Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File:                     yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier:          atJJeuFoKojW+KeAtXyTxUay5NL+Hi5iH8WGe3UxHjA=
Subject key identifier:   2C:EE:12:93:05:CE:54:C1:FC:D3:69:A7:30:89:9F:1B:20:DD:DE:59
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer:       /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial:       0193572D706203C5A665A7713783971BF7E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 04:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:15 +0000
Files and hashes:         1: T_Tu6KY40dBrqR0_mCRthTcTMBk.roa (hash: q7/RuNyibOD07nXTT3lC1j4xnzg46C08AoS1caAYeGw=)
                          2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: jy6yIbFEKBG3jQLSYFlMQIyQwyjpn5eLka2rMo4tWro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:70:62:03:c5:a6:65:a7:71:37:83:97:1b:f7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
        Validity
            Not Before: Nov 23 04:00:15 2024 GMT
            Not After : Nov 24 04:00:15 2024 GMT
        Subject: CN=2cee129305ce54c1fcd369a730899f1b20ddde59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:56:35:60:25:05:ba:ba:ec:14:02:4e:3c:
                    62:fb:21:5d:e1:f0:c5:66:29:96:90:00:ca:12:73:
                    2d:3e:05:0c:59:42:41:1a:0c:89:75:f9:60:d7:20:
                    96:5d:a7:a5:ec:da:2f:02:01:bd:0e:1a:59:1c:94:
                    8c:cf:b6:35:c6:bd:fd:f8:c7:7b:36:93:07:f4:56:
                    5f:37:1d:25:c2:47:ab:26:25:b0:70:28:94:7b:7d:
                    bf:e3:cf:d5:7a:60:3a:25:18:e2:8d:c4:70:4e:8f:
                    ab:e7:13:71:6b:c5:4a:0a:11:a9:c6:12:54:35:37:
                    48:44:b3:be:22:27:09:a9:e0:d2:ad:bd:59:c4:07:
                    6c:d3:e6:f3:73:13:30:d2:13:12:0f:da:77:65:55:
                    8d:85:b5:b2:01:3f:f7:27:ea:f7:78:5c:f8:7c:b6:
                    53:f6:03:20:0b:cd:72:67:1e:3e:f2:55:e9:2b:87:
                    a3:45:23:0d:ab:f7:26:c7:bb:96:ee:29:53:50:63:
                    31:55:e4:1b:54:6b:13:2d:0c:1a:e3:31:8d:c6:65:
                    b2:20:be:76:9c:b7:6c:d7:82:50:d0:38:f2:73:aa:
                    cf:9f:11:ab:c6:e1:48:9e:f3:a0:31:b6:f1:7c:1e:
                    28:2a:25:c7:75:7a:44:6d:22:cd:26:1a:3a:3e:6a:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:12:93:05:CE:54:C1:FC:D3:69:A7:30:89:9F:1B:20:DD:DE:59
            X509v3 Authority Key Identifier:
                keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:2b:2f:85:8d:b3:d2:bb:2a:09:80:87:53:31:59:8d:97:
         4e:c5:ed:0d:c7:fe:9f:47:01:24:cf:f5:e8:e3:a5:3c:9d:06:
         6c:f8:2a:f0:02:8a:1d:3d:cd:c6:23:3c:4b:f5:c9:bd:2d:a8:
         bd:1f:4a:b0:16:85:55:9d:bf:b2:45:e7:bf:1b:17:3e:91:25:
         5c:16:18:84:07:23:2e:9e:e4:1a:08:5c:b8:7e:97:39:df:d7:
         2e:2c:21:b8:23:f5:2d:b5:bb:45:9c:af:bd:2c:76:7f:84:f4:
         e6:43:58:73:98:24:6e:d8:19:a5:b2:4b:45:0b:ce:23:86:fe:
         e5:26:7b:b0:54:3f:37:38:53:5c:2e:7e:6d:66:98:bc:33:ff:
         9f:2c:0d:1c:fa:dc:a1:26:b4:5b:ad:83:56:5a:4c:92:af:d0:
         20:05:f1:78:8c:34:5e:27:23:bb:79:78:cf:f0:12:a3:d2:6f:
         f7:ba:0c:3e:4f:01:dc:f3:a1:58:09:4c:69:61:5b:4f:40:f7:
         13:5a:f2:e0:ab:ba:f9:4f:21:f9:ee:96:65:c4:49:34:34:90:
         57:af:78:0f:af:a5:f3:84:ad:8a:3c:05:e0:30:19:4b:4f:37:
         6e:66:0d:55:ab:db:3a:4a:15:09:cf:8f:f0:2a:16:83:3b:5c:
         3c:4c:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:06 2024 by rpki-client on console-fra.rpki-client.org