Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File:                     y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier:          Bf43EqWz02quJrovAWCjoF+NpMj+B/EP9+XpR/tR27g=
Subject key identifier:   B5:29:CD:93:4D:FD:CD:8C:90:B5:9D:CA:46:92:79:08:37:CF:48:2A
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer:       /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial:       0191F93475AA70DE1A690A21D1D978C03EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number:          0129
Signing time:             Mon 16 Sep 2024 05:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:50 +0000
Files and hashes:         1: 7zlx5B3z2PzyXMyrmB3MqqRZBzI.roa (hash: F015V+0deN2icymMqCgGiXmvDa1AboP6wHjCC6qQIGQ=)
                          2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: ewiAwEhUB8q1mQcPbHB/nlRv1Fbq5zr0KIFP3c9zsH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:75:aa:70:de:1a:69:0a:21:d1:d9:78:c0:3e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
        Validity
            Not Before: Sep 16 05:00:50 2024 GMT
            Not After : Sep 17 05:00:50 2024 GMT
        Subject: CN=b529cd934dfdcd8c90b59dca4692790837cf482a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:cf:da:70:d2:5e:a9:8a:d6:d4:ea:af:f7:
                    99:97:17:bc:2d:2e:7c:84:61:3a:45:ad:ce:d8:ef:
                    aa:9e:d8:a5:a1:d3:7f:88:78:40:6c:6e:df:ed:8f:
                    57:f0:c2:be:9a:d1:0c:df:a7:f4:14:0d:58:a5:ea:
                    18:d0:1e:38:b8:8b:16:11:0a:1d:2c:7f:47:20:97:
                    23:22:49:11:ca:bb:76:43:62:45:fe:7b:f4:bc:c2:
                    83:a5:c0:b1:82:43:40:8f:b4:74:ea:78:8c:5a:8e:
                    53:c3:16:47:3f:0f:e4:ae:a6:97:44:62:21:88:fe:
                    91:dc:ad:7e:a0:6e:a6:78:36:75:46:33:0a:af:4a:
                    a8:78:a5:52:2f:de:b8:2f:8b:9d:a2:29:73:15:a4:
                    ed:50:01:7a:f6:04:0e:2e:be:f5:0e:52:35:91:87:
                    da:2b:c8:e4:50:df:6a:d3:be:2d:4f:0a:88:65:d9:
                    bb:20:6b:ed:67:f4:c1:45:93:60:45:be:1a:1a:e5:
                    dd:df:9c:16:0b:bf:a5:52:2a:c2:bc:c2:b2:bc:b7:
                    b9:e1:ea:b5:57:de:8c:ba:df:1a:f2:90:c7:7b:52:
                    fb:af:05:c9:c0:5c:7d:d1:94:86:42:05:8a:13:4d:
                    08:9e:c1:8e:3c:cc:bd:f5:07:61:63:49:ac:f2:e7:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:CD:93:4D:FD:CD:8C:90:B5:9D:CA:46:92:79:08:37:CF:48:2A
            X509v3 Authority Key Identifier:
                keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:50:ed:c1:23:62:f5:29:51:5c:f6:33:50:a5:8d:78:86:ec:
         89:3d:48:b1:54:38:12:a0:da:c4:5f:49:ea:e9:a3:b0:f1:de:
         42:a1:7d:91:3a:8b:9c:14:56:13:bb:c1:f1:d7:cd:04:bd:a6:
         c1:4a:e3:81:45:f8:24:67:76:dd:64:77:d1:67:88:db:14:96:
         11:77:ef:01:bb:a0:0a:d4:b8:87:e8:10:12:61:4b:67:dc:b6:
         9a:e2:ff:99:cb:58:85:46:55:bb:1b:19:56:92:7e:19:4a:f4:
         57:f9:09:c7:28:b9:61:b9:64:63:50:d4:a9:6d:cf:e6:1e:07:
         bd:fd:f3:91:c8:b3:0c:53:26:1e:49:14:18:29:b5:db:27:eb:
         59:a4:a3:70:f4:8a:30:d4:e2:1d:ff:6d:d1:0f:ec:30:5f:61:
         91:f1:6c:38:fa:91:ab:40:57:21:0b:2f:25:43:fc:f9:87:92:
         7f:6b:9e:94:ef:6d:0c:ef:09:b7:3f:03:2b:81:aa:70:f7:b1:
         02:8f:31:93:02:7e:88:6a:5a:bf:d5:59:2a:38:9f:46:dc:7f:
         32:ec:0e:2c:6d:24:30:ff:00:42:92:0e:28:3c:59:6e:86:ab:
         73:09:85:f1:a3:2d:59:7d:65:ca:4b:86:34:b9:61:7c:57:63:
         cb:d7:39:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:17:32 2024 by rpki-client on console-fra.rpki-client.org