Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          M7tuW7HyDopobk4/gNStRQz2wSQSgqd6u0HK67S8Dmg=
Subject key identifier:   99:15:89:37:F0:02:55:4E:F8:C3:B5:25:50:DB:BA:AC:41:34:BD:AF
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       018F8749DD1B6BBD7AF31DE85A642FF57F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 16:01:55 +0000
Manifest this update:     Fri 17 May 2024 16:01:55 +0000
Manifest next update:     Sat 18 May 2024 16:01:55 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: bkUWL5hBpqc+72G5vbQoY2aCuZsr/HfiQsBn7BdhOGk=)
                          2: kIZ1erz5p986ylf7cgLD7mxk1ZU.roa (hash: ZOerUl6U/1FgP65l2m3g5y2rTsFJdQFxsu1SepDoYFM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:dd:1b:6b:bd:7a:f3:1d:e8:5a:64:2f:f5:7f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: May 17 16:01:55 2024 GMT
            Not After : May 18 16:01:55 2024 GMT
        Subject: CN=99158937f002554ef8c3b52550dbbaac4134bdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:b2:13:40:09:d3:7a:98:b9:41:3e:0c:f3:
                    c9:47:ac:15:7b:51:61:c3:53:05:b7:e6:56:04:db:
                    b8:a1:58:e9:16:7d:41:63:dd:c7:04:3e:29:48:b0:
                    4d:8c:44:93:a8:f5:5c:6e:e6:88:c1:92:2f:a3:4e:
                    79:25:0f:52:ea:7b:69:69:70:74:58:4d:93:3f:3a:
                    aa:35:07:10:da:c6:ea:8b:57:fa:81:9e:56:60:2c:
                    07:d2:a2:e6:95:d9:df:c2:f9:e6:91:d3:21:29:66:
                    f9:80:87:28:f0:fb:83:e2:f4:c5:b4:df:e1:1f:d2:
                    8b:88:a9:b5:09:66:8e:49:fa:2f:f8:28:1d:d6:3e:
                    bb:d0:72:0c:88:11:74:24:a6:ad:b1:15:ac:18:cc:
                    8a:04:3f:ce:b0:0f:af:d4:79:49:39:51:93:c8:ea:
                    a1:ba:44:76:1f:35:a6:de:3e:e1:f1:5d:20:3f:bf:
                    b4:3c:c2:2d:a4:b3:d6:2b:c9:2c:c6:4a:7b:46:b2:
                    dc:fd:82:56:5f:52:f7:9b:96:6a:15:79:c5:81:07:
                    76:b8:55:73:15:ce:5f:65:89:a0:fe:7f:bb:52:9a:
                    d2:70:e5:01:0d:77:7e:da:ed:f9:2c:72:93:a1:2d:
                    ee:e1:d1:2d:16:04:a0:a9:f6:f1:71:bd:05:50:57:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:15:89:37:F0:02:55:4E:F8:C3:B5:25:50:DB:BA:AC:41:34:BD:AF
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b7:98:7e:89:c7:82:93:7a:2d:3d:72:6c:c8:25:e8:08:95:
         19:6a:13:3f:ee:08:82:c2:b9:08:8d:12:35:4d:e9:2a:7c:2f:
         68:61:46:b4:01:ef:d4:09:d3:fa:39:81:37:2f:05:68:f6:51:
         bc:1c:ef:0c:d0:f8:ee:d1:79:a0:e0:d1:bf:19:4c:08:de:56:
         32:ff:fd:b3:3d:2c:f8:09:db:bc:6d:c0:77:4b:c8:55:0b:61:
         30:93:9a:4d:c0:e5:9b:87:92:c0:99:e6:2b:15:83:fa:91:2b:
         b4:72:42:43:b7:9f:75:08:66:be:fe:77:be:5f:d5:7f:f5:3d:
         b3:02:aa:60:d2:70:fe:3a:25:11:8a:d3:bd:d4:1d:14:8b:a5:
         4e:81:8d:4b:00:a0:d9:50:68:d9:73:db:d0:ef:1b:ea:47:f2:
         5c:44:8f:8b:80:eb:b3:30:91:e1:ae:66:fa:3e:5f:43:79:42:
         91:35:4d:c3:08:8a:25:ac:05:0b:32:4e:56:c6:dd:60:6d:c3:
         7a:8d:dd:db:52:cc:df:84:82:f6:00:7c:18:64:0d:50:37:a0:
         0f:14:a9:1b:f8:c3:4b:75:69:ec:a0:7b:70:c7:89:d4:06:16:
         77:4f:bf:4b:fb:57:48:4e:61:f3:bf:bf:10:ba:36:3a:7d:e3:
         14:bc:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:40 2024 by rpki-client on console-fra.rpki-client.org