Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File:                     YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier:          7dXreipZhiEGSRPCnFAzzY/ldYCqoaJo43vJRxRhWJo=
Subject key identifier:   1D:D5:5C:7E:F7:6D:04:44:E4:31:37:FF:48:DF:A5:9E:9B:A0:58:8A
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer:       /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial:       0191FB22EB1E3227F967395CD10967124237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number:          0131
Signing time:             Mon 16 Sep 2024 14:00:55 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:55 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:55 +0000
Files and hashes:         1: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: C3yuAhS1gctzpJv3Z2cTb4bgep6fl1IP4AWpb4TJ7rg=)
                          2: lkKFsMxENbj0ZY7Hoghw-UGShR0.roa (hash: 44biqAa3vRDVv7itMz0aAgjCEWgk9/seTIKnvAxXmRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:eb:1e:32:27:f9:67:39:5c:d1:09:67:12:42:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
        Validity
            Not Before: Sep 16 14:00:55 2024 GMT
            Not After : Sep 17 14:00:55 2024 GMT
        Subject: CN=1dd55c7ef76d0444e43137ff48dfa59e9ba0588a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:1a:93:ce:75:fd:68:01:4a:a5:bd:d2:73:
                    10:6e:5c:ac:1d:7d:dc:89:06:c8:b4:e1:70:fd:23:
                    29:35:ff:47:68:bc:77:39:15:6e:02:e3:b0:90:cf:
                    f8:1b:96:a7:df:a3:a1:a8:36:df:3b:a6:3d:b1:81:
                    96:c5:31:7c:4e:d7:0e:f3:0a:f3:a1:c2:3b:42:21:
                    af:21:bc:60:17:10:48:a7:f7:c8:12:d7:2a:99:b5:
                    e9:a8:eb:b0:a3:9d:1d:d6:31:07:fd:8c:b8:b9:c1:
                    b5:68:ad:61:c2:7c:af:8a:f3:5a:ab:29:67:4f:bf:
                    c9:b2:60:86:fa:50:51:fc:81:dd:13:16:02:df:2b:
                    76:bf:d3:2b:4c:86:6d:2e:fc:b1:9c:70:67:4c:fa:
                    b4:36:68:cb:33:a9:84:dc:47:f4:13:b9:d2:0f:fa:
                    45:56:f1:44:76:6f:75:ae:69:7d:a1:e6:70:71:20:
                    2b:4d:9e:5f:46:21:84:11:ce:4c:7a:8f:ca:2f:b1:
                    47:aa:fd:51:30:f8:f8:bd:3b:4b:1a:a4:33:a2:79:
                    5d:f8:f9:2a:52:9b:3c:3d:49:f4:84:51:57:2e:ef:
                    39:db:79:f0:7d:89:f6:c0:db:9a:64:75:2d:f1:2c:
                    d9:e5:63:3f:e9:02:d4:bc:b0:28:ad:9d:d6:bc:e7:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D5:5C:7E:F7:6D:04:44:E4:31:37:FF:48:DF:A5:9E:9B:A0:58:8A
            X509v3 Authority Key Identifier:
                keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:c9:fb:7e:f5:7f:e6:75:8c:bf:b5:ed:bf:3a:60:47:ef:
         33:71:f3:fb:ce:41:7a:46:76:f0:bd:fc:a4:05:df:b4:ca:c8:
         d7:a5:cd:11:98:92:ef:c5:ef:e6:18:5c:0d:55:ef:85:22:42:
         15:8f:79:b5:e5:f8:25:8d:33:c1:19:0f:98:cb:36:75:41:d6:
         73:e3:ac:09:dd:bd:d7:2e:f6:04:89:9b:72:d2:74:6d:d5:d0:
         6d:62:93:58:5b:72:c9:a1:6b:30:a9:7e:b6:df:fc:da:ca:e0:
         52:27:7b:3d:50:82:21:23:ef:72:a9:13:0a:da:a7:f9:78:44:
         a1:41:67:a2:7c:32:7f:f5:e6:51:53:f6:79:8a:63:29:25:41:
         28:4c:60:4c:89:62:f7:ac:5d:88:47:a0:7d:77:91:2a:7f:49:
         2d:61:1a:1c:f1:a6:4a:8a:f2:9f:e4:37:5a:da:18:88:48:25:
         34:7a:47:48:7f:6b:a4:40:8c:b4:38:3f:2b:b0:c8:a6:23:93:
         98:40:75:5a:cf:e0:95:81:01:e1:7c:91:5b:28:e5:d2:38:81:
         9e:b9:b3:7d:dd:14:c0:83:a5:60:44:08:d6:da:68:dd:29:c3:
         eb:1d:f7:e2:1d:4a:f1:88:3a:ca:90:d6:6e:d6:1b:6c:71:55:
         d0:37:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:31:51 2024 by rpki-client on console-ams.rpki-client.org