Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File:                     YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier:          vJeqmNbD5xfK26CeG/9BpBP2pU6vul71hT4Dyux9HbY=
Subject key identifier:   6B:06:FB:B1:3D:C7:77:5C:F3:3C:6B:9F:A3:C6:D3:C9:A4:53:1A:8D
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer:       /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial:       019352ADDBB24FA2138AF023F512D315F4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number:          10AF
Signing time:             Fri 22 Nov 2024 07:02:25 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:25 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:25 +0000
Files and hashes:         1: SJTZi2iqiC_qSX9B1LFDnsK7hmE.roa (hash: BvxiO0zBWspisNFXww5NTVlRCqfQWkMVg5w6hAbq+d4=)
                          2: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: IZzsfk1gg/6ZOJO3IfEhv7eKRbdq/eNkl11YUt3xHj8=)
                          3: vZ1yAVzyASLv0TjQjOHxofpQPgQ.roa (hash: PwV4fx6G6Bgl4hZ3vm+fDg9UULJs855TvFOatQDiSM8=)
                          4: ylMmY43oeghKjj3RKHuH7j6LXbM.roa (hash: ok1VDnrCvMLd8kk8Q7X1JEWU/JE1UvnncexK6sK0Qgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:db:b2:4f:a2:13:8a:f0:23:f5:12:d3:15:f4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
        Validity
            Not Before: Nov 22 07:02:25 2024 GMT
            Not After : Nov 23 07:02:25 2024 GMT
        Subject: CN=6b06fbb13dc7775cf33c6b9fa3c6d3c9a4531a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:36:6d:14:86:e5:44:f2:50:32:2b:5a:76:
                    a8:99:2d:a1:d0:f7:69:d9:d4:ed:7f:09:1f:26:40:
                    38:ef:f6:fb:90:6e:e0:51:89:af:13:ba:33:ec:34:
                    42:2a:ba:f4:62:fd:56:4d:25:2a:a8:39:f0:bc:ac:
                    a0:05:81:5f:1f:42:3e:c4:f5:2b:ee:d4:98:7c:d2:
                    70:46:ac:13:33:91:41:ca:85:27:d2:86:83:7d:80:
                    f3:6e:99:17:75:9c:59:82:83:28:c3:e4:91:ca:5a:
                    0b:eb:e4:0e:36:a8:72:b2:de:5c:da:8c:39:76:a7:
                    e6:0e:4c:5a:e9:57:9c:c2:64:82:98:9f:6b:13:99:
                    18:6d:f1:8a:fd:f6:a4:a2:40:07:d5:3c:68:b4:7d:
                    56:50:bc:5a:62:93:ba:31:98:e5:b4:9b:d8:c4:f4:
                    61:41:a2:4e:3b:68:d8:12:5c:6a:e2:1d:11:42:05:
                    38:06:9c:81:f6:42:30:24:bd:77:40:2f:1e:f2:de:
                    ba:28:db:5a:55:53:a2:78:fe:7d:44:22:78:0e:e8:
                    38:c4:7d:8f:f2:13:95:88:2c:83:ea:38:8f:8f:4b:
                    30:18:31:6e:55:57:b3:bf:63:7d:e5:37:a6:e9:15:
                    de:b8:12:3b:59:21:6b:7d:f6:a2:3b:8d:dc:ca:ce:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:06:FB:B1:3D:C7:77:5C:F3:3C:6B:9F:A3:C6:D3:C9:A4:53:1A:8D
            X509v3 Authority Key Identifier:
                keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:87:a7:a2:d5:2b:b8:7a:71:9f:ce:03:1c:1a:fe:f6:90:
         bf:3c:77:7c:55:a2:30:27:ef:f2:77:bb:0f:22:9e:70:fb:99:
         bc:7c:44:04:66:bd:ea:f1:14:1e:87:bf:1e:5b:de:d9:e9:64:
         ff:3e:da:f2:a6:21:54:f8:06:09:d1:a6:3f:77:fd:d3:78:20:
         74:5e:f5:84:32:ea:da:0a:b8:1a:00:29:0f:9b:f4:96:13:6e:
         ab:9e:54:5d:23:39:0e:04:f5:83:d1:2e:3f:13:cf:17:ab:cd:
         50:13:58:d7:02:85:09:28:49:b4:78:18:81:ae:44:8f:89:d2:
         5a:2a:77:5b:9f:be:5f:28:b8:e3:05:3b:f3:cb:16:b8:cd:1c:
         fa:90:47:67:63:28:51:ee:0f:d6:a0:16:f0:0e:d0:24:bf:73:
         c7:47:94:0e:18:4f:c5:03:83:00:3d:02:9d:21:70:fc:77:3c:
         cc:d1:cb:1e:82:54:91:d5:61:b5:21:c5:99:cf:a8:07:cb:af:
         bf:2c:95:ec:8c:9b:51:65:d3:8e:96:e9:2a:64:d8:79:b7:f7:
         02:37:29:96:f9:51:98:7b:ec:57:95:28:10:68:40:2c:c7:4d:
         d0:a5:f2:b2:d1:62:28:1c:4a:be:1c:42:22:13:92:26:46:3f:
         e0:72:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:20:38 2024 by rpki-client on console-fra.rpki-client.org