Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.mft
File:                     ypor56K5uaRz2ryFeLREp7LolS4.mft (raw, json)
Hash identifier:          zmkxjKiDH80wAsZ2NPEUWwLF2GT/a3bT2+rNVmkoY2Q=
Subject key identifier:   DF:62:6B:06:B5:33:29:59:CA:4E:D0:DD:72:F5:F1:50:90:20:ED:1A
Authority key identifier: CA:9A:2B:E7:A2:B9:B9:A4:73:DA:BC:85:78:B4:44:A7:B2:E8:95:2E
Certificate issuer:       /CN=ca9a2be7a2b9b9a473dabc8578b444a7b2e8952e
Certificate serial:       0193553F9244EE95D8C3CF526DAE17FE4E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypor56K5uaRz2ryFeLREp7LolS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.mft
Manifest number:          0D1A
Signing time:             Fri 22 Nov 2024 19:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:49 +0000
Files and hashes:         1: nwGHMhoWkJPP2Nvl2QOLCfCd6m0.roa (hash: o9jT//YhsPWCHZ1joIfWpeW+V4r4JgvRmkoDzUHJWyk=)
                          2: ypor56K5uaRz2ryFeLREp7LolS4.crl (hash: YeJp+wp2QV+PaCdBPsrEwWKueXp4kRcmaqV/Kvpzaoc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypor56K5uaRz2ryFeLREp7LolS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:92:44:ee:95:d8:c3:cf:52:6d:ae:17:fe:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9a2be7a2b9b9a473dabc8578b444a7b2e8952e
        Validity
            Not Before: Nov 22 19:00:49 2024 GMT
            Not After : Nov 23 19:00:49 2024 GMT
        Subject: CN=df626b06b5332959ca4ed0dd72f5f1509020ed1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:0a:8d:81:59:b3:30:e7:5e:be:ff:7c:c8:
                    28:06:e2:50:d0:f4:ef:13:1e:42:45:8f:3a:51:1c:
                    df:8c:5b:ec:d7:2e:1a:a3:62:11:9f:c9:0d:ba:8f:
                    9b:00:b4:03:60:b7:b4:65:13:61:87:f5:39:20:62:
                    c0:02:86:57:78:05:11:f8:c3:7f:7c:8d:e3:92:9f:
                    68:ae:44:c2:58:aa:88:42:98:36:76:21:b0:1a:2e:
                    8e:e6:cf:a4:d9:8c:85:ca:51:3e:21:fc:05:67:fe:
                    43:d1:4b:68:42:7a:56:81:56:7b:33:a9:88:b9:38:
                    d6:c2:5b:08:4f:6c:8a:41:ee:49:15:7a:26:0c:5b:
                    f7:e9:f4:d0:ac:e7:2f:2f:a8:88:93:cf:3a:d4:b9:
                    7d:20:bd:13:6d:ce:69:7d:7f:39:99:a4:1a:2d:97:
                    b5:65:d2:2a:ef:2b:9d:7b:29:cc:a9:c0:5e:7d:be:
                    1f:ed:79:f1:02:19:2d:85:c7:ac:cf:ef:2b:f1:5a:
                    a8:7d:2a:76:e3:57:06:4a:99:78:82:7e:68:04:9c:
                    0a:1b:2e:3c:e8:fe:dc:c7:4b:bb:2a:a8:3c:65:e6:
                    08:ce:2b:0d:da:97:07:85:36:4d:0d:53:d0:1c:4d:
                    ce:13:4d:e7:ec:3d:03:be:d0:66:71:6b:b4:0d:da:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:62:6B:06:B5:33:29:59:CA:4E:D0:DD:72:F5:F1:50:90:20:ED:1A
            X509v3 Authority Key Identifier:
                keyid:CA:9A:2B:E7:A2:B9:B9:A4:73:DA:BC:85:78:B4:44:A7:B2:E8:95:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypor56K5uaRz2ryFeLREp7LolS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:91:14:83:9f:ac:67:68:3e:bb:af:63:0b:47:d5:9f:39:
         0e:76:87:86:7f:4f:b6:d3:74:54:63:67:4f:49:5d:c2:5b:03:
         61:97:94:3d:bf:a7:98:16:6f:80:2a:79:dc:4e:89:be:c2:78:
         59:bf:b8:4c:d2:c5:7e:06:fd:35:9c:4b:79:93:67:c0:7e:9e:
         91:83:d6:81:84:85:99:f2:e2:53:82:56:20:07:15:5d:3c:e2:
         97:4c:5e:ce:d6:60:8a:9b:61:fa:90:29:2e:bf:db:c6:a8:d0:
         47:ff:89:3d:0f:e6:f4:eb:b9:2f:8f:dc:a0:ae:35:16:25:1b:
         9e:3f:07:11:ab:47:03:89:8b:3b:40:ba:69:82:e2:c3:b4:a8:
         7c:95:49:7b:bf:bf:55:30:d7:8c:96:39:bd:be:61:9b:e9:b1:
         e1:78:6c:3b:1f:54:3c:0c:ed:59:f0:68:57:36:c5:a2:56:ba:
         5c:95:34:9a:3c:44:c9:8f:44:ad:20:5b:32:9a:53:4b:c4:91:
         71:44:7e:05:c0:10:1a:bd:6e:1d:60:7e:a7:7f:86:6f:63:53:
         02:6a:b1:81:26:7e:56:03:3b:13:0d:e2:af:97:9f:59:4c:06:
         10:c1:20:07:fc:52:c7:d3:6f:01:df:66:78:ea:43:ab:07:91:
         ea:18:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----