Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File:                     yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier:          cVxDnbRQoE0LVbELpW4vcLPV1TzdWwC/f08WTon0hqQ=
Subject key identifier:   13:21:1A:3A:B6:DA:89:C6:B5:4F:D9:61:31:3F:D6:EC:FB:64:63:1C
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer:       /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial:       019357D2D7977FFF7F3AEEE3F309C5ABF8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number:          063E
Signing time:             Sat 23 Nov 2024 07:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:55 +0000
Files and hashes:         1: Yuhkhaj_qsRWcigUeCcm5QMS_DU.roa (hash: //KdAq9hKpV5IWW6siSHbeWjLcYfaxm/OMr13pGE9SE=)
                          2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: qyiTIe11HjNsvF7LmXQcjZC+ZV1cUACyBAD5hBbi3M4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:d7:97:7f:ff:7f:3a:ee:e3:f3:09:c5:ab:f8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
        Validity
            Not Before: Nov 23 07:00:55 2024 GMT
            Not After : Nov 24 07:00:55 2024 GMT
        Subject: CN=13211a3ab6da89c6b54fd961313fd6ecfb64631c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:a1:05:0f:26:28:a9:2f:45:ff:d7:eb:db:
                    14:0a:e2:81:f5:12:84:0c:a5:26:d7:64:ee:f5:3a:
                    dc:e9:37:9f:6f:e5:ad:1d:29:98:16:c3:d6:51:b1:
                    13:0b:84:43:80:f6:8a:29:6a:f5:d8:77:3d:36:1a:
                    4b:3c:af:9d:78:f8:9b:11:c6:cb:77:f5:9c:bf:13:
                    5a:b4:cc:90:2f:ae:29:10:99:e7:10:8e:a3:07:93:
                    f5:5a:b6:c0:80:7f:5f:2a:e2:d9:5e:6d:44:bf:c6:
                    aa:52:96:b3:f0:65:1a:88:c3:ae:30:33:ca:68:7b:
                    3a:e3:eb:34:f1:70:ba:b3:d1:69:a4:92:09:42:fa:
                    77:fe:11:4b:e6:11:ba:93:c5:49:4f:ad:07:29:6e:
                    c2:ab:36:d3:32:cd:5a:00:e6:ab:82:1e:97:07:34:
                    1d:a3:3a:bc:e2:48:11:c4:8e:d1:d0:88:c4:b9:4f:
                    23:8c:a4:26:15:79:c5:1d:3d:82:78:ee:21:89:00:
                    87:2a:c2:4c:7d:94:a3:e3:06:6e:ce:90:bf:fc:58:
                    b0:57:6e:98:ab:20:58:d3:7b:01:7b:2d:fc:83:6c:
                    0e:c8:b9:de:31:cc:e8:10:de:a6:9e:73:12:93:07:
                    ba:e8:6d:0d:f1:a4:db:9d:bc:28:23:78:e8:07:8c:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:1A:3A:B6:DA:89:C6:B5:4F:D9:61:31:3F:D6:EC:FB:64:63:1C
            X509v3 Authority Key Identifier:
                keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7a:14:87:2a:79:29:e3:b5:a8:28:ce:cd:9f:57:ef:a2:68:
         3c:7d:08:98:a3:3d:34:72:43:b3:83:2b:84:cb:1e:bd:16:44:
         74:f9:1b:54:b4:26:a8:69:31:1e:3e:04:2b:db:77:69:d1:fe:
         fe:60:b4:2b:49:90:68:d3:b0:94:73:ea:9d:4b:4a:0d:d1:a1:
         08:d5:e0:e8:c8:4c:56:78:8b:ef:4d:ac:42:38:63:d6:7b:29:
         a3:57:3f:da:b4:fd:12:51:cd:e6:7d:a7:25:d0:f2:a5:f9:e5:
         94:4d:7d:c4:cf:aa:16:05:02:6f:a0:20:41:e1:b2:aa:1e:63:
         c6:e2:ec:1e:49:92:fa:39:86:21:3a:3a:a6:90:00:60:36:1c:
         18:94:db:ed:c4:75:f9:d0:da:2f:a2:a9:aa:26:b8:82:27:df:
         1c:36:7e:07:11:49:2a:9a:81:f4:6b:23:e3:9d:31:0b:16:9b:
         7b:b8:bf:c9:54:e5:34:37:60:71:fa:b6:67:15:f6:63:dd:8c:
         73:f8:11:92:01:34:d8:c9:85:c2:3f:1b:62:b5:c0:44:78:81:
         0f:4f:80:62:74:84:f6:ad:01:a6:1c:2b:05:8c:e0:8c:f3:ed:
         0e:7e:cc:e5:82:c7:6a:6e:4f:98:e5:40:15:67:95:5d:52:a5:
         48:3e:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:53 2024 by rpki-client on console-ams.rpki-client.org