Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
File:                     ylF4miMTWsImjCKihWAKX5sFN3A.mft (raw, json)
Hash identifier:          EKRkmmtYpnHIk2+Fe3mC9E83ROg2Vi2DC3Th2lcgv1s=
Subject key identifier:   AF:29:89:37:30:22:A6:CE:4B:B6:02:D0:38:5F:04:6C:86:9A:E8:CF
Authority key identifier: CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70
Certificate issuer:       /CN=ca51789a23135ac2268c22a285600a5f9b053770
Certificate serial:       018F87B6AAF776D4CDB74B30F464EA72FB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
Manifest number:          0CDF
Signing time:             Fri 17 May 2024 18:00:46 +0000
Manifest this update:     Fri 17 May 2024 18:00:46 +0000
Manifest next update:     Sat 18 May 2024 18:00:46 +0000
Files and hashes:         1: ktcGU-uD7bDJqjQs81ERtI__Vws.roa (hash: Qyb8FHZiI7+ZqS2CR0eGqA5wFTAQYXv/1SmptFlFdSY=)
                          2: ylF4miMTWsImjCKihWAKX5sFN3A.crl (hash: p+20aaup+ymOGhZA0Qc/tfp0YZrQ12zKW2oEAP1uPeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:aa:f7:76:d4:cd:b7:4b:30:f4:64:ea:72:fb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca51789a23135ac2268c22a285600a5f9b053770
        Validity
            Not Before: May 17 18:00:46 2024 GMT
            Not After : May 18 18:00:46 2024 GMT
        Subject: CN=af2989373022a6ce4bb602d0385f046c869ae8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:a1:4e:89:dd:17:2d:d7:83:3f:03:5f:cf:
                    a1:53:a1:ef:5f:99:fc:7c:f1:9a:73:ae:57:74:9c:
                    cf:16:9c:34:2e:ab:bc:85:af:52:33:40:bb:5c:af:
                    c4:dc:b6:9b:ad:ef:a3:28:33:86:31:91:6c:d5:42:
                    80:22:b7:98:f6:4d:a3:7e:d0:16:f8:7c:f9:df:50:
                    2a:49:01:b9:59:35:fd:d1:17:94:c9:b3:62:d5:e1:
                    7f:7f:da:bc:3f:5a:82:ff:34:73:42:9d:0e:06:8c:
                    87:70:20:91:1c:1f:bb:b9:59:be:35:d9:5e:c5:0a:
                    9f:77:75:04:70:6c:09:78:46:c4:2f:bc:44:e7:cf:
                    01:4a:49:b1:9b:16:84:8f:27:27:5d:d0:2b:35:f5:
                    7a:f1:bf:85:36:c3:ec:d5:57:43:2c:9a:c3:11:7c:
                    01:01:ed:a6:b5:e8:17:2a:0c:a0:db:a3:44:39:52:
                    43:03:6f:50:cf:37:3e:31:df:69:63:2e:fd:f1:cd:
                    64:98:e8:38:b5:6f:8b:d4:df:de:5a:aa:21:4c:2d:
                    52:51:15:72:37:72:6b:03:1d:00:74:48:62:ba:f3:
                    78:e1:c8:89:78:91:61:47:75:2f:7c:2a:a0:e5:b9:
                    97:bc:3d:f6:f6:13:8b:12:c2:7a:06:8f:c2:7b:88:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:89:37:30:22:A6:CE:4B:B6:02:D0:38:5F:04:6C:86:9A:E8:CF
            X509v3 Authority Key Identifier:
                keyid:CA:51:78:9A:23:13:5A:C2:26:8C:22:A2:85:60:0A:5F:9B:05:37:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylF4miMTWsImjCKihWAKX5sFN3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b4bf60-d593-40d2-9783-1e19168f5d73/1/ylF4miMTWsImjCKihWAKX5sFN3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:61:b0:a3:be:5e:fe:00:b6:78:05:48:06:e5:bb:ac:5e:df:
         9d:80:bb:c2:ad:be:d4:48:fc:14:17:3b:35:d2:ae:83:ab:97:
         c2:0d:e2:15:de:fa:58:9f:6b:97:f5:fc:a7:ba:af:06:82:3b:
         03:69:ca:9b:b4:d5:3f:05:41:f7:67:23:ea:ad:ad:5e:a3:63:
         b2:5a:b2:b5:70:a7:9c:ff:39:44:c4:bb:90:43:cd:08:cc:5c:
         bb:94:08:57:90:c1:85:b4:66:51:9b:9c:7a:ed:74:1a:37:9c:
         2a:e8:5c:17:9d:60:cb:27:56:ce:c0:85:94:7b:bf:e8:4b:e9:
         ff:5b:03:5f:bc:41:94:9e:70:76:e2:be:e9:2d:52:2e:f7:53:
         4d:76:a6:50:2c:13:e4:97:2c:b0:39:5b:c7:2d:69:63:6b:12:
         de:e5:b7:d0:aa:4e:e7:95:87:97:f8:db:32:9c:99:5d:52:fe:
         82:79:43:57:07:31:16:7f:f6:66:cf:61:40:b3:7b:b7:56:13:
         d5:57:de:c5:3e:22:fe:71:67:fc:78:07:b4:a6:ee:73:02:ff:
         0e:2e:3e:c6:6f:f8:2f:31:fc:88:2a:b2:6a:3f:b0:16:fd:17:
         5c:06:37:2f:05:bd:2f:d6:dc:4e:68:9e:a5:c1:50:d7:cb:6c:
         11:f4:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:57 2024 by rpki-client on console-fra.rpki-client.org