Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File:                     yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier:          f9VJXNAHhSHmHX8iU0yi7oo/D2N0WHF2CEbt26oXANI=
Subject key identifier:   14:B7:F7:78:EC:C2:39:83:EC:77:A2:C1:50:41:86:19:2A:24:38:F2
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer:       /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial:       018F874B26D06E04216C84B078AC5FA7C862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number:          0200
Signing time:             Fri 17 May 2024 16:03:20 +0000
Manifest this update:     Fri 17 May 2024 16:03:20 +0000
Manifest next update:     Sat 18 May 2024 16:03:20 +0000
Files and hashes:         1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: NJtYzLO1RWiCGKZ5OXnaW+05Rbnn9JAYh3SdQHZ314Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:26:d0:6e:04:21:6c:84:b0:78:ac:5f:a7:c8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
        Validity
            Not Before: May 17 16:03:20 2024 GMT
            Not After : May 18 16:03:20 2024 GMT
        Subject: CN=14b7f778ecc23983ec77a2c1504186192a2438f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:50:cd:4a:90:58:e4:41:bc:e7:1e:4d:36:
                    51:1f:f7:00:e1:63:3f:9c:cb:b8:63:ef:5a:41:0a:
                    ac:54:42:f6:9f:35:bc:85:ed:4a:41:bc:8b:8f:0e:
                    07:fe:d6:7e:c9:21:0a:3f:80:c3:b5:49:95:4f:70:
                    ed:59:8d:21:4e:51:76:09:d2:b6:72:1f:b2:20:6d:
                    87:fc:11:4b:31:e6:1d:f2:46:5a:d3:a4:b0:17:4d:
                    66:31:94:e1:36:7a:c1:df:8f:01:65:4c:aa:4a:33:
                    bc:23:ff:12:e4:4a:6d:1d:cd:32:96:f8:3c:5e:3c:
                    d5:ff:2d:e3:57:92:50:ce:14:84:54:5f:ac:a7:21:
                    f1:d2:5c:3a:03:14:a2:3e:96:66:86:93:35:36:d9:
                    c5:83:3a:43:c5:58:31:40:f5:34:29:a6:14:63:7d:
                    b2:55:61:74:5a:74:fd:01:9d:b2:6c:5e:ac:38:1d:
                    bb:26:81:dc:0b:1e:1a:4b:85:2c:a0:2f:fe:8c:b5:
                    06:12:88:06:50:15:6c:81:c8:d2:7e:fd:78:83:21:
                    e7:41:10:8a:4c:38:52:19:a2:5b:e9:04:0d:fe:2a:
                    a3:27:38:4e:c7:e5:51:4c:9f:67:37:21:ad:2c:28:
                    4c:42:a7:21:a7:22:b3:3e:46:42:37:fc:14:47:c7:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:F7:78:EC:C2:39:83:EC:77:A2:C1:50:41:86:19:2A:24:38:F2
            X509v3 Authority Key Identifier:
                keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:06:38:2a:0b:68:b2:bc:63:1c:ac:fc:6c:75:01:de:d5:
         7d:77:f3:c4:9c:24:7f:2d:82:7e:0a:95:65:4b:d3:e8:6f:c8:
         73:b9:89:58:51:32:cf:6e:52:ac:03:00:c7:06:c6:57:81:b3:
         7a:dc:f3:41:c2:2d:2e:7e:88:59:c4:50:86:b8:fe:de:b0:78:
         49:42:77:d0:ad:6a:3e:c2:bb:c7:15:42:73:69:c6:ff:77:26:
         d6:f9:0f:b9:94:b8:80:d9:7e:bd:59:ba:b5:fc:c0:d4:50:dc:
         65:56:dc:80:8a:2a:60:be:4e:b8:70:7e:c3:2b:69:72:30:ca:
         ae:6f:da:9a:20:77:6c:d3:f8:28:f0:5b:ab:7d:12:e8:63:fc:
         04:de:24:ca:c1:aa:cb:84:b3:d7:c7:34:4a:35:31:d1:61:91:
         e5:a7:67:87:80:d2:c4:3e:f2:88:ef:ba:66:ad:5e:9f:2f:11:
         3d:2d:04:c2:a0:dc:42:62:b1:c5:59:20:cf:11:ba:6f:52:84:
         6a:6f:21:71:e7:54:4b:f4:44:72:8d:38:43:ec:37:24:8d:78:
         bb:9c:96:b4:41:17:1d:f2:7d:14:5f:b3:82:cf:7b:22:bd:19:
         a0:e0:d0:f8:f2:13:35:78:2f:f2:67:42:28:76:04:ab:21:d2:
         79:78:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:16 2024 by rpki-client on console-fra.rpki-client.org