Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File:                     ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier:          OmAwI/ecYenI9OH7Vtbep6rkbFEOxH4Mcn8raa/55rI=
Subject key identifier:   71:30:02:97:AF:66:EE:A5:D1:F2:39:7B:CC:35:FC:D6:97:26:5A:DB
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer:       /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial:       01935877778BE3C8EF302F7D8216668487D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:44 +0000
Files and hashes:         1: G2Wj46mw5_g0cKHY6L6WEAKqiMI.roa (hash: eaXQN8Cm+Wc2Zn5SMeu1hEVxllYo/L+hfe6E+J2yJGA=)
                          2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: askaxE0dkjFXPPrkytZRqH6A0U18VY+7kCM7wb/Zex4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:77:8b:e3:c8:ef:30:2f:7d:82:16:66:84:87:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
        Validity
            Not Before: Nov 23 10:00:44 2024 GMT
            Not After : Nov 24 10:00:44 2024 GMT
        Subject: CN=71300297af66eea5d1f2397bcc35fcd697265adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:31:0c:59:65:8c:6e:eb:7a:28:f2:b9:d1:
                    a1:a7:99:58:eb:bd:f5:07:f6:14:f1:49:91:17:ed:
                    2e:f7:0f:a4:0b:47:90:d7:83:87:11:73:b1:4b:dc:
                    5a:d8:04:3f:0d:31:9a:bc:1e:23:72:d0:9d:a8:09:
                    01:32:cb:18:1a:c6:c6:50:08:44:dd:f6:81:00:07:
                    67:70:8d:97:db:4c:d5:c5:42:46:f1:b3:08:0c:ea:
                    4f:d9:04:cb:cc:40:57:1e:a9:90:86:0a:0c:9d:14:
                    38:78:1c:a0:21:2a:0b:d7:b0:75:59:29:48:32:6f:
                    fc:97:8c:2e:fc:62:a3:78:29:fa:72:c5:eb:7d:3a:
                    21:c0:8f:c2:ca:bc:3f:56:5a:a9:1d:53:a5:47:da:
                    c6:35:3e:4f:40:fa:83:aa:e2:d0:51:d4:a5:c9:54:
                    e2:be:dc:53:05:49:93:5f:d2:7c:11:da:8f:54:fd:
                    4c:b3:4a:b9:23:87:86:16:93:95:c0:c5:fd:0c:be:
                    54:06:00:07:91:38:eb:78:87:46:ea:95:60:93:7c:
                    19:d5:04:80:3d:a4:1d:cd:d8:63:af:85:58:a1:a3:
                    10:1a:f2:40:95:b3:8f:8b:15:41:ad:63:99:c9:32:
                    ac:6a:e6:39:72:b9:2c:c5:bb:11:ad:6e:e4:dd:55:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:02:97:AF:66:EE:A5:D1:F2:39:7B:CC:35:FC:D6:97:26:5A:DB
            X509v3 Authority Key Identifier:
                keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:c4:b0:af:85:62:71:50:60:0f:a3:5c:2c:74:70:e1:10:
         5b:4a:86:01:95:9d:a8:80:2c:f9:1e:2b:30:55:be:ec:c3:63:
         64:ca:50:e9:7f:b8:63:f8:c3:04:a6:d0:6d:94:f5:e2:bf:d5:
         63:95:10:5d:5f:b4:49:1b:3d:40:99:8b:52:02:f3:13:c5:34:
         7a:9d:0c:5d:64:cf:0b:e5:93:a2:56:eb:b2:69:b4:ab:02:bc:
         4a:29:f9:90:29:04:29:1d:02:d7:ab:66:e5:a1:ff:04:e8:d8:
         53:2e:2b:9f:cb:93:91:4c:e7:ac:9f:5f:7b:7f:70:bf:1c:e0:
         2f:c4:c3:3f:7d:8a:2e:37:0a:52:52:10:a3:46:12:31:d9:f9:
         98:9f:6e:3d:c4:22:32:ec:5b:52:3f:c1:aa:82:c6:96:d3:e5:
         59:d9:d7:d0:9b:e2:48:62:0a:83:9b:f2:1e:3d:3e:b9:f0:81:
         04:8a:30:a9:74:9d:f7:71:bb:48:90:4e:20:8d:75:93:93:76:
         2a:b9:22:d3:e4:89:85:71:84:be:80:8e:d5:ff:92:34:97:50:
         ac:33:65:0b:bd:92:88:50:bc:b7:a5:6d:db:00:70:a2:db:d2:
         5e:37:16:be:5c:87:52:71:9f:55:d0:33:6a:41:a4:95:32:9b:
         10:c0:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:47 2024 by rpki-client on console-fra.rpki-client.org