Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File:                     yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier:          2kzYvaCXGRSD3gbEfW5zPbcqGlNjooQYXMxoS8/TOKE=
Subject key identifier:   B7:89:16:1F:2E:21:E7:83:28:29:88:0F:4E:A4:75:D2:C3:14:D8:00
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer:       /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial:       01936B223E621F431F38CA801B967705E4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number:          12FB
Signing time:             Wed 27 Nov 2024 01:00:26 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:26 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:26 +0000
Files and hashes:         1: Jr-kcr-gaRi5J9xMRfB2x4R6aSg.roa (hash: de2XAZn6WEIpiJNbiO7COB2x1CovMfiKEyCmWkaQNGU=)
                          2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: tLeaYxXwbTm8+LCaiZLvOo8EEq4c007fqcpgA72/MRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:3e:62:1f:43:1f:38:ca:80:1b:96:77:05:e4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
        Validity
            Not Before: Nov 27 01:00:26 2024 GMT
            Not After : Nov 28 01:00:26 2024 GMT
        Subject: CN=b789161f2e21e7832829880f4ea475d2c314d800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:9f:18:06:bb:ba:0b:5c:25:a0:bd:a8:ff:
                    14:a6:9d:3c:f6:9e:b7:c5:6e:57:90:fe:95:1a:12:
                    7f:d6:91:d3:d5:9a:cb:c0:48:b5:74:78:51:14:f8:
                    96:d0:69:22:5a:29:2b:2e:63:49:11:f5:62:83:ca:
                    cc:34:9c:c6:e8:02:0b:42:a6:89:69:6c:7e:24:bb:
                    b7:2c:d0:74:3c:e7:19:9e:b4:71:56:15:64:e3:51:
                    d0:a7:8c:a3:a9:26:6c:6a:ce:d7:c8:5b:6b:a6:be:
                    eb:7f:8e:27:44:ef:4a:2f:01:27:4e:5d:32:bb:55:
                    ea:7d:a5:ea:bc:5a:67:46:e3:8d:65:d6:4c:65:c2:
                    2f:8d:ae:46:64:f2:5d:61:e4:54:ba:2b:35:cf:51:
                    22:42:d4:f6:49:5c:c6:96:4f:a5:a8:33:80:a4:82:
                    38:3a:75:21:0e:cd:a1:3f:d6:39:c8:1f:14:45:ec:
                    bc:6e:ce:3f:d0:2b:5a:3f:26:30:18:2f:fe:58:d9:
                    5b:6d:f9:c9:a9:06:14:98:86:0d:f2:84:ed:55:e6:
                    21:78:1d:95:ce:c7:c4:ca:e7:11:5e:0c:c4:97:12:
                    fc:f7:7a:a8:0c:ba:b3:5e:51:85:86:a1:3e:c1:41:
                    3a:10:b2:8f:27:ca:e8:ed:00:2b:77:55:43:91:90:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:89:16:1F:2E:21:E7:83:28:29:88:0F:4E:A4:75:D2:C3:14:D8:00
            X509v3 Authority Key Identifier:
                keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:2a:41:7f:d6:af:e0:21:6f:93:52:1e:16:eb:3d:34:58:
         4b:ef:a5:0b:2a:c2:e4:b1:e3:05:7e:d4:ca:d2:7f:2d:80:c8:
         f9:d2:14:9e:7c:b5:85:64:3d:e6:ba:19:a0:45:bc:77:39:e8:
         e2:b6:49:3a:33:08:29:f2:65:eb:5d:84:e9:1b:2b:21:ff:eb:
         e4:2c:9d:2d:ee:7f:bd:8c:24:6b:55:b5:44:e6:78:60:92:69:
         fa:e1:09:3c:5f:db:e1:cb:35:1a:04:9d:3e:ca:8d:f4:21:0c:
         a6:72:96:db:cb:d7:81:a8:0f:98:ad:39:94:e2:a0:4c:6c:65:
         4a:8d:1e:4a:9b:d4:9b:4c:55:5e:96:91:e4:f7:a3:5f:98:82:
         1a:ab:62:74:da:01:d7:c8:d3:b9:bf:92:5a:88:2b:c8:90:70:
         8b:4c:dd:72:eb:ce:b3:15:e0:47:f3:ca:e4:f9:37:96:f6:1d:
         26:0a:1a:ca:7d:0c:a6:a9:9e:26:7e:ae:04:8b:f2:a7:49:17:
         94:fb:8a:1c:6c:57:b4:bc:4d:e3:8b:21:d2:cb:e9:d2:ab:22:
         0a:e7:1a:bc:32:80:b2:d1:a8:bf:50:fc:cd:87:f6:ee:d1:b4:
         ad:7f:81:00:43:05:89:1d:88:c0:ee:50:9e:ea:3d:de:46:2d:
         d6:a3:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:55 2024 by rpki-client on console-ams.rpki-client.org