Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File:                     ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier:          9IfEJTWkgF7540/jXLHWm1TrHluKIdav0SvtsH+Biy0=
Subject key identifier:   1D:5D:E3:A9:13:63:82:AF:BC:5A:5C:44:95:98:27:2D:69:5A:D3:7D
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer:       /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial:       01936B2252D8764DC9640AE87E9718BFF6A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number:          011E
Signing time:             Wed 27 Nov 2024 01:00:31 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:31 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:31 +0000
Files and hashes:         1: VDuRKIk3FvRuhs6nLELOnZt5pEM.roa (hash: fdxZmgnMkblsPEW+1omu0FmwzSTuwSI+0xVFwKuZx7Q=)
                          2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: X4L5ebrYRsB+n9kvJXJaA330EQpt9IZfUCr44Tb3RwE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:52:d8:76:4d:c9:64:0a:e8:7e:97:18:bf:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
        Validity
            Not Before: Nov 27 01:00:31 2024 GMT
            Not After : Nov 28 01:00:31 2024 GMT
        Subject: CN=1d5de3a9136382afbc5a5c449598272d695ad37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:00:ea:6f:03:2f:71:1c:50:9f:66:9a:30:
                    cc:79:45:61:f6:d5:bb:2e:30:1b:42:33:8a:ff:ee:
                    25:01:fa:a2:49:e1:af:b0:b2:36:cd:22:63:48:a8:
                    14:52:a5:d4:2f:8f:97:e8:4a:20:6a:17:50:b3:69:
                    28:ba:33:96:ab:4c:9d:8c:7e:18:72:0b:ac:64:b7:
                    d5:dd:ef:54:9a:94:65:b8:d4:3d:84:03:0e:95:35:
                    7c:52:40:3a:92:c7:1f:64:62:18:d8:7b:dc:09:5f:
                    d9:37:40:fd:3e:e8:61:57:9f:eb:76:df:32:04:fc:
                    f9:1b:26:46:84:c1:be:49:97:f4:82:1f:04:51:ed:
                    c4:25:b3:48:2f:b8:3b:17:f0:97:8b:2b:cd:7f:9d:
                    be:91:85:c2:a7:23:51:6c:0f:00:84:75:4d:5a:b5:
                    44:55:33:aa:15:f6:19:a6:a1:56:72:65:11:00:e6:
                    03:56:e4:da:a1:35:90:ea:75:44:97:01:5a:dc:e3:
                    db:d1:af:27:c4:85:4b:6b:25:bb:de:27:e7:cd:4c:
                    00:1a:27:2e:47:b0:9d:2e:39:10:79:a7:6e:a4:fc:
                    43:bf:c5:99:f4:ca:53:e6:ff:46:dd:4b:51:89:b0:
                    6e:83:76:75:f8:aa:98:26:ce:4c:b5:3e:51:65:95:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5D:E3:A9:13:63:82:AF:BC:5A:5C:44:95:98:27:2D:69:5A:D3:7D
            X509v3 Authority Key Identifier:
                keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:ed:77:0e:d3:d5:03:6c:c3:2e:fb:c1:53:be:d9:42:cc:
         ac:8a:7b:75:a8:84:a9:be:db:16:61:65:e9:00:98:d6:19:7d:
         9c:4c:d4:c7:e5:48:44:60:3d:06:03:09:35:3b:39:e0:9a:ab:
         f4:90:74:a8:f0:43:9b:d1:99:fc:38:94:31:4c:54:85:40:6e:
         0b:58:cd:c4:0d:ad:74:ea:37:bd:84:9b:d4:5e:aa:c8:82:ff:
         f9:80:4a:18:08:e8:6a:5d:cf:04:ea:0c:23:4c:65:58:3d:50:
         a2:88:c5:95:2e:82:85:ff:b2:1e:7c:3c:51:09:42:54:de:f5:
         a2:e8:56:d4:e0:86:36:f9:d7:ca:8c:60:04:d7:8b:68:2b:8e:
         10:8a:f1:e1:c8:f2:6d:80:36:c4:92:af:1f:1e:5f:9b:14:73:
         b3:ab:cd:ad:00:a1:48:1c:92:29:45:15:c9:d8:fa:4c:93:4c:
         20:b6:ff:61:e4:dd:9c:a4:88:b0:94:51:2f:0d:07:9b:72:0f:
         51:7f:57:62:64:b5:7b:e6:5c:59:fb:e0:c2:d7:08:3f:76:18:
         f9:01:45:ac:4f:c9:54:fb:97:09:f3:46:53:83:aa:a9:86:12:
         37:4b:13:1b:7a:16:d0:68:fb:9b:22:84:c0:1b:f8:40:f3:fe:
         fc:39:e3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIlLYdk3JZArofpcYv/agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDkxNDlmMzQ3ODRmNWIyMDJjNTY3NjFiMDFkMzVkZDAy
NTY5Y2QwHhcNMjQxMTI3MDEwMDMxWhcNMjQxMTI4MDEwMDMxWjAzMTEwLwYDVQQD
EygxZDVkZTNhOTEzNjM4MmFmYmM1YTVjNDQ5NTk4MjcyZDY5NWFkMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8oA6m8DL3EcUJ9mmjDMeUVh9tW7
LjAbQjOK/+4lAfqiSeGvsLI2zSJjSKgUUqXUL4+X6EogahdQs2koujOWq0ydjH4Y
cgusZLfV3e9UmpRluNQ9hAMOlTV8UkA6kscfZGIY2HvcCV/ZN0D9PuhhV5/rdt8y
BPz5GyZGhMG+SZf0gh8EUe3EJbNIL7g7F/CXiyvNf52+kYXCpyNRbA8AhHVNWrVE
VTOqFfYZpqFWcmURAOYDVuTaoTWQ6nVElwFa3OPb0a8nxIVLayW73ifnzUwAGicu
R7CdLjkQeadupPxDv8WZ9MpT5v9G3UtRibBug3Z1+KqYJs5MtT5RZZVhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1d46kTY4KvvFpcRJWYJy1pWtN9MB8GA1UdIwQY
MBaAFMoJFJ80eE9bICxWdhsB013QJWnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iMGRjZGEtYTM3ZS00NzAzLThkNWEt
OWFhZDkwM2E3Mjc2LzEveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iMGRjZGEtYTM3ZS00NzAzLThkNWEtOWFhZDkwM2E3Mjc2
LzEveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV/tdw7T
1QNswy77wVO+2ULMrIp7daiEqb7bFmFl6QCY1hl9nEzUx+VIRGA9BgMJNTs54Jqr
9JB0qPBDm9GZ/DiUMUxUhUBuC1jNxA2tdOo3vYSb1F6qyIL/+YBKGAjoal3PBOoM
I0xlWD1QoojFlS6Chf+yHnw8UQlCVN71ouhW1OCGNvnXyoxgBNeLaCuOEIrx4cjy
bYA2xJKvHx5fmxRzs6vNrQChSBySKUUVydj6TJNMILb/YeTdnKSIsJRRLw0Hm3IP
UX9XYmS1e+ZcWfvgwtcIP3YY+QFFrE/JVPuXCfNGU4OqqYYSN0sTG3oW0Gj7myKE
wBv4QPP+/DnjsA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:40 2024 by rpki-client on console-ams.rpki-client.org