Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
File:                     YHZWuPfoG1FJtIYPgSex1OO0h9w.mft (raw, json)
Hash identifier:          qwfAcwYDbVnnKAP2JwWJloEdo4olGnTUo7lW2AsmYo8=
Subject key identifier:   90:42:E1:78:E9:96:AB:2D:91:D6:1E:7F:47:43:8F:F3:1F:11:99:20
Authority key identifier: 60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
Certificate issuer:       /CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Certificate serial:       018F87ED69AAF95B62297119B7C22082270E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
Manifest number:          0789
Signing time:             Fri 17 May 2024 19:00:34 +0000
Manifest this update:     Fri 17 May 2024 19:00:34 +0000
Manifest next update:     Sat 18 May 2024 19:00:34 +0000
Files and hashes:         1: YHZWuPfoG1FJtIYPgSex1OO0h9w.crl (hash: N62XQ37ihptzI3/D9cZ0WusimCnHu0aQIJjqafnqjJY=)
                          2: qu7QFHVCLA6guj9fURHliCsYkE0.roa (hash: M82s3unt+jH6LlnZBIb0NRlb6/BYe3Y0zRuCcWzosvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:69:aa:f9:5b:62:29:71:19:b7:c2:20:82:27:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
        Validity
            Not Before: May 17 19:00:34 2024 GMT
            Not After : May 18 19:00:34 2024 GMT
        Subject: CN=9042e178e996ab2d91d61e7f47438ff31f119920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:8f:a0:13:45:30:e7:b6:a4:e4:2c:e0:f7:
                    be:c6:cc:7a:31:1a:f9:75:b4:52:0a:b3:58:7c:09:
                    d9:74:72:29:30:04:6c:60:c3:e1:10:6c:19:dd:bf:
                    3d:c9:e7:c9:1d:9c:86:fe:6f:85:f1:57:40:7f:90:
                    ef:0b:ef:2d:b7:f0:2a:30:e5:43:c9:ed:1b:51:5b:
                    39:20:af:f4:33:e2:37:59:5d:8b:07:28:02:f2:14:
                    73:61:bc:24:33:7d:9c:b9:8f:c0:33:49:ef:56:9c:
                    cf:be:f3:82:40:17:9c:d2:66:46:23:a2:83:f0:ca:
                    86:f7:4e:23:93:cb:eb:d2:42:96:de:3e:24:94:df:
                    4a:81:8b:e2:50:90:22:2b:ac:25:a2:65:fc:c4:5c:
                    c4:2e:f9:8e:b4:16:30:ce:02:62:f1:af:33:14:81:
                    a0:1e:01:e0:99:37:5a:83:43:44:aa:0a:12:63:1b:
                    f6:9c:0e:48:6b:e5:b0:fa:e1:b3:f4:67:0f:e7:7f:
                    44:30:4c:5c:76:b9:1e:45:23:ee:da:d8:de:52:09:
                    e9:60:0a:0f:c5:19:4b:88:95:31:d4:6a:fd:c7:79:
                    2e:79:18:9a:54:5c:38:b8:84:b6:f5:90:b1:3c:a4:
                    18:c9:c3:32:d2:a5:dc:6a:ba:44:f3:26:71:0b:89:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:E1:78:E9:96:AB:2D:91:D6:1E:7F:47:43:8F:F3:1F:11:99:20
            X509v3 Authority Key Identifier:
                keyid:60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:87:6c:94:8f:c8:25:4b:3a:43:41:2f:ea:ad:6c:52:86:c1:
         ef:ac:0d:1b:f3:ac:c3:c2:1e:a6:7a:c5:f0:cf:a3:22:0f:17:
         51:ce:b3:fc:8d:58:d1:d2:9f:2e:0e:a2:be:38:f3:11:67:d5:
         48:67:af:05:90:78:ae:86:8b:00:15:da:af:f9:54:37:a8:3b:
         06:2a:1c:d5:e4:c4:4a:b8:81:07:48:70:90:ad:e9:11:37:a9:
         3d:de:50:f9:3c:e5:dd:0d:3c:b1:01:a4:39:e9:3e:d3:3a:da:
         8b:02:b5:24:10:24:06:b6:ae:2f:4f:cc:28:5e:e7:c7:8c:2d:
         f4:03:be:d2:06:2c:36:06:6b:f6:50:fd:8c:d1:ce:70:66:09:
         2c:41:0d:4d:b8:58:e3:d6:6e:90:0d:47:d7:b3:bb:0c:ca:e9:
         7a:76:f6:df:ce:37:bf:8b:91:b2:bf:33:7e:d3:ae:36:17:7a:
         11:08:6e:72:3d:60:04:3c:61:28:83:a6:45:1d:69:84:8e:cf:
         c5:35:df:c9:c9:5e:15:10:33:b7:73:e9:9e:f9:d9:fc:b8:c9:
         78:bd:d6:66:49:64:22:00:cd:c5:75:ac:92:77:22:9f:d9:f7:
         3c:53:f2:16:06:4c:a5:45:42:90:78:f0:0f:2f:b8:08:2e:d6:
         3d:63:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:12 2024 by rpki-client on console-ams.rpki-client.org