:23:e8:f9:fe:68:2a:ab:93:ea:4a:81:
         65:98:ee:28:26:fb:e8:bc:da:fd:1a:b4:fc:cb:06:e1:d7:c5:
         f9:36:60:6e:a7:09:b1:60:c4:9a:63:f2:b4:74:aa:cf:6b:e6:
         3e:82:f6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:08 2024 by rpki-client on console-ams.rpki-client.org