Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File:                     dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier:          NfmwIl6dLw8v/fpjux4msvOSfta8PGcaOV1+33xImoI=
Subject key identifier:   B1:DC:C4:08:45:EB:CE:E4:68:B2:8E:36:EA:AB:55:39:EB:1B:52:E1
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer:       /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial:       018F874980153A3B3E53E92C231BE4259159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 16:01:31 +0000
Manifest this update:     Fri 17 May 2024 16:01:31 +0000
Manifest next update:     Sat 18 May 2024 16:01:31 +0000
Files and hashes:         1: A-83ltbO_Zu7XHu2mZxcn4j-NTw.roa (hash: rEHLpLJSO7XMifKtekD/Y1RkhaQQiNzTkBuErIhyrz4=)
                          2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: +1HN/uyUxNc9oUrQwOVp4073qtc5o91YWhBGmCFJQ78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:80:15:3a:3b:3e:53:e9:2c:23:1b:e4:25:91:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
        Validity
            Not Before: May 17 16:01:31 2024 GMT
            Not After : May 18 16:01:31 2024 GMT
        Subject: CN=b1dcc40845ebcee468b28e36eaab5539eb1b52e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:e9:d9:8f:05:14:39:4f:ad:d5:0e:d6:b5:
                    80:4d:f8:e9:ef:b0:bd:a6:7f:9a:5d:02:c3:a4:b0:
                    04:2f:0b:33:94:ed:7d:a5:76:17:0a:04:a8:91:df:
                    d3:d7:04:7e:c6:49:32:61:b0:5c:14:a7:0f:9a:5e:
                    cf:f4:43:b0:ca:51:69:95:bf:24:70:4c:4f:5d:49:
                    cd:16:77:91:09:f7:33:7f:19:aa:d9:44:a9:8a:6d:
                    6a:19:43:b2:7d:b8:55:c6:01:df:e4:7d:c8:8d:ea:
                    eb:08:8a:d5:bd:67:b0:12:04:4f:46:1d:e9:34:6c:
                    3d:60:b8:84:6c:3a:7f:df:b9:b2:ce:86:83:8e:dd:
                    f6:b6:6f:cb:2d:38:41:38:8d:45:ee:d0:f1:d1:99:
                    f1:ec:d1:5a:fe:40:3a:2f:b6:bf:c5:1c:38:f1:46:
                    90:00:88:fe:b1:8c:51:e8:3b:d1:87:3c:84:b8:5e:
                    d7:b3:33:c1:3d:ca:fd:ff:9e:14:d7:03:a4:00:ea:
                    34:d2:dd:88:7e:53:cd:b7:e8:92:27:9c:3e:d6:60:
                    e8:e5:99:91:9c:31:71:78:71:b3:09:a5:f2:9f:4d:
                    f1:47:d7:12:ff:54:f4:72:e1:35:33:99:1a:54:fa:
                    22:d8:43:f0:bd:53:51:7d:14:9b:87:00:12:30:a6:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DC:C4:08:45:EB:CE:E4:68:B2:8E:36:EA:AB:55:39:EB:1B:52:E1
            X509v3 Authority Key Identifier:
                keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:5d:cb:bc:23:9a:3f:25:84:5a:16:99:d9:a9:33:9c:17:7a:
         be:cd:2d:7c:97:f3:62:c6:c5:e6:d3:d1:10:a0:04:35:39:7e:
         78:b9:5e:5d:34:2a:18:89:41:a3:5a:54:a8:e2:e8:b0:d0:f1:
         80:0a:cc:dd:e7:7c:fd:a8:dd:02:fe:04:dc:e5:16:ff:90:48:
         4b:5d:15:25:f3:8f:22:c3:d4:dd:1f:92:d0:c6:c8:bd:cc:9a:
         8f:9a:c5:ca:63:48:f6:cb:e1:85:aa:07:47:63:21:68:b0:7c:
         97:28:9b:7a:13:6b:8b:e1:75:8b:af:15:40:8f:b2:b5:5a:4c:
         77:79:17:8a:87:ba:34:1a:c8:84:73:20:0e:f1:ea:86:79:32:
         98:a2:9e:23:27:b2:46:01:fd:3e:ff:9f:09:a4:e8:b2:6a:f0:
         1b:2c:7f:58:16:07:53:3e:a8:4b:e0:1d:8f:bf:ba:4e:37:36:
         3c:cf:cc:fa:2c:dc:c0:ef:70:a4:1d:aa:35:2b:1c:5c:59:6e:
         c2:d4:f6:1f:84:31:c7:97:bc:8f:78:95:56:40:17:ca:e7:41:
         c4:f2:1f:67:55:80:01:96:3a:70:b1:c4:00:e4:a4:a2:3e:41:
         1a:4b:a8:f7:55:49:70:87:ef:25:fe:58:e9:bd:84:95:2a:87:
         53:a6:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:04:16 2024 by rpki-client on console-fra.rpki-client.org