Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File:                     YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier:          a2ENau/DQJYoHXfxSQ34y3GHoJmOu3YGjVXjfHyeXHk=
Subject key identifier:   F9:29:B4:04:49:E3:EC:A2:B9:E3:F3:8B:6D:C5:30:9D:67:E9:99:FA
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer:       /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial:       018F92E08718ED643C25854A5921E7E6F93A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number:          117F
Signing time:             Sun 19 May 2024 22:02:19 +0000
Manifest this update:     Sun 19 May 2024 22:02:19 +0000
Manifest next update:     Mon 20 May 2024 22:02:19 +0000
Files and hashes:         1: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: biqI4Tg+Wf68TX7DJSjoouxFw2JYyL9Rac/9eSFejhU=)
                          2: jaEw1AsqgacAiiBJYASIrMM8Lb4.roa (hash: +Ktl7fT0mJZfsu/U2l8V9zehp9roBmzOhZpILubCafM=)
                          3: nUgqoUz4Pv4voyh33KKnWYOsykg.roa (hash: ZWjddk9pT2TY3Apak9BZyAsDcrdXE5+FTy3jXGv3+jg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:e0:87:18:ed:64:3c:25:85:4a:59:21:e7:e6:f9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
        Validity
            Not Before: May 19 22:02:19 2024 GMT
            Not After : May 20 22:02:19 2024 GMT
        Subject: CN=f929b40449e3eca2b9e3f38b6dc5309d67e999fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:e1:a5:36:70:0e:9e:f0:ed:5a:9b:d6:b5:
                    dd:a3:16:52:9c:9b:5d:7b:0c:87:1f:8a:b0:32:2a:
                    a0:08:0a:10:36:70:61:39:67:4e:89:09:ce:97:84:
                    85:81:44:d9:36:38:10:53:74:0c:d2:61:d2:f0:5b:
                    b7:da:51:28:ad:e8:80:48:ff:8d:b1:ab:85:a4:85:
                    4e:98:b1:89:e4:cb:21:6c:e4:29:ff:1d:da:c7:92:
                    08:d4:dc:4f:ca:1b:64:c6:95:76:40:e9:8b:e6:30:
                    eb:26:67:0d:9e:6e:21:88:ae:56:46:5c:ec:cb:5f:
                    d1:f2:4a:c7:98:97:65:53:67:a7:9c:6c:3e:81:50:
                    d4:c1:89:73:7a:0c:0f:0e:63:3a:46:60:a1:fc:64:
                    21:98:99:3d:cc:35:a2:69:63:f5:4a:8a:f8:eb:ac:
                    e0:c0:9c:16:de:3e:92:a5:fe:7f:9b:66:c2:5e:97:
                    0e:2e:83:a7:ac:56:02:74:4e:fe:1a:a3:e1:d5:75:
                    04:9c:4f:c6:05:c9:5a:cf:7a:a3:f1:16:ea:85:b1:
                    96:c7:d6:ac:d6:46:0e:80:64:82:4f:1e:65:7b:f3:
                    ff:e8:f1:86:cf:40:b4:1c:f1:b3:05:41:29:cf:9e:
                    ad:fe:4f:04:bd:3f:b3:e8:95:75:d8:ea:6a:6c:43:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:B4:04:49:E3:EC:A2:B9:E3:F3:8B:6D:C5:30:9D:67:E9:99:FA
            X509v3 Authority Key Identifier:
                keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:34:11:27:f0:d6:c1:1a:e4:44:47:1e:96:5f:50:82:9e:26:
         de:f9:9a:f2:33:69:d6:f7:ab:5b:a8:2a:96:42:a5:0f:3f:44:
         57:86:27:79:e3:db:cd:c3:61:2b:12:3c:c1:87:4f:af:2d:5b:
         46:8e:9f:28:65:35:cd:d6:6a:ba:2d:e5:fc:a3:8a:f1:66:63:
         72:03:a6:3d:ac:27:af:11:ba:c1:8a:3e:08:5c:fa:9c:73:2c:
         35:0f:af:09:71:e1:27:7b:80:4e:1e:49:b2:bd:57:bb:06:65:
         de:1a:b7:80:79:14:e8:70:d9:ea:cc:5c:7d:5b:6b:19:62:37:
         42:ff:57:43:91:8b:e4:0f:a8:ad:81:50:d3:19:33:f1:0f:f0:
         77:c7:08:31:41:95:f0:71:81:3b:d6:60:d3:91:f1:b4:4a:45:
         93:b5:09:b0:a4:25:a1:b6:a7:28:dc:fa:8e:da:49:4c:dd:80:
         92:0a:bc:c3:a2:20:6a:e2:b0:e0:4c:cc:d2:f6:15:bc:66:fa:
         91:dc:b0:e4:8d:bb:93:b4:95:5b:7e:3c:d6:d1:5f:f9:39:af:
         9a:b4:8e:50:84:b0:e3:28:e4:14:e1:06:c9:da:48:bc:3a:50:
         27:e4:1b:cc:09:d3:2a:ab:89:30:68:88:22:3c:f1:a7:a4:6f:
         9c:95:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:14:06 2024 by rpki-client on console-ams.rpki-client.org