Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
File:                     YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft (raw, json)
Hash identifier:          ZSgFhRLzYwv5eHCVSv4hBooOh5yRAuTqYicJxh9dHvk=
Subject key identifier:   BA:5E:6E:2F:2C:D9:1F:2E:13:72:65:F6:E9:59:F7:48:35:FC:28:84
Authority key identifier: 60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
Certificate issuer:       /CN=60b28e2723955a3f63e47b3230317eae9292ff32
Certificate serial:       01906C7366C836D5BD93BC66DBE8DA40C2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
Manifest number:          0EBF
Signing time:             Mon 01 Jul 2024 04:00:20 +0000
Manifest this update:     Mon 01 Jul 2024 04:00:20 +0000
Manifest next update:     Tue 02 Jul 2024 04:00:20 +0000
Files and hashes:         1: PWX1NMU8D_mWIdO37AiQe9opRNM.roa (hash: VGLQZIRcgsBtPfO3MfVbEjwCE8KqJjfczjr96PmM5cI=)
                          2: YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl (hash: 0KC6Vj0M79XJQRGrhCe6vHTA731jiOSk/Bh2Px/edaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:73:66:c8:36:d5:bd:93:bc:66:db:e8:da:40:c2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b28e2723955a3f63e47b3230317eae9292ff32
        Validity
            Not Before: Jul  1 04:00:20 2024 GMT
            Not After : Jul  2 04:00:20 2024 GMT
        Subject: CN=ba5e6e2f2cd91f2e137265f6e959f74835fc2884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:e0:92:70:1a:71:3a:5d:e7:94:02:6b:ef:
                    70:36:fd:b8:a9:6c:dc:08:38:3c:c4:48:34:06:04:
                    09:fe:c2:51:fc:40:46:a8:5c:db:0d:c7:86:e0:96:
                    f4:f2:a9:ce:f7:11:27:ad:75:b2:c0:87:8a:1e:e7:
                    c5:2e:39:aa:5b:0f:4e:b9:b8:41:4f:ba:ba:5e:2b:
                    b1:d5:f1:58:d2:6f:f1:d0:88:83:48:e0:23:d8:6a:
                    67:c7:ca:7d:26:63:01:be:3c:da:f8:14:32:8c:4a:
                    0c:ae:8d:18:98:7f:56:fb:22:dc:a9:12:a6:f4:e2:
                    54:e2:02:39:b9:a2:09:ee:d9:66:04:ba:8d:27:52:
                    7f:38:5c:d5:6f:95:5e:a8:2b:24:e4:71:5d:07:49:
                    c5:85:dd:e9:5f:22:6f:37:64:f5:8d:13:e6:43:6f:
                    c6:d9:6a:a1:aa:7a:ff:99:a4:4e:d6:f0:09:50:45:
                    bd:14:fa:26:7c:2d:86:f1:24:24:c4:92:d7:5d:fd:
                    08:8b:2a:65:22:55:ae:fd:9c:f5:13:98:55:35:9c:
                    4f:56:71:bb:b3:54:67:56:9e:ab:0b:32:3c:0f:57:
                    a1:71:dc:fa:2f:0b:8d:f8:dd:20:e9:ae:68:1d:e8:
                    b3:3f:d1:ec:d2:b7:a5:d8:9b:34:95:da:a0:d4:26:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:6E:2F:2C:D9:1F:2E:13:72:65:F6:E9:59:F7:48:35:FC:28:84
            X509v3 Authority Key Identifier:
                keyid:60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:79:9a:1b:e0:b5:ca:6c:ad:b1:74:dd:cc:f7:61:bd:13:58:
         8c:e0:fa:6f:61:b1:bc:62:c2:2a:b1:df:4e:9f:bf:4a:8e:a2:
         a6:61:19:11:ce:82:60:8e:f5:5d:12:2c:25:1d:b1:f5:2f:94:
         06:7f:0e:4e:9e:19:17:d2:5c:48:9b:5b:6c:14:6d:92:29:fe:
         9e:d2:f3:eb:65:52:82:5e:71:68:ee:17:a9:4e:a4:4d:16:f1:
         67:f6:1e:f4:33:d1:eb:0a:e9:ba:65:1e:13:6a:3c:e8:9c:f9:
         7c:fb:a4:e1:b1:48:25:a0:8c:91:dd:00:de:7d:c7:01:83:52:
         4e:9f:f9:04:76:e4:27:a9:1c:0c:00:d6:55:d8:c5:48:b7:a6:
         04:ea:02:f0:f7:bd:ef:f3:50:d4:65:b6:ab:5b:4d:52:7a:f6:
         13:15:be:fc:84:c6:0e:e2:e6:82:25:df:0e:b5:bb:60:09:77:
         2c:42:ff:e1:3a:ec:05:b0:3c:09:b0:dd:c2:48:0e:5a:39:23:
         61:36:c6:de:49:f0:6a:ea:bc:f6:c4:d2:23:23:20:d5:b1:28:
         f6:78:d6:a3:c1:63:8d:e1:0a:d4:ad:1e:6e:99:65:00:62:af:
         9c:58:62:65:3d:b4:f5:7c:0d:a4:35:f6:49:30:e7:6e:51:a6:
         7f:35:6f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 05:08:57 2024 by rpki-client on console-ams.rpki-client.org