Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File:                     ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier:          phQYuHoBaBc0N8jy7p6Q0mqmRm9Bk/8vrDVge41UIC4=
Subject key identifier:   B1:BF:1C:D3:E5:B4:7E:90:2D:D9:03:1C:64:C6:F1:3D:A4:AF:59:ED
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer:       /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial:       01936AB4C183153F360B5A1E6FB61A5DD29C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 23:00:50 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:50 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:50 +0000
Files and hashes:         1: THk72XNffKwtPzEM3-n1CJi-G2M.roa (hash: QMYstTqrPR1BPdCK+0Nf+dnfTyW8gwwhOaPE4U+oFPY=)
                          2: iD_88y6pMmOYnc30jtDwiVj-rF0.roa (hash: ygWlZS/lLba0oCyAoa9nCXTrJirV5tnqR6+wDy7ThtM=)
                          3: pgR4KbeLq45E2YXWbBrRhAT3UPM.roa (hash: dRDJP/XBN42/UuoXW9BnzqyMUBkyYkYJjD4qwUYpDlM=)
                          4: s71TqajBuQCUiasb10QBS1tnECc.roa (hash: oTls+zraa7cHE+oH2qT/8v3XSXnWeIvr6cT2iV90fIE=)
                          5: u0yWGjsGblMulmXhzgMZ4EEWS0g.roa (hash: sFZGkiaYxnTmLVgxfL6kKuAoI41GCJdH/3liN7g/DOc=)
                          6: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: dYZ8Sx3rQONSegn4px+Zp/jfCMGLKKc04ilJgtNZO50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:c1:83:15:3f:36:0b:5a:1e:6f:b6:1a:5d:d2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
        Validity
            Not Before: Nov 26 23:00:50 2024 GMT
            Not After : Nov 27 23:00:50 2024 GMT
        Subject: CN=b1bf1cd3e5b47e902dd9031c64c6f13da4af59ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:91:bb:76:69:ef:8b:48:0d:1a:df:5b:77:
                    98:48:6f:f5:01:6f:a4:75:3f:ea:b5:58:3e:56:4d:
                    32:b3:c5:4b:b3:14:dd:54:17:19:be:b6:5b:fa:a2:
                    6a:ec:12:04:bd:bb:04:de:f2:e0:a3:c7:d5:e1:f5:
                    68:40:22:82:1b:d2:1f:84:8b:ca:33:bf:42:c6:32:
                    cb:54:65:d2:19:7a:54:4d:88:de:af:ea:8f:2f:a3:
                    af:b0:1b:fb:3d:55:aa:2e:72:ca:6b:5c:1c:b8:ae:
                    d6:52:7c:2b:56:64:7a:a0:41:53:80:56:e4:94:e4:
                    e6:15:73:29:4e:ef:32:95:50:bf:21:e7:3f:59:d0:
                    ce:99:b7:cd:de:5b:b5:c1:41:c6:5a:37:c3:32:34:
                    d6:52:72:60:ff:29:63:00:d0:cb:eb:c8:e5:c1:e5:
                    21:22:a9:bc:61:cf:49:72:f6:0d:d2:7f:5e:95:25:
                    a5:5d:39:c9:9d:8d:6f:42:5e:a3:4e:71:ca:8f:06:
                    45:13:32:50:ae:4c:50:97:92:11:16:0e:99:8b:08:
                    46:79:bb:70:e8:3b:f8:27:66:d9:1a:c1:b4:d8:5a:
                    eb:c1:94:a3:8c:88:c2:24:55:39:32:7d:5f:3c:d6:
                    5b:e2:1c:fe:b3:ed:ae:92:6b:5c:9f:c8:41:cd:e1:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BF:1C:D3:E5:B4:7E:90:2D:D9:03:1C:64:C6:F1:3D:A4:AF:59:ED
            X509v3 Authority Key Identifier:
                keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:96:22:cb:2b:22:7a:9c:2c:e1:71:b4:9a:6e:b6:4d:6b:
         99:2d:5e:ca:df:82:bc:04:b2:4c:e5:63:f6:be:08:47:99:15:
         fa:95:71:4c:cf:22:92:18:d4:9c:43:7e:2b:0d:e6:07:76:6e:
         27:45:64:cb:83:92:f0:5d:c3:ed:13:55:6b:1a:3c:92:cd:09:
         86:22:bd:e7:cb:85:1a:82:92:1b:2d:f4:a8:79:30:01:76:18:
         0d:0a:95:e1:3b:6a:fd:6f:e0:c5:15:51:ff:bc:01:33:67:7d:
         f1:ca:6c:f4:aa:4f:5b:d3:d8:61:7c:90:19:fb:13:93:d2:9f:
         9b:19:f4:cd:2b:80:9c:7d:15:cf:2e:88:1d:bf:10:0e:7b:ce:
         76:bc:8a:c3:a3:0b:6e:9d:5c:18:3a:d5:10:df:a2:1c:45:11:
         02:94:96:61:e8:62:87:14:d9:d4:41:47:74:5a:1f:c4:9e:e0:
         8d:8f:2f:bd:05:4d:3c:f6:30:36:68:53:35:a5:3e:3f:c6:82:
         48:fe:d2:88:4e:27:87:42:38:ac:fc:e3:10:1b:9c:cb:51:35:
         4b:b6:9e:5f:93:44:26:09:dd:57:bc:53:57:20:6c:63:c8:89:
         10:2f:2c:69:2d:8b:33:0b:cd:89:ff:33:72:f1:60:70:9f:b4:
         20:bf:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:11 2024 by rpki-client on console-fra.rpki-client.org