Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
File:                     YTe126q6KK4oyOmpeA-3DCT8kZA.mft (raw, json)
Hash identifier:          bD2L6LFridtcsBjVFA3l8DZdaHBY2LpoErhfZmMjvCs=
Subject key identifier:   DC:76:70:4D:DD:FC:DA:32:5F:31:6D:2B:03:F0:E6:F4:72:BC:08:9D
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Certificate issuer:       /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial:       018F9C87E8315E5DB9A9CC168ED84AE894FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
Manifest number:          07B3
Signing time:             Tue 21 May 2024 19:01:43 +0000
Manifest this update:     Tue 21 May 2024 19:01:43 +0000
Manifest next update:     Wed 22 May 2024 19:01:43 +0000
Files and hashes:         1: SmE0ct24B_cDKs24GwkperH--_A.roa (hash: c01TX6DFeZ14KFBu3sw8YP35+xZQJ3gtUGMLH5R0j/8=)
                          2: YTe126q6KK4oyOmpeA-3DCT8kZA.crl (hash: zzWFMCytOdsqqMcHDgomIKjPnP6Kyg5n8wa5I9qA6yg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:87:e8:31:5e:5d:b9:a9:cc:16:8e:d8:4a:e8:94:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
        Validity
            Not Before: May 21 19:01:43 2024 GMT
            Not After : May 22 19:01:43 2024 GMT
        Subject: CN=dc76704dddfcda325f316d2b03f0e6f472bc089d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:f3:89:b4:44:2d:77:de:9a:10:8d:bf:ce:
                    d1:24:28:8b:f8:2b:a1:b7:57:1c:56:41:f0:29:f4:
                    b7:ed:bf:52:ea:69:49:2f:5b:7e:1d:67:56:a3:87:
                    98:05:dc:ca:33:7c:2f:ad:85:5a:99:ea:5d:95:d9:
                    61:d2:32:2c:c1:0d:ab:ab:a0:62:42:22:c7:06:ff:
                    68:0a:80:6d:f6:cf:16:4e:ee:51:2b:c5:bf:c9:ab:
                    db:13:52:0e:ba:65:d4:5f:e2:17:0a:6a:59:cd:ed:
                    45:67:4b:f3:89:d6:5b:bf:6d:64:76:4f:0c:00:e7:
                    80:39:87:38:39:c2:06:73:e0:45:54:cf:7a:02:6f:
                    ee:b5:93:87:22:5f:90:c9:85:ab:64:20:25:c0:aa:
                    50:d8:38:7a:23:56:e5:b3:14:04:b5:b5:e2:60:5d:
                    69:88:1b:f1:e5:0e:96:d1:4c:f6:d1:a7:88:31:91:
                    ed:b1:b2:1d:75:29:c1:9e:77:fd:2a:d3:31:95:a6:
                    c5:93:85:ec:23:90:dc:02:4b:01:49:e3:58:29:89:
                    d6:ca:dd:71:84:a6:f1:56:fb:23:d9:26:76:a8:be:
                    99:ae:41:3c:4d:2d:e0:bb:ec:01:8e:77:17:a1:5d:
                    39:6e:71:fd:f4:95:2b:37:c3:e0:cb:0b:e0:69:d1:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:76:70:4D:DD:FC:DA:32:5F:31:6D:2B:03:F0:E6:F4:72:BC:08:9D
            X509v3 Authority Key Identifier:
                keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9f:c0:3c:02:74:a0:60:2f:84:04:a5:4e:92:f7:74:5e:aa:
         5f:c6:41:f4:33:3c:b1:47:19:41:61:d7:69:e3:f7:98:42:47:
         ec:20:a9:25:49:b0:d3:2f:19:91:7d:8e:c8:3b:d9:a8:d1:c8:
         05:f0:dd:2b:50:ab:a3:3a:51:a7:7c:bc:95:ce:07:96:81:6d:
         b5:10:d4:2f:a6:37:e2:83:5e:cc:91:96:e6:98:f8:0d:0d:30:
         65:f3:7a:1a:ee:a7:0e:25:b6:42:88:f6:b0:71:52:3c:74:0e:
         ff:51:5b:2c:e4:30:26:26:fa:b6:74:c5:48:0d:83:00:00:c5:
         0b:8e:28:3b:b8:47:f6:be:3a:87:2f:57:0a:f8:7d:fe:2e:73:
         8c:f9:b5:4f:5a:66:90:0f:11:9f:bf:75:d2:ea:59:f8:4b:85:
         a5:0e:5b:ed:b8:22:b4:23:3c:6a:03:32:ae:0d:d3:93:4b:78:
         dd:46:cb:4c:5e:ad:df:f2:b2:9f:65:0d:7b:35:28:16:1a:a8:
         7d:8d:4b:4d:0c:27:35:0d:6c:86:a4:6a:9b:bb:0b:85:79:32:
         1a:f0:47:6f:95:da:fb:78:15:87:1f:2f:66:25:97:81:c4:46:
         6e:58:a8:1a:d7:dd:9a:d0:64:ef:4a:be:74:c9:2f:34:04:e0:
         d3:31:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:00:46 2024 by rpki-client on console-fra.rpki-client.org