Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File:                     yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier:          165y023TNbXxh1hQjqlZDa1sJwDUCm/kpb2HgYZzJc0=
Subject key identifier:   7B:46:21:E1:C8:91:FE:49:A0:64:6A:1D:04:D5:33:6E:FF:01:8D:E2
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer:       /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial:       019050C612840C5B1D6A1AAD239C6A9D85DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number:          07D9
Signing time:             Tue 25 Jun 2024 19:01:16 +0000
Manifest this update:     Tue 25 Jun 2024 19:01:16 +0000
Manifest next update:     Wed 26 Jun 2024 19:01:16 +0000
Files and hashes:         1: 3h24TRVyHi2zdoD0oWknvVXjtv0.roa (hash: VQkILqYnRxzkLHNHiQAHFT5hdyIfaQtSNb52okrwMa0=)
                          2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: ATFkf6zCs5Iv1OCv7cWjjZZxyIahzY0BPNBC2SLqhfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:c6:12:84:0c:5b:1d:6a:1a:ad:23:9c:6a:9d:85:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
        Validity
            Not Before: Jun 25 19:01:16 2024 GMT
            Not After : Jun 26 19:01:16 2024 GMT
        Subject: CN=7b4621e1c891fe49a0646a1d04d5336eff018de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:81:d6:c7:11:ea:9d:5c:e5:9d:23:3a:7f:
                    ed:3f:60:7e:31:17:f3:df:f9:56:95:52:5f:d0:35:
                    d3:2f:48:22:5e:60:94:1a:b7:b8:d0:ba:b4:79:df:
                    7b:1e:f2:40:19:37:89:71:7c:2f:34:8c:8e:0e:f2:
                    f3:49:a6:bc:cb:f3:fb:3a:0c:de:37:0a:9f:0e:3f:
                    fc:43:4e:99:af:3f:c2:31:99:01:6a:48:c2:36:17:
                    d2:16:f3:46:7b:4c:12:83:45:62:f4:0d:c9:aa:1b:
                    19:fa:bd:88:d5:5c:91:ec:c4:96:72:3a:ae:26:de:
                    ec:46:24:0f:0e:07:18:d4:8a:6e:d8:98:50:45:0a:
                    59:b4:cf:4d:29:dc:e8:58:22:f8:8d:a2:4d:7d:64:
                    5e:ad:e1:04:99:a0:5a:9c:ea:f1:53:a4:d7:0a:88:
                    da:3e:fb:c8:54:1e:34:56:d3:b6:54:70:d1:c0:33:
                    9d:5a:48:82:23:ef:c5:be:c1:8a:af:a2:f6:7a:53:
                    97:99:64:dd:04:38:da:44:da:9b:69:64:d4:7c:64:
                    1a:4c:ef:bd:c0:56:09:26:e7:94:30:df:2e:6d:dc:
                    11:7b:25:f5:b9:1e:d6:ae:da:8a:9e:99:b6:5f:45:
                    5a:f8:b9:a6:1e:ac:dc:4d:c6:9e:4d:e6:2e:b5:6f:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:46:21:E1:C8:91:FE:49:A0:64:6A:1D:04:D5:33:6E:FF:01:8D:E2
            X509v3 Authority Key Identifier:
                keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:98:79:f1:5d:d6:51:6d:9f:d4:00:e1:66:96:47:c7:ec:
         4a:c1:c9:28:18:ee:a1:0d:83:1c:3e:74:1b:6c:b6:6f:cc:8b:
         53:39:46:8e:a4:ff:13:65:9a:a2:a5:8e:87:76:70:a8:d9:98:
         33:ed:e7:ba:43:c5:9f:41:d7:8a:9b:ab:f7:5c:dd:92:aa:0a:
         9d:00:83:18:e8:47:08:ba:a6:47:ed:9d:f6:f0:e8:e0:f2:d4:
         17:e3:4f:a8:8c:97:a2:53:07:e9:21:71:6c:98:f3:23:04:96:
         4a:4a:72:62:a3:04:a6:04:5f:d5:73:c5:1d:94:bf:6c:af:9a:
         1b:50:f8:a1:06:84:26:08:ff:ab:84:e4:35:43:8e:7b:e4:74:
         a1:d9:41:6f:51:44:31:fd:97:80:68:0b:0e:b7:54:6a:50:bc:
         03:df:04:f8:48:0a:22:23:97:9e:1e:b5:7a:a3:45:31:07:3e:
         0a:3c:63:b6:e8:d7:70:89:ae:bc:99:1d:0e:22:71:e1:6e:01:
         eb:91:74:7b:ba:23:a4:3b:9b:ba:85:91:e3:d6:2b:80:56:31:
         ba:b3:90:ed:ea:6d:8d:ca:83:46:a4:16:d3:fc:47:22:db:36:
         c3:4a:45:55:79:b8:42:9d:b9:41:57:02:6a:73:e2:6a:78:9a:
         22:a4:14:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:08:25 2024 by rpki-client on console-ams.rpki-client.org