Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
File:                     ydpiiCTNWbFCcrQFiolkLktHvdw.mft (raw, json)
Hash identifier:          4ydVxFd4S8MF2tEpXZ8glTDZqQKYHZRqFi7aXiVUZMo=
Subject key identifier:   2D:D4:59:24:58:AE:52:CB:66:08:EF:58:58:17:A2:2E:7B:A0:1A:A9
Authority key identifier: C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
Certificate issuer:       /CN=c9da628824cd59b14272b4058a89642e4b47bddc
Certificate serial:       018F8936DF49DFF83145024D7EFECCE5EA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 01:00:25 +0000
Manifest this update:     Sat 18 May 2024 01:00:25 +0000
Manifest next update:     Sun 19 May 2024 01:00:25 +0000
Files and hashes:         1: KDxunpW-4iZeTy4vMHtcdCcpnws.roa (hash: nDu7xvio4HE0grvSRmg1fU4iIQ8ThdrfaQA+5CZ2uyM=)
                          2: ydpiiCTNWbFCcrQFiolkLktHvdw.crl (hash: uZ2untGe8KxOFOosj4J8zAC0IvcBdiE7iuRgiRJ7xrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:df:49:df:f8:31:45:02:4d:7e:fe:cc:e5:ea:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9da628824cd59b14272b4058a89642e4b47bddc
        Validity
            Not Before: May 18 01:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=2dd4592458ae52cb6608ef585817a22e7ba01aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:d0:d6:c3:88:0e:98:c4:86:d2:6b:09:ca:
                    51:5a:a0:de:f8:bd:e9:de:ce:c0:b2:59:51:0c:47:
                    7a:54:ed:c4:18:1b:30:43:42:9e:19:75:93:fe:d2:
                    fe:6b:b3:62:2e:cb:40:ca:2b:a1:8e:c2:48:bb:06:
                    9d:ff:5a:e6:06:b7:61:89:bb:51:c8:43:12:17:91:
                    15:90:d0:ce:e5:e5:05:48:d9:e7:18:1d:26:71:bc:
                    11:2d:88:af:bf:4f:aa:01:02:ef:e4:45:91:e0:b0:
                    dd:17:67:e0:85:48:84:8b:a0:b3:03:bd:a4:42:56:
                    cf:c3:cb:5c:61:e0:26:0b:09:58:b5:e9:37:9a:d9:
                    06:17:ef:d9:bd:b2:4d:0b:bd:6b:dc:a4:61:63:41:
                    62:2c:4c:28:0c:d8:f8:e2:76:ef:de:45:43:67:56:
                    17:8b:b8:b3:a3:81:21:22:cc:fd:ca:0a:95:f5:92:
                    0d:59:96:17:ff:79:50:9d:76:ce:8c:95:d1:17:5c:
                    ac:14:9b:2a:89:1e:2c:97:bd:3f:cd:9a:f0:51:21:
                    00:47:dc:0f:62:7f:5d:c5:3b:83:29:c4:f3:c2:8e:
                    38:b3:77:a1:e7:f2:13:2f:ed:2a:25:bc:62:39:48:
                    ca:cb:12:7c:1b:bd:5c:58:0a:f7:32:c9:98:39:1b:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D4:59:24:58:AE:52:CB:66:08:EF:58:58:17:A2:2E:7B:A0:1A:A9
            X509v3 Authority Key Identifier:
                keyid:C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:50:c2:b1:fa:ba:b3:3e:93:24:cf:57:f0:35:86:9e:95:
         28:05:be:b9:b0:59:81:9f:07:7a:b6:32:bd:1c:87:ab:49:c4:
         b8:48:8c:f8:86:05:53:49:85:ec:40:e0:b2:0f:5d:9e:f4:2f:
         f1:e0:f5:b1:12:22:15:7c:a8:02:5e:dd:e0:96:9d:46:47:e2:
         6c:3c:5d:56:de:e8:53:52:58:65:82:dd:ff:0f:2e:45:53:d0:
         fc:1f:1c:11:61:f8:c0:01:b3:61:ec:e1:78:7b:e7:55:69:ff:
         64:ea:34:74:e1:8f:20:8d:d6:99:cd:2f:78:35:73:2d:9e:3d:
         09:d8:76:a2:8e:9f:53:74:a6:86:4a:2e:d7:30:d6:9c:30:bd:
         3d:6f:a9:a1:14:7d:57:17:2d:a8:27:b6:b8:ad:48:6f:4b:06:
         9c:c1:02:26:32:37:4a:10:a6:65:38:a2:99:4d:31:83:55:cb:
         b3:02:aa:1e:d6:12:91:3d:8f:0a:bb:ec:20:a5:63:c8:69:04:
         39:72:01:48:37:ae:6a:a8:02:73:7f:b5:3c:f1:f4:2b:c2:0c:
         75:e1:7d:95:dc:93:80:17:14:14:48:91:91:92:99:2d:b7:60:
         ef:4a:45:fd:7e:99:55:f4:68:81:09:4f:0f:1a:3d:1c:93:0d:
         c7:5a:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:12:01 2024 by rpki-client on console-fra.rpki-client.org