Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
File:                     Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft (raw, json)
Hash identifier:          kDLtUqe8hnQq5psqXR+LLTeR5AL7OxxQCZ7DEfkeEDg=
Subject key identifier:   6B:AB:27:5C:66:06:CC:25:14:03:7C:9D:6F:52:E8:52:F3:76:F3:59
Authority key identifier: 62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
Certificate issuer:       /CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Certificate serial:       018F87ECFC88D1E87919F2D9BDF5AEEA4D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
Manifest number:          0260
Signing time:             Fri 17 May 2024 19:00:06 +0000
Manifest this update:     Fri 17 May 2024 19:00:06 +0000
Manifest next update:     Sat 18 May 2024 19:00:06 +0000
Files and hashes:         1: MLKJ5PvFrQ7spqXkbGjSgcpWFJ8.roa (hash: HGPsbuWm9TFeTwyytHi59XAW9Q1uut+5QXJDCkaqm6o=)
                          2: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl (hash: JGYllY8FpIzdjU1YASj4kYKbhbHLYoc4xDEaECQIOBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:fc:88:d1:e8:79:19:f2:d9:bd:f5:ae:ea:4d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
        Validity
            Not Before: May 17 19:00:06 2024 GMT
            Not After : May 18 19:00:06 2024 GMT
        Subject: CN=6bab275c6606cc2514037c9d6f52e852f376f359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:b1:b5:09:6d:36:f3:a9:4a:88:b5:50:be:
                    37:ba:58:30:c1:95:8a:b1:c9:5e:23:ee:10:59:46:
                    ec:c6:67:78:57:4a:69:f6:6e:ee:4c:42:9e:11:9a:
                    cf:d1:03:5e:b0:51:7f:15:44:62:e1:8b:ef:b6:db:
                    a7:6f:83:e8:68:02:dd:ca:bc:8b:b1:98:38:51:e7:
                    7b:12:a3:55:64:e8:ef:27:b1:7b:30:6b:4a:31:2f:
                    5a:79:5c:b5:24:3b:51:a5:69:cc:70:be:be:81:f2:
                    f7:81:ac:1e:1f:1d:11:e2:31:68:07:a7:37:13:9f:
                    ae:a1:41:a0:43:07:b9:dd:8e:37:00:44:c8:d2:84:
                    65:86:52:99:13:7b:52:73:17:8a:aa:22:d7:8a:83:
                    e4:a6:33:b2:0e:71:02:8b:c5:37:5a:8f:fb:dc:28:
                    b3:38:ba:00:02:45:49:a8:e6:39:5e:cd:96:8d:55:
                    7b:94:a3:d8:04:e5:9c:7a:7e:7c:94:f3:6a:a2:89:
                    2e:a4:18:39:11:29:8c:05:24:8a:92:03:f6:ab:21:
                    2a:d5:d0:6a:b0:67:a3:b5:e0:20:c4:c5:bb:98:26:
                    e6:19:e0:e4:b4:bc:50:2b:5b:e4:31:49:43:42:59:
                    ee:d9:92:02:8b:d2:46:bc:66:e6:54:e2:18:9a:b1:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:27:5C:66:06:CC:25:14:03:7C:9D:6F:52:E8:52:F3:76:F3:59
            X509v3 Authority Key Identifier:
                keyid:62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:6f:1d:c7:55:91:b1:fb:6c:11:da:ae:d4:85:07:e9:63:
         09:93:97:2b:5f:1c:06:b5:eb:10:b8:47:2e:89:ce:54:46:a9:
         24:5a:43:67:5e:38:12:bc:5b:7d:b6:92:a7:a9:3b:34:41:d0:
         4b:34:a4:73:4c:5f:9e:22:80:ce:b8:b1:8e:a9:4f:54:60:0b:
         d3:1d:5d:7d:b1:f6:03:86:29:a5:82:ec:1d:4c:bb:d4:d3:2f:
         49:a1:f8:c8:b4:f0:46:61:6c:d3:9b:dd:46:44:45:ff:86:80:
         c0:e2:99:18:53:53:9b:be:ff:21:7b:b7:24:0e:91:e4:b2:1d:
         3e:43:37:73:c7:b8:96:9b:6e:4a:ff:bc:06:8c:94:c4:af:57:
         64:09:53:78:f2:97:d8:84:86:2e:78:2d:ad:2f:36:98:f8:73:
         f4:4c:c9:4f:93:08:c2:87:39:92:5f:70:4a:44:1c:44:07:6b:
         74:3b:7a:90:30:4a:c6:31:ea:8c:ed:1b:87:e3:e6:13:85:a1:
         cf:74:05:ed:14:bc:2b:36:b2:9a:a1:5b:30:c6:c3:90:6c:6d:
         d6:29:aa:2a:73:f6:ef:68:ca:ce:46:bf:e1:dc:1c:3d:79:27:
         f3:75:7b:2b:c5:ac:ca:f5:6b:d7:35:fd:b6:10:7e:43:59:a3:
         b3:f2:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:00:17 2024 by rpki-client on console-fra.rpki-client.org