Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File:                     yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier:          mMwT3tpKVpS3jt19el+X+4/9/SfeLrqtlFMX3epU+kk=
Subject key identifier:   D8:08:A9:47:F4:E4:D5:E6:05:CE:FB:FE:D7:C4:18:9A:7E:E0:2E:2F
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer:       /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial:       018F87ED8844B2E2F782678D70952CB9055A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number:          0858
Signing time:             Fri 17 May 2024 19:00:41 +0000
Manifest this update:     Fri 17 May 2024 19:00:41 +0000
Manifest next update:     Sat 18 May 2024 19:00:41 +0000
Files and hashes:         1: UcjiqaFA-85q_TR5Sy5iUAdnl5U.roa (hash: 5mxlGYHXnvRJEZ50nLcOyArBqad6hnjK5HUhM2RT/OM=)
                          2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: tmorXXqxD5S499QdV4i7aFxr0LdzLS83/4f2C9eGN3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:88:44:b2:e2:f7:82:67:8d:70:95:2c:b9:05:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
        Validity
            Not Before: May 17 19:00:41 2024 GMT
            Not After : May 18 19:00:41 2024 GMT
        Subject: CN=d808a947f4e4d5e605cefbfed7c4189a7ee02e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:ac:38:c4:f3:5b:77:f9:b5:d1:de:46:00:
                    92:28:34:b9:3e:65:d4:9f:1f:74:d1:a0:3c:9c:69:
                    0c:8d:cc:a2:2c:65:80:c2:2e:e0:df:40:2b:f9:d8:
                    95:df:7e:84:b5:9c:cb:7c:16:b8:1c:29:80:7b:9a:
                    a4:41:de:f3:29:59:ee:a6:15:59:1c:eb:15:36:e6:
                    3f:30:e4:30:60:61:f5:31:36:a8:0e:31:a9:7b:bf:
                    2b:ff:0e:4b:f2:d3:29:4c:6a:e5:3b:80:43:58:dd:
                    0c:f1:06:f6:00:b5:b0:ad:ec:81:4d:b9:62:8b:c0:
                    89:27:16:c6:f6:da:32:05:13:9f:8c:2b:50:64:7b:
                    d7:f9:43:aa:9e:e1:5c:52:bf:55:79:35:c2:e3:4a:
                    7c:ce:0f:21:88:ea:e0:dc:10:64:9d:c7:5a:25:e4:
                    30:80:91:fe:79:70:3a:b2:93:8e:3a:f3:c7:0a:9f:
                    a5:d9:dd:71:d7:7b:c1:a5:7c:80:6f:4f:ac:a9:9d:
                    b5:55:eb:e8:d8:63:f4:a0:5c:6b:5d:80:a9:74:18:
                    4d:73:ab:17:75:05:34:3e:8f:a5:49:56:77:79:96:
                    19:30:ce:2e:72:68:e5:06:ff:11:3a:80:31:8a:d3:
                    79:18:3c:a0:f5:4e:fb:49:59:a3:33:1d:2c:7d:67:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:A9:47:F4:E4:D5:E6:05:CE:FB:FE:D7:C4:18:9A:7E:E0:2E:2F
            X509v3 Authority Key Identifier:
                keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9e:19:78:03:ed:67:83:99:82:00:90:aa:a6:91:90:36:f1:
         d5:ea:92:f7:3f:2a:74:54:ae:b6:9b:a3:06:80:a9:14:b5:91:
         77:f7:17:82:43:ce:d4:fb:7c:24:48:1d:a6:3a:69:8a:7e:da:
         8c:db:6e:0c:d9:18:bc:56:a3:1b:25:e8:0f:01:f2:0b:d1:cb:
         a7:f9:5d:59:d3:cb:a4:11:cb:d7:ac:e7:8d:50:23:52:9a:12:
         c5:11:ae:b5:69:37:c6:a9:1d:5a:fe:cc:39:8b:36:36:37:1e:
         e0:d3:a6:60:79:9a:c8:3a:ed:b4:f1:73:08:82:37:d8:a2:e9:
         89:53:e3:9f:6c:82:f3:2d:d5:54:ce:cd:cb:d9:7d:dd:a2:9d:
         b4:c8:d8:0a:87:d9:21:f7:2b:51:80:f7:02:41:38:5c:4c:0b:
         ec:ab:06:e0:54:f8:c5:1c:73:42:72:7e:55:96:3d:c3:b4:b7:
         0f:d5:b0:df:82:ed:f8:5a:47:03:df:4c:a4:6e:6f:36:30:72:
         90:2c:29:e8:85:6c:58:05:1f:07:50:ad:64:3f:61:d9:79:73:
         fd:05:d8:91:83:f0:7a:c5:23:3e:8a:e3:48:c3:95:6d:a9:71:
         a4:c2:22:57:5f:1b:f1:57:b5:66:51:a3:c7:4d:62:ea:65:3c:
         f2:14:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:27 2024 by rpki-client on console-ams.rpki-client.org