Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File:                     Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier:          8Kx/ocFO13s1cdhyUVSlwSaASF9jWzYN4/RAnBhOoQE=
Subject key identifier:   91:1A:32:75:43:33:79:52:4E:C7:07:2B:BD:50:F4:B8:D1:31:45:C5
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer:       /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial:       018F86A3F37FE9E00E0DD3BE13AFE5D742C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number:          E1
Signing time:             Fri 17 May 2024 13:00:42 +0000
Manifest this update:     Fri 17 May 2024 13:00:42 +0000
Manifest next update:     Sat 18 May 2024 13:00:42 +0000
Files and hashes:         1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: AKtO+/GaVMZaDTzfze4IKgsoMWWFBcE5FeZNA73QSVs=)
                          2: acBMsz_18v0du8QSs2xwMYZDI8U.roa (hash: riFRzw3qpK1oAq2keEsmGGcJXlyll4pe8QzpP7ABCYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:f3:7f:e9:e0:0e:0d:d3:be:13:af:e5:d7:42:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
        Validity
            Not Before: May 17 13:00:42 2024 GMT
            Not After : May 18 13:00:42 2024 GMT
        Subject: CN=911a3275433379524ec7072bbd50f4b8d13145c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:05:87:f9:9d:51:24:7f:ae:a2:e1:3e:cd:
                    7d:cf:91:d3:5d:98:45:ad:11:d5:81:82:ab:f9:ea:
                    fb:a9:c6:67:9f:88:87:61:a1:81:e2:24:f9:43:1a:
                    93:7e:26:91:49:cf:4f:9f:a0:f1:63:7a:4a:40:63:
                    e7:b0:2b:8d:0a:81:b6:31:32:e9:7b:06:1e:5a:66:
                    d9:48:68:65:e2:93:ef:d9:ba:25:52:c0:71:a0:8f:
                    63:41:49:1d:f3:84:1f:11:a2:e0:4c:f8:80:12:5f:
                    8e:55:e1:17:82:4a:16:85:f6:69:61:0c:10:39:d5:
                    33:c5:36:e1:9b:a7:cc:58:97:69:c3:57:2e:b6:51:
                    2f:af:82:dc:b9:64:2f:7c:65:c9:81:db:82:ed:69:
                    4f:13:c5:30:cb:8c:6e:a1:60:1c:12:64:78:40:14:
                    ed:8e:62:23:ea:4c:36:b0:15:30:18:02:82:3e:a8:
                    30:dd:89:24:ba:76:62:23:ad:07:6f:48:7b:03:30:
                    50:0f:18:ef:8f:20:a5:b4:30:3b:78:47:98:eb:0f:
                    b0:85:64:39:0b:e1:c4:f3:77:77:74:16:9b:21:2b:
                    f4:b5:8d:4a:c7:df:69:ca:85:90:2d:5f:5e:ff:99:
                    7f:6d:31:81:c4:50:47:57:ae:da:9c:dc:78:c8:3c:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1A:32:75:43:33:79:52:4E:C7:07:2B:BD:50:F4:B8:D1:31:45:C5
            X509v3 Authority Key Identifier:
                keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:08:2d:8d:49:a4:da:0a:5a:c2:f7:ec:ec:e5:38:66:9e:
         04:c9:8d:3c:ae:24:64:c0:36:93:35:e1:77:14:35:2e:b8:0d:
         6c:86:0d:57:1b:23:fa:41:57:fb:3c:54:ec:a0:e8:72:57:df:
         bd:82:5f:cf:4a:9c:96:0e:88:56:ad:7f:ce:63:f1:01:5a:9c:
         88:68:81:60:d8:d3:67:e3:82:39:ea:99:22:ec:40:ef:2f:b8:
         cc:ce:79:01:da:f9:b8:aa:ce:ed:b0:9c:20:1b:cc:b1:84:e5:
         b5:ec:60:37:63:d4:10:0e:9f:5f:eb:dc:e3:b7:43:ec:58:13:
         30:9e:bf:20:2e:be:2c:14:3d:2f:54:05:0a:59:ce:03:da:9f:
         01:11:bb:1c:de:9d:c0:7c:a9:07:0b:9b:82:f0:e9:4d:a8:07:
         8f:06:12:f3:08:4d:cc:ae:83:2b:6d:e8:e1:79:31:90:55:91:
         b7:d2:cb:36:3c:18:50:02:a7:bc:54:8e:c4:bd:88:9d:92:fa:
         cc:22:e1:90:70:87:07:bf:ec:7e:67:13:27:d1:52:8f:9c:a1:
         41:98:f8:93:f6:69:19:de:b6:37:4a:aa:d0:70:64:70:f5:b9:
         8d:1d:ea:44:2a:66:e9:2f:64:d2:c6:14:8b:fa:f8:d9:9b:8d:
         0a:20:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:18 2024 by rpki-client on console-fra.rpki-client.org