Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          +7r4HZ2XM3hnAEyqe4NjvKXX/D9PTaSZjlpDqGoOjDI=
Subject key identifier:   56:38:E5:78:C6:D5:A2:AB:0A:C8:44:98:BC:E4:77:FA:0E:2C:C8:17
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       019355E3FA36A445C7F2367AC8E22BD085A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          114E
Signing time:             Fri 22 Nov 2024 22:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:24 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: XXv8Ui/DpkaiJp1GGpQnKPnN+sTqW62sYckVjDMUQ30=)
                          2: 1Un5Y9B6R1tllkhPGf_74uapJ_E.roa (hash: jqC1vIyNT6AQo5HxqzcRnAqvbtYhzALDkfjLIYl487s=)
                          3: Dv6TT6fRCEtjqw_UsdWsDuQwMUc.roa (hash: 2i25g5MN3L5J0wumA9SIX+eJJSGUmUO5Dr9UVaz831U=)
                          4: VlKpw1uHHpi35cS1sbJvjp3ldFg.roa (hash: 9M5kjYavFhVrRI85RDZ2MH5o/jzd+dB1d0G3JCS/gYQ=)
                          5: aTFTqCliaOCE6H5BzxBuotVVudA.roa (hash: 7eQHXoW6FWTyfkFBHBKyy4q9U7ervVzftEDYlYriHAg=)
                          6: pNWR7iaU3EKbNN_i2wnFzLClQBI.roa (hash: /4U5hkDOHDCDwnmQjQ53g1D2qPUc0/tQ7a2vcc6DUn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:fa:36:a4:45:c7:f2:36:7a:c8:e2:2b:d0:85:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Nov 22 22:00:24 2024 GMT
            Not After : Nov 23 22:00:24 2024 GMT
        Subject: CN=5638e578c6d5a2ab0ac84498bce477fa0e2cc817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:67:f3:28:9e:b7:62:b0:2d:03:4c:eb:b2:
                    07:ec:3e:a3:54:f5:8e:8c:aa:ba:a2:92:94:31:63:
                    67:fc:69:eb:f3:56:2d:30:9b:d5:5b:ad:93:dc:94:
                    71:e8:28:6a:9e:e0:59:3c:44:2b:00:b8:ce:a7:88:
                    8d:01:41:5e:88:ed:6d:d2:89:eb:d0:b4:81:c7:3a:
                    56:02:c5:bc:1d:e9:03:a4:87:cb:f5:83:90:4a:c0:
                    48:94:e2:1f:b3:73:59:95:0c:4d:11:ef:63:8a:74:
                    26:5d:d2:17:6e:d7:2a:26:9c:55:c0:b6:23:0a:05:
                    95:b1:92:08:3d:a6:dd:96:69:f4:89:d4:5e:2b:18:
                    c6:a2:5c:44:0b:92:b8:6e:13:02:32:2e:33:84:e2:
                    97:a1:b9:0e:07:39:a4:95:7f:97:e8:01:76:10:1d:
                    0d:50:0e:aa:69:84:fb:2c:34:60:1e:00:70:06:d0:
                    4a:e2:8b:f8:e7:7e:91:04:71:6e:91:70:6b:56:c2:
                    3d:a6:cc:e4:f0:c6:99:1b:e9:ad:82:ec:da:97:9a:
                    42:84:a2:55:d5:90:75:3c:34:d6:7a:74:26:d1:44:
                    bc:da:5d:84:d1:f8:04:4a:68:09:7f:75:32:4d:4b:
                    22:69:35:c2:48:1f:96:44:3b:97:f9:85:bb:4f:1a:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:E5:78:C6:D5:A2:AB:0A:C8:44:98:BC:E4:77:FA:0E:2C:C8:17
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f4:2c:f2:26:ef:c1:f9:e3:5f:05:62:09:18:89:03:de:e9:
         9d:2d:97:23:bb:c2:35:8b:11:f4:92:d5:5f:7e:28:29:96:80:
         c8:ca:6d:6d:47:b8:d1:77:40:d9:69:d9:0a:c0:39:98:11:5e:
         96:b8:e6:ad:e7:4b:c3:15:7f:59:6a:5c:0a:2e:ed:c2:32:28:
         5c:33:f5:94:9f:30:55:32:7d:0d:20:e2:db:4b:06:fb:08:91:
         15:37:76:f1:a4:45:d8:c8:20:37:5d:ba:73:9d:a0:79:e4:a9:
         b0:1d:92:44:43:aa:49:cd:2f:5c:08:40:9c:cf:c5:a3:f1:0d:
         d9:ef:75:99:4c:64:e1:8d:54:12:63:89:03:b2:d0:0f:fe:af:
         dd:4e:6d:cb:28:88:2d:7f:9e:0a:11:11:db:c1:e9:5b:20:6b:
         d9:0d:8b:05:d3:c7:84:ab:dd:c5:c3:f8:8b:09:4d:0d:14:af:
         ef:7c:a5:15:2f:da:45:85:e3:fb:af:0f:4d:9a:4d:90:39:16:
         ac:8f:c5:9e:7f:e9:a7:b4:88:36:5f:6d:ea:44:e0:6d:d3:5b:
         27:6b:6f:a0:78:1f:6b:ee:e9:81:38:7b:b5:2d:31:22:67:e4:
         64:9a:89:38:07:f1:a2:d8:eb:b4:3d:d0:aa:31:cb:b9:1a:42:
         e1:d4:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:48 2024 by rpki-client on console-ams.rpki-client.org