Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File:                     YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier:          jqBO7j+/iPrwoSSnay5rhVJdOU61V3GZTJD+Om63a1o=
Subject key identifier:   D3:4B:37:13:00:21:13:1C:4F:21:C9:23:B4:38:CD:7F:07:29:8E:62
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer:       /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial:       018F889254DFF85F23284405E32B5581F5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number:          1041
Signing time:             Fri 17 May 2024 22:00:42 +0000
Manifest this update:     Fri 17 May 2024 22:00:42 +0000
Manifest next update:     Sat 18 May 2024 22:00:42 +0000
Files and hashes:         1: BdRM9K7TQEUBCm8mNqXxpNBvQRM.roa (hash: sA7GqgsjxyxNsUOgslcoSdUFbKdxg5wZV3FNIpn9GlY=)
                          2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: j8zyJTJGiAlzGF1Hr6qLiiaU4LOYr9+oJnmpiZLIcLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:54:df:f8:5f:23:28:44:05:e3:2b:55:81:f5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
        Validity
            Not Before: May 17 22:00:42 2024 GMT
            Not After : May 18 22:00:42 2024 GMT
        Subject: CN=d34b37130021131c4f21c923b438cd7f07298e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:df:cc:1c:e5:86:17:e8:84:1e:63:ce:9a:
                    9d:4d:6c:44:be:d9:06:a5:9e:66:60:41:e2:84:43:
                    0a:00:82:38:53:86:02:67:48:f5:47:80:c4:aa:ed:
                    04:83:bc:ad:fd:ac:24:f0:a6:72:56:9f:92:36:8a:
                    ff:9d:9e:a0:ab:25:a4:47:8a:41:cd:c8:47:58:5a:
                    fe:6e:9e:fb:cc:00:b3:d4:75:83:f5:be:dd:36:d1:
                    e3:32:cb:37:65:be:fa:74:07:1c:3b:c9:7c:d0:72:
                    84:48:8b:59:e5:91:d1:e7:a4:66:2a:b7:6d:da:49:
                    fd:3b:e4:70:4f:ec:69:11:d7:aa:47:17:c2:38:a4:
                    75:27:07:9b:bf:0c:73:b4:5a:ad:54:51:79:70:b3:
                    1e:58:6c:49:ca:fd:22:06:93:20:be:70:bb:b2:94:
                    31:68:0f:89:53:5b:00:07:75:9d:28:54:f8:49:42:
                    e6:55:9a:7b:ef:42:1d:07:8a:d2:45:54:5c:46:1c:
                    df:c6:63:db:46:a2:30:4d:2a:28:6c:1b:d0:49:1c:
                    2e:44:b7:db:e3:f2:27:14:5e:8d:13:e5:20:c6:2c:
                    00:48:e7:35:ed:63:39:dd:71:18:55:a2:40:e7:a0:
                    ea:ef:61:fa:5b:63:87:22:27:82:7c:d3:59:72:be:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4B:37:13:00:21:13:1C:4F:21:C9:23:B4:38:CD:7F:07:29:8E:62
            X509v3 Authority Key Identifier:
                keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:77:d9:10:b7:81:67:a7:8a:b6:7e:ed:9f:c1:e0:9f:69:
         b1:f8:d7:23:57:43:8e:f9:57:ef:bf:20:dc:e0:71:07:4d:e6:
         21:46:52:4e:2c:1f:2f:75:11:c4:df:7d:21:4a:ae:56:7c:8d:
         d3:11:8e:68:80:1e:7c:43:46:15:10:8d:87:0c:57:03:29:56:
         4e:42:21:11:78:5a:b7:ba:5b:dd:05:b5:52:22:99:b6:52:ab:
         cd:ea:9c:93:60:3f:1c:68:0c:cf:a5:7e:94:b4:09:32:b8:92:
         7c:dc:4d:a5:1a:07:2e:d1:3c:e7:c8:2f:77:fc:45:0d:a6:9b:
         99:30:de:01:da:fb:c8:07:3e:33:09:73:c7:8d:39:ae:fd:cf:
         e9:cd:5a:60:f4:dc:df:e9:88:8d:a4:a5:f3:90:60:eb:b5:1e:
         f6:ce:65:d9:1e:35:58:f9:8a:4b:c0:7e:f2:eb:e2:1a:95:91:
         1b:9a:bf:04:aa:89:4d:a4:29:b1:c3:58:20:a5:31:b1:43:12:
         e4:0a:75:21:36:87:fb:99:3c:bb:82:69:1f:5f:3f:4e:d1:23:
         ba:d6:31:10:94:aa:93:5a:43:16:3e:ee:49:99:27:7b:85:84:
         8e:84:51:1a:f6:bd:14:b2:a3:fb:66:4f:e0:0e:c6:a1:9a:a6:
         ab:71:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:56:23 2024 by rpki-client on console-ams.rpki-client.org