Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File:                     YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier:          ND/qyO1fPiHd4d8F6lGZRHkMBxfOYL3+eCN6W12iLSo=
Subject key identifier:   17:2D:3E:9E:23:0B:64:A7:7D:89:A1:3F:03:EA:21:E5:C8:7E:A9:F5
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer:       /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial:       019369DA077FFE1E541CD3C438C100FAE8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number:          0B51
Signing time:             Tue 26 Nov 2024 19:01:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:56 +0000
Files and hashes:         1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: f0M3tR174JXGvqGZzh+B9rwYm5AZ0VM3J46Yp13tfL0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:07:7f:fe:1e:54:1c:d3:c4:38:c1:00:fa:e8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
        Validity
            Not Before: Nov 26 19:01:56 2024 GMT
            Not After : Nov 27 19:01:56 2024 GMT
        Subject: CN=172d3e9e230b64a77d89a13f03ea21e5c87ea9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:6d:43:83:07:bd:4a:7e:8e:05:05:50:c2:
                    3d:7c:6e:b9:d1:cd:27:be:6a:17:50:8d:bd:25:43:
                    98:11:bf:e7:ce:13:5f:a3:89:fd:74:f9:10:67:fa:
                    4d:3a:90:b4:86:54:da:a0:b7:aa:50:99:65:0d:5a:
                    78:3c:b9:84:82:e4:a0:bc:b4:9a:b2:00:9d:01:bb:
                    d4:87:cb:cc:eb:66:38:33:8a:1a:26:12:21:da:61:
                    ce:35:cb:aa:3b:88:c6:25:b6:9d:31:50:3f:dd:a0:
                    3d:d7:63:d6:33:17:a7:06:1f:e5:f5:98:e0:05:1c:
                    82:72:33:66:f4:1d:4c:13:d9:5c:e4:a2:65:58:77:
                    29:1b:d7:2e:50:a3:34:8d:98:3a:5d:a1:75:68:c1:
                    25:0b:83:a5:0a:72:8b:1f:d0:95:c2:0a:83:90:32:
                    c5:85:85:52:1b:ec:36:c1:01:aa:aa:fa:73:dc:60:
                    37:bc:37:db:36:6a:23:b1:ec:5e:3a:85:78:3f:06:
                    9c:80:79:96:66:1e:f1:3a:1a:7b:c4:59:e2:4a:22:
                    5c:f4:59:1c:7b:a3:a8:cc:e0:4b:97:71:c7:2a:d1:
                    19:30:a5:d6:85:be:fe:8f:8a:4d:d2:3d:01:8a:6b:
                    ea:0a:01:5b:2a:d7:b5:3b:88:3d:7e:f2:94:b5:54:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2D:3E:9E:23:0B:64:A7:7D:89:A1:3F:03:EA:21:E5:C8:7E:A9:F5
            X509v3 Authority Key Identifier:
                keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:97:69:36:ce:e0:c9:62:dc:57:1c:14:19:47:61:b3:da:db:
         45:34:67:3a:02:35:7e:ae:e2:18:34:84:b6:70:4b:5c:a4:4b:
         3a:5e:63:55:20:4b:40:2b:53:fd:d8:6a:23:38:42:d5:01:61:
         9e:d3:90:e8:54:34:2a:43:b3:1d:c8:5d:ae:98:9c:e2:3f:30:
         52:33:b8:cb:8f:fa:2c:dc:e8:c4:73:fe:c2:c9:40:1c:82:66:
         63:65:9f:e5:d6:c2:8f:b8:32:6d:74:17:81:e5:ca:1c:0c:7f:
         fc:d9:e0:54:97:e0:d6:0c:2e:08:27:a6:b3:de:4e:e4:d0:a5:
         73:38:48:a2:48:d1:c2:a6:b7:75:05:b5:f3:48:2c:30:2c:08:
         2a:ef:2d:8e:07:3e:1c:62:82:aa:1f:4b:c7:c5:ab:10:12:50:
         d4:67:78:d1:29:31:ff:fc:a1:a8:2b:18:ee:94:80:5d:f4:bf:
         08:01:d7:c6:b9:4a:f1:29:fe:a6:62:49:c7:c8:ba:f8:47:d8:
         58:e8:62:52:7d:c0:23:70:ea:51:3e:84:9e:43:7c:b5:9f:d6:
         5f:dd:8b:7c:bf:d0:90:e2:5d:30:9a:81:f3:d2:ab:3a:53:1c:
         1d:24:67:27:37:ff:2c:10:82:2a:77:0a:8f:87:c1:fa:43:75:
         8b:20:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:16 2024 by rpki-client on console-fra.rpki-client.org