Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          B2XqjVQhqbj0VIvtGWwKLaFXPrYhhDEeNO/aVJ/SWGk=
Subject key identifier:   AC:81:B6:42:D9:FF:30:18:6B:B2:86:5B:64:D8:75:B5:46:A4:45:D3
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       019369DA453267C9FD105CA5C057448BBEA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          130E
Signing time:             Tue 26 Nov 2024 19:02:12 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:12 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:12 +0000
Files and hashes:         1: G1ndeUk9qPKHWDD4dz4eBTj-ybQ.roa (hash: ZLcwK+2y9c0o1JqTu+wN007mOJ2gOXWktha3K/D/Tzk=)
                          2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: DUY0YB7oBRuYtPGBtkoPKe2D3iGt4oCESGpj+wndxmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:45:32:67:c9:fd:10:5c:a5:c0:57:44:8b:be:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: Nov 26 19:02:12 2024 GMT
            Not After : Nov 27 19:02:12 2024 GMT
        Subject: CN=ac81b642d9ff30186bb2865b64d875b546a445d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:49:52:26:d9:35:27:27:d4:fa:7e:65:ac:c5:
                    85:01:9e:30:0c:f5:3a:07:be:62:2f:8b:45:7b:8f:
                    7d:2d:46:6d:05:3c:2c:67:e3:a6:92:ab:d9:5d:ec:
                    61:79:15:ff:09:3f:5e:1f:e4:00:cf:ee:e5:af:7c:
                    b4:54:3f:33:36:e7:73:a1:f6:9c:e2:bc:ea:16:81:
                    37:53:8a:d6:34:0b:fc:0f:4e:8d:34:09:08:0c:b1:
                    cf:41:95:4b:35:42:15:8b:a6:ea:cc:5f:12:fb:bc:
                    3e:0d:45:e9:02:9b:93:e4:17:fe:ab:7c:be:3d:cc:
                    9a:b2:33:13:ee:98:7c:1f:95:20:50:a4:2d:e7:c4:
                    b5:4d:c6:44:62:70:da:6c:69:cc:00:00:2e:b8:db:
                    ad:22:96:dc:81:a1:47:41:b0:66:4b:d7:59:82:be:
                    3b:28:50:e1:fa:24:82:26:40:c4:33:9b:2d:15:ab:
                    e7:26:16:fd:53:34:7f:3f:34:8e:92:41:37:8e:81:
                    95:6a:8c:cf:ae:7d:53:36:f8:3e:d5:67:78:45:65:
                    e3:ba:d8:8c:d7:e5:1f:5e:a4:ba:6e:7d:5e:1c:3b:
                    ae:59:a8:0e:be:9e:25:90:c7:2c:f8:86:97:9e:fc:
                    28:ba:7f:f9:71:37:91:41:65:f1:16:20:1f:a5:90:
                    0c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:81:B6:42:D9:FF:30:18:6B:B2:86:5B:64:D8:75:B5:46:A4:45:D3
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:31:75:58:c5:40:63:e2:4a:4e:78:65:be:7a:31:c7:5d:
         b7:48:76:a6:20:f0:a2:21:7e:b5:d8:7c:32:a2:a4:c5:29:84:
         70:cf:ab:5e:34:d5:0e:38:e8:20:19:49:a9:1d:81:d7:f8:72:
         10:0b:f5:10:0b:64:0f:37:19:5b:18:5a:87:8d:90:19:23:a4:
         4a:47:ad:b3:4e:eb:f5:11:bf:34:73:d3:a8:e6:53:86:0d:1c:
         4d:44:a5:3f:5f:a2:d2:12:83:7c:ca:0d:38:d9:14:f4:15:b0:
         ff:46:15:1a:45:2e:4c:cd:79:41:61:15:04:9d:8a:cb:b7:34:
         54:54:91:f5:58:aa:30:dc:6b:18:be:17:6a:7f:60:ff:f9:6b:
         65:07:22:5b:6a:66:1d:7b:59:0a:b4:cc:df:7a:52:33:58:e7:
         2b:2b:69:cd:13:93:ca:cc:d0:a6:b9:14:17:28:bc:7f:86:17:
         ca:ec:fa:02:ae:d8:90:f4:08:fd:c9:f8:19:6c:03:bc:b5:7c:
         7b:18:16:e7:49:13:8e:88:df:4e:0d:96:72:d1:2b:3b:9a:e3:
         08:14:03:cb:54:90:09:b3:b0:29:5d:a0:06:ca:2f:72:60:40:
         ac:82:f6:8b:6f:01:81:a7:89:36:f5:0c:ac:4f:ff:94:77:b1:
         6d:e9:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:08 2024 by rpki-client on console-fra.rpki-client.org