Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File:                     YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier:          /TDDrM8VjEobQ2wVYOKhIiF9+0FLgNUNLND9WPgs+8s=
Subject key identifier:   0C:1F:56:44:A8:1F:6B:16:38:57:3C:4A:43:94:7F:80:41:00:42:C5
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer:       /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial:       018F86A36686BADDB5A221DB910562655CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number:          0E79
Signing time:             Fri 17 May 2024 13:00:06 +0000
Manifest this update:     Fri 17 May 2024 13:00:06 +0000
Manifest next update:     Sat 18 May 2024 13:00:06 +0000
Files and hashes:         1: JmtgsDo5DNq-vhZ6IYVuhvzPgD0.roa (hash: WtuLUC0Aa5KAgIEp4S0FbLjHvrr18rVfsxxlE5lP0OA=)
                          2: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: rxhJIKKbjZkZ3kSvutmqNSOAht2b1SFO60w7V9Y/RJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:66:86:ba:dd:b5:a2:21:db:91:05:62:65:5c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
        Validity
            Not Before: May 17 13:00:06 2024 GMT
            Not After : May 18 13:00:06 2024 GMT
        Subject: CN=0c1f5644a81f6b1638573c4a43947f80410042c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8a:ae:b9:6a:f7:ad:d8:8c:d1:2d:f5:20:27:
                    49:eb:d0:fd:3c:05:13:ee:2c:6f:7c:2d:b2:75:16:
                    f7:95:22:7a:67:6c:90:13:00:5f:97:a9:9b:45:53:
                    6f:3f:62:38:88:ac:98:1f:3a:d1:d8:07:8f:6a:81:
                    bb:c7:b9:e7:73:ac:3b:7c:22:f9:df:ce:b7:a6:bb:
                    1b:a7:f8:cb:fb:c0:db:cf:47:60:ec:39:69:cc:2a:
                    f6:19:1f:81:00:29:df:4f:23:f4:83:0a:15:77:a4:
                    86:80:20:65:e8:b4:56:0a:b6:2e:a3:db:ae:5e:f5:
                    4f:ce:01:be:a0:8a:00:95:fb:37:9f:11:c4:aa:e7:
                    41:fa:ad:e4:01:63:18:1e:96:35:4a:37:36:e6:ed:
                    c1:b1:a8:ac:12:3a:d1:55:3c:b8:20:93:c2:c2:14:
                    7f:45:c0:5a:3d:d6:c9:65:24:24:65:dc:57:ff:d7:
                    83:9e:8c:3a:c4:d3:f4:03:e1:51:7f:62:27:b9:cb:
                    0a:75:77:eb:07:6b:ad:a7:47:17:4c:7c:e4:28:5f:
                    ff:64:d9:87:bb:55:03:a7:70:7f:1e:e5:31:40:3f:
                    24:3e:15:c2:32:d5:2d:ea:91:fd:17:65:99:fd:7c:
                    27:a3:2f:42:3a:1b:b3:03:f2:49:03:82:6c:42:ad:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:56:44:A8:1F:6B:16:38:57:3C:4A:43:94:7F:80:41:00:42:C5
            X509v3 Authority Key Identifier:
                keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c6:bc:50:d9:39:6e:ab:8a:96:63:65:67:7e:5b:fe:f8:ed:
         4a:35:54:73:8d:8d:85:f9:d9:9b:c4:3d:b3:3d:82:3c:bc:87:
         c9:68:67:af:00:7e:6c:16:37:4e:1f:ad:76:b0:83:74:c3:04:
         68:6f:6b:4a:7f:02:dd:53:47:c4:01:fd:5b:35:18:ea:f8:36:
         8c:42:d7:5e:5e:6a:8a:35:fd:b4:98:4d:bb:48:22:f3:77:06:
         80:36:17:32:40:77:ad:76:54:20:f8:fe:fe:10:ab:8b:36:6e:
         5e:3c:dd:69:98:fa:75:1b:61:c7:12:94:bd:29:a6:f8:e3:3c:
         2f:d1:9a:05:62:7f:54:67:d3:30:ed:d4:6f:31:03:f0:93:2d:
         69:b4:53:48:da:74:9d:a9:15:c1:aa:1f:6d:13:46:e9:8f:2f:
         6f:7d:f9:27:39:aa:00:02:e2:a1:79:d8:76:5e:50:d0:ef:a2:
         64:fb:35:d1:36:d8:10:6b:5d:23:a7:e9:46:66:6d:a5:c6:0b:
         26:9a:b9:a2:49:75:76:22:19:cd:20:68:36:28:4e:27:0b:98:
         55:b2:32:06:ba:cd:6d:ff:08:e7:56:40:40:b7:dd:bb:a8:f4:
         88:a6:3a:5e:53:de:48:d4:49:97:7b:90:7d:62:44:79:12:ac:
         60:cd:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:09 2024 by rpki-client on console-ams.rpki-client.org