Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File:                     YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier:          96CFOPPlIGa4V/BSjV8BS5u4AXsKxmwijoomb4RWTwg=
Subject key identifier:   C6:DA:6A:3B:DC:A6:BC:60:17:58:A3:DF:36:0C:46:8C:06:58:41:B6
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer:       /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial:       018F8824157F879DF0E4E6D1CB66C1F83AF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:17 +0000
Manifest this update:     Fri 17 May 2024 20:00:17 +0000
Manifest next update:     Sat 18 May 2024 20:00:17 +0000
Files and hashes:         1: 14OK4UeufHfGH_U9cQmnR0_GwQo.roa (hash: C9Cx3u7T3aVXh9+2IqiM9WdSC+ubVQnOu+LspVsAYSw=)
                          2: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: c6EqmsjzQEaYEISCA1OF9aTAMvk8LJlpaMwhDtHt69k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:15:7f:87:9d:f0:e4:e6:d1:cb:66:c1:f8:3a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
        Validity
            Not Before: May 17 20:00:17 2024 GMT
            Not After : May 18 20:00:17 2024 GMT
        Subject: CN=c6da6a3bdca6bc601758a3df360c468c065841b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:99:41:fc:45:0d:9c:7f:e8:28:3c:46:6a:
                    e4:80:a8:1e:6f:7c:79:31:e7:29:1c:0f:99:48:c7:
                    95:96:77:18:a3:b0:bb:59:30:2f:dd:54:8b:35:6d:
                    d9:2f:04:d0:bb:18:f8:00:17:ab:64:6e:9f:6b:17:
                    cc:24:aa:d2:85:8e:59:72:d8:c9:71:af:4c:12:ae:
                    82:58:75:43:e9:eb:bc:36:06:16:11:df:7c:2e:17:
                    2a:35:15:4f:cb:d9:0d:36:fa:a6:ea:42:d1:fc:d9:
                    88:f2:63:64:36:3d:be:69:17:d9:f0:77:e4:eb:01:
                    8d:28:8f:b1:5e:89:89:aa:5c:a0:c0:1a:6d:a0:1a:
                    89:3a:bb:37:21:6e:c6:cf:00:2f:00:55:ab:e8:d9:
                    8a:04:05:67:1a:13:22:41:0e:46:af:ea:4a:28:28:
                    dd:be:ab:b6:f5:8e:33:c4:73:f7:54:3e:8c:78:3b:
                    2f:60:0a:8f:91:ac:9a:40:a1:f6:db:41:79:a6:16:
                    3d:d7:3e:77:ef:1b:52:93:52:dd:14:dc:9d:2b:60:
                    a4:3d:00:e4:40:86:16:a0:94:68:d6:d6:4c:46:e7:
                    ea:ff:60:34:f9:1f:0f:c5:3c:c6:1b:c1:4b:01:47:
                    40:62:25:c5:09:30:74:c2:15:de:c3:ff:ac:83:50:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:6A:3B:DC:A6:BC:60:17:58:A3:DF:36:0C:46:8C:06:58:41:B6
            X509v3 Authority Key Identifier:
                keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:21:31:de:52:8b:30:84:ec:3f:b2:a3:61:a8:e2:51:27:d5:
         f3:d2:e4:e7:f0:f5:3a:eb:07:79:9f:ae:e4:6d:39:ed:85:99:
         31:1a:74:52:47:18:eb:5f:d5:73:7a:c2:2a:b1:7a:67:f9:9e:
         79:ad:9b:50:54:17:12:e3:93:c3:35:58:df:ba:48:ac:e6:50:
         3d:54:67:82:4b:38:9d:09:0a:ce:66:29:63:07:b2:a1:3f:24:
         f8:84:8e:87:43:88:f9:e1:22:11:42:58:a7:26:72:5a:43:f3:
         d4:77:f0:9e:6b:ad:48:fb:13:45:46:f1:f2:2f:c4:26:7a:58:
         ba:fc:ae:06:25:a1:e7:93:ea:b0:cd:ae:e7:fd:19:8f:1a:f2:
         55:2f:21:16:54:21:88:6e:73:d6:ae:d6:13:23:45:63:fe:b6:
         f6:e7:ee:ef:a5:b5:8d:04:fd:19:01:fc:ef:c1:bb:9c:4e:38:
         9e:e5:76:fc:7d:c6:5b:6d:07:4b:6b:cb:9e:5c:0a:0d:02:7b:
         e0:25:83:ea:72:3b:37:07:0e:61:ca:b6:01:6d:c3:72:16:7b:
         72:4e:d6:bb:66:9b:60:29:9d:fc:0b:82:32:d5:e0:d1:9c:4a:
         9b:3f:46:c1:1f:8a:72:ae:9b:d5:a5:52:8c:9a:61:37:8a:2b:
         e4:13:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:26 2024 by rpki-client on console-ams.rpki-client.org