Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File:                     YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier:          7/l5Sc8nUCQKy7+yrBjH6Wmtajvg9kt3qmvzZa6Sqzs=
Subject key identifier:   7A:A7:FE:FC:43:F3:C3:D3:FB:82:9F:25:16:39:1A:E3:03:38:4B:CB
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer:       /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial:       019351D0C2130367D0BEAC51C1B0F3DBE3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number:          0BC8
Signing time:             Fri 22 Nov 2024 03:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:55 +0000
Files and hashes:         1: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: d4nHMAHiVoKZ0X/Ut+GCnv9Pyo+37A9bBvLxdU/zP0g=)
                          2: flmv3jVhx5mYoEtORh0CYB3yOoU.roa (hash: yl1C5+lHLiLABF9IgF3maFdD+0lpUCDvrkOGpg7EZZs=)
                          3: z94U8MTjoqDVX5wFuAdnN6HCX7A.roa (hash: Aq4b4ZPxEwloP5saMievtC7T6GFU+J92DKWIJJo1NVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:c2:13:03:67:d0:be:ac:51:c1:b0:f3:db:e3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
        Validity
            Not Before: Nov 22 03:00:55 2024 GMT
            Not After : Nov 23 03:00:55 2024 GMT
        Subject: CN=7aa7fefc43f3c3d3fb829f2516391ae303384bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:14:ae:cc:80:f3:6e:a1:12:a6:bd:69:13:
                    36:44:40:40:09:6d:e2:44:fb:83:91:40:63:b6:21:
                    80:75:5b:3f:e3:17:f1:5e:5d:ea:e6:7c:08:51:33:
                    d2:3e:07:47:2b:1c:2e:51:c4:a7:3e:11:e8:3c:08:
                    1e:30:6b:8b:e0:e4:1c:30:ae:e5:d9:2d:af:08:ff:
                    fa:12:bd:3e:d9:74:2d:3b:c2:d2:9a:c3:73:cf:24:
                    8f:2a:de:2a:9e:5b:51:cf:71:1a:11:f9:6c:bc:c7:
                    1d:9e:20:56:25:aa:9e:d1:43:7c:c6:b8:14:51:18:
                    f0:bc:5b:19:ef:0e:cb:7b:10:2e:ee:dd:c4:53:3b:
                    8d:2e:f6:04:81:37:1b:3e:3d:80:c3:05:7d:1d:f9:
                    8a:1b:14:a2:98:f5:ee:b4:97:9b:9d:36:69:a3:38:
                    d4:b7:bb:31:fc:3e:0b:99:9d:fd:d6:e9:dd:d3:5f:
                    de:e8:bf:b8:cc:c6:e1:d9:91:91:83:41:53:1c:d4:
                    4e:6d:10:62:c9:72:1a:c3:27:86:3d:cf:94:71:d9:
                    55:7b:39:70:04:68:60:42:ff:7a:56:cd:66:37:b0:
                    3a:6a:9e:59:ad:47:59:43:df:d7:81:3b:e4:e0:40:
                    e9:d2:2b:89:18:d6:c8:1f:0b:e1:d3:a8:86:b9:ed:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A7:FE:FC:43:F3:C3:D3:FB:82:9F:25:16:39:1A:E3:03:38:4B:CB
            X509v3 Authority Key Identifier:
                keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:f2:e0:bf:e7:ef:03:47:39:ea:66:d5:8d:73:b7:29:45:
         d5:a5:fe:b7:f1:2d:4a:f7:8d:6e:d5:bd:da:48:21:cb:7d:e7:
         94:5c:39:44:1f:03:68:09:1e:8d:0b:ee:aa:b8:00:35:86:9e:
         d4:75:50:a5:79:8a:da:59:f7:a3:41:93:79:be:50:36:87:f8:
         a6:d9:21:fd:55:7d:73:2a:21:86:93:f2:a1:f5:27:b4:61:1b:
         d8:6d:89:5e:6f:af:eb:c3:83:f0:e7:3e:c1:d4:58:7f:87:b9:
         1a:02:00:b3:8c:01:23:b7:db:57:8f:5a:66:ab:8c:5f:53:df:
         73:aa:aa:6d:93:38:97:ed:6a:49:37:16:70:eb:45:31:b6:83:
         4a:de:b2:14:b9:b5:6e:0a:83:02:aa:af:02:a2:33:ef:a0:9a:
         5d:2b:0c:ea:a3:9e:ad:23:ed:da:9f:fe:f3:48:b1:33:c9:2c:
         ab:92:e2:10:51:aa:c3:99:62:ac:32:07:61:7b:da:2c:fb:b8:
         91:f4:ba:8f:bd:f8:79:04:77:3d:06:f4:b0:98:30:b4:e2:71:
         ef:f3:b3:09:6c:30:75:35:2b:77:49:ef:2e:96:0b:c5:5e:02:
         ac:50:51:39:90:39:0f:fd:1f:b3:ef:61:e1:57:cf:0f:50:ed:
         f1:89:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:18 2024 by rpki-client on console-fra.rpki-client.org