Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          TQmq7HLIhoK0K5emq5npLBWV/rPmrhK67wi3xTwSC5k=
Subject key identifier:   69:DA:D5:E1:F2:60:BC:96:C4:91:1F:D7:6E:D0:D4:D1:C4:36:1F:DF
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       01921098350322D73EE644E2222DBA6A4250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          12C7
Signing time:             Fri 20 Sep 2024 18:01:03 +0000
Manifest this update:     Fri 20 Sep 2024 18:01:03 +0000
Manifest next update:     Sat 21 Sep 2024 18:01:03 +0000
Files and hashes:         1: 5KdBR_CaVnhEKhwVCZvRsDOq1so.roa (hash: l+HvT1mL786+eaMQlYeYswVrr2E0ILLQNf/B35VwWCU=)
                          2: E6zuhrpCYKVYMWTteuxN9AJ1bZs.roa (hash: TuyaMi0EOszTj4vpV3vN1tNVMYUmue/CJgf0Ir9GjsE=)
                          3: UZEvZkitdRsk1WnrUsg0VBCN7oM.roa (hash: QqPjaSiMFtjIi1Se/GAalY2DdwpJWmVOl4mn9SXxEF4=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: HR2jDKnbpaXQ1DF77+lg5sx5sbXu2bgvs0xvJRCEsBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:98:35:03:22:d7:3e:e6:44:e2:22:2d:ba:6a:42:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Sep 20 18:01:03 2024 GMT
            Not After : Sep 21 18:01:03 2024 GMT
        Subject: CN=69dad5e1f260bc96c4911fd76ed0d4d1c4361fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:13:c0:df:05:aa:d8:cb:ce:ff:34:c5:90:
                    85:9f:81:fd:8b:97:2f:d6:55:9b:88:3e:22:aa:8a:
                    bf:ba:82:43:29:20:3b:eb:25:70:0b:df:3a:9b:8c:
                    0a:96:de:52:36:8f:88:cf:e4:d7:bd:79:21:d4:a7:
                    92:1a:7b:be:96:4f:d7:07:1c:5c:5c:ae:15:31:99:
                    95:be:e0:54:d0:b1:cb:37:d7:2f:58:93:3a:18:d7:
                    0b:37:c6:01:1c:d9:c1:9d:4e:52:27:af:40:a7:1d:
                    a7:6d:1f:9c:d0:57:e6:06:68:48:0f:79:5d:7a:21:
                    c7:32:0e:9a:41:21:0f:97:35:7a:c0:dc:f0:6a:69:
                    34:80:fc:2b:2e:7e:2e:fa:3e:b6:b8:92:1a:5d:dd:
                    89:d6:83:22:e0:f3:42:4a:03:2a:a0:c0:b3:5f:8c:
                    86:e7:e9:15:6d:3d:bf:3a:1d:65:34:ad:a0:cc:a0:
                    fb:06:42:80:be:96:bd:de:0d:b4:4e:53:5a:39:93:
                    c5:97:6c:97:b5:40:35:fd:5c:14:1c:3e:ea:69:74:
                    af:cb:ab:e3:7d:99:74:1c:f4:dd:75:03:62:a6:6b:
                    a1:d2:13:c6:6d:b3:97:03:ea:00:1c:e9:25:87:8e:
                    64:a9:aa:ba:43:fb:4c:a8:bb:7c:84:a8:e1:41:e7:
                    50:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:D5:E1:F2:60:BC:96:C4:91:1F:D7:6E:D0:D4:D1:C4:36:1F:DF
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:a4:a4:ba:2f:9a:6c:5c:6e:f4:60:db:b9:19:58:c4:57:
         d2:44:85:e2:c5:62:fc:ea:bd:3c:25:71:8a:97:f2:20:a2:c9:
         b2:a9:c1:6a:e9:2b:79:a2:0c:c6:3e:2e:be:81:19:13:74:82:
         1c:8d:e8:5a:a9:81:48:54:ac:92:6d:10:59:fd:5c:bf:de:26:
         a6:2e:3e:b9:20:fb:28:ef:a2:34:13:38:99:85:dd:b0:be:18:
         9e:ae:e1:d8:7a:50:0d:ae:82:f7:f7:c3:58:99:ba:47:50:cb:
         c9:7e:3b:3f:01:46:df:f8:e4:c0:a3:72:27:2a:f9:49:bb:87:
         b3:f5:68:c2:52:0c:f4:10:08:87:23:bc:73:b0:c2:f0:4e:83:
         19:df:27:35:ce:2d:93:e8:08:a4:d9:9e:9c:81:df:a5:02:87:
         39:dc:16:09:21:56:cb:37:32:3f:2b:53:e6:35:46:3f:12:f6:
         84:c8:4c:20:8c:f1:f2:02:d1:f7:22:85:1d:a6:e8:52:0b:f3:
         9e:7a:1c:d7:fe:e8:fb:f3:bf:2a:98:06:a6:51:61:b1:ce:d6:
         f8:75:f0:00:4a:58:66:4b:2a:9b:e4:19:23:56:c0:6a:28:6c:
         45:54:f8:c3:f2:c8:7f:42:dd:f1:77:ea:84:39:9d:07:bb:d6:
         c7:5c:32:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:17:44 2024 by rpki-client on console-fra.rpki-client.org