Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File:                     YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier:          1NDmFyRyFM2u4y+5SjG2KMvDgK57joe6TbgVsEAegow=
Subject key identifier:   EF:C4:F7:95:56:E2:A7:00:92:38:C3:B2:DA:0A:5B:05:EC:BC:87:6D
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer:       /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial:       018F87498D62ADC05EF63FF3F1C913F95A4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number:          0C3B
Signing time:             Fri 17 May 2024 16:01:35 +0000
Manifest this update:     Fri 17 May 2024 16:01:35 +0000
Manifest next update:     Sat 18 May 2024 16:01:35 +0000
Files and hashes:         1: N3TbndfGUvkycvdp2Tfa4aoG_U0.roa (hash: WnxU5jwJ8u1mIoeqJPOK5dBFCNE0dGVFlfGDh1mvj5A=)
                          2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: qVDWqx6NjXhI99vobA1j6OutmBw1ZmnJFq67DF/LT3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8d:62:ad:c0:5e:f6:3f:f3:f1:c9:13:f9:5a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
        Validity
            Not Before: May 17 16:01:35 2024 GMT
            Not After : May 18 16:01:35 2024 GMT
        Subject: CN=efc4f79556e2a7009238c3b2da0a5b05ecbc876d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:47:3c:dc:e9:1b:e2:37:97:f9:55:8d:ec:
                    1b:30:11:ab:1d:3e:0b:0c:d0:a9:db:81:9f:2a:e1:
                    14:df:91:a6:38:04:ed:e5:8e:ec:be:3f:43:a4:20:
                    9e:52:ad:b3:67:29:92:57:47:b0:0e:a2:b3:f8:7c:
                    59:c9:4c:89:f4:55:d2:07:e7:71:94:f3:e9:a2:07:
                    c0:44:1c:d4:55:2f:52:4e:a2:e7:72:e8:b6:45:27:
                    60:5d:23:bf:30:8d:e7:32:18:c7:f2:64:f0:29:59:
                    63:ca:5a:d1:c3:92:9b:98:1e:54:2d:41:12:0e:1a:
                    5e:21:9b:06:6d:d5:52:8c:b0:37:68:38:86:56:6d:
                    45:28:44:20:58:ae:bd:03:d3:bf:90:cf:9a:2b:e9:
                    ad:cd:02:bb:f8:53:8c:59:40:34:57:1d:1e:a9:88:
                    91:7a:80:85:1a:05:81:eb:98:0c:44:5d:ad:03:2a:
                    17:62:5c:9e:bd:6d:f4:fc:1b:7c:d7:10:43:c7:84:
                    d0:20:10:f6:32:15:3a:13:5c:36:11:67:5b:33:58:
                    f6:05:cf:93:d2:64:29:9f:9c:3c:93:2a:6c:87:06:
                    a7:88:9b:a4:3b:f5:7b:aa:82:71:1c:47:0e:6e:01:
                    3b:93:4e:58:57:03:f2:05:50:9b:90:fa:92:a8:4d:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:F7:95:56:E2:A7:00:92:38:C3:B2:DA:0A:5B:05:EC:BC:87:6D
            X509v3 Authority Key Identifier:
                keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:89:ab:24:c6:f4:44:ca:10:1a:f4:85:e7:70:1d:ab:ae:
         5c:b6:3c:dc:7c:2b:cd:e4:be:45:43:39:e5:14:dd:5e:88:1d:
         50:4c:65:ae:1a:d8:f8:8d:5a:96:60:82:ba:94:5d:08:a8:0e:
         f2:89:cb:23:9b:3f:c3:85:ae:b9:91:8f:ca:bf:b9:1b:99:c0:
         d9:d4:51:d1:e4:54:1d:ab:72:34:51:23:f3:f8:c3:f2:f6:8b:
         91:60:ae:7f:f5:f6:1c:99:81:42:f0:aa:c3:0b:e6:e8:f0:4d:
         de:08:b8:19:7a:33:04:22:5d:74:94:45:1d:50:ce:f3:f5:b8:
         40:42:e7:af:07:d6:4a:8e:f1:7f:04:1f:3b:62:6d:6b:11:26:
         fc:74:58:6d:11:36:e0:ca:31:e9:ce:fc:35:f6:90:59:92:99:
         dd:55:6f:ce:c3:19:30:10:42:75:95:bb:a0:9c:13:f0:50:0d:
         38:23:32:03:c5:68:22:85:3f:75:ad:a8:57:ca:f5:08:72:b9:
         9a:57:a6:0f:a2:d8:9f:16:e8:39:d5:d6:90:9b:80:30:ba:c1:
         72:43:f2:f8:28:5f:57:28:a5:ec:aa:f7:1b:7e:c2:6d:19:c6:
         61:a9:bf:62:07:0f:1e:2f:61:0a:b8:78:e9:87:32:1f:95:d4:
         9b:ed:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:36 2024 by rpki-client on console-ams.rpki-client.org