Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          /CMFFqGhOTzzxQWhHJRlmvEdyIKnjJa9hx6ORauMeh4=
Subject key identifier:   87:26:70:8F:87:AE:7D:E5:3C:C1:E2:0C:07:26:81:71:15:B8:0E:69
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       019364E964948C0F38C007E7B6F1B81559C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          011D
Signing time:             Mon 25 Nov 2024 20:00:37 +0000
Manifest this update:     Mon 25 Nov 2024 20:00:37 +0000
Manifest next update:     Tue 26 Nov 2024 20:00:37 +0000
Files and hashes:         1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: EJb9Mwl7vR+BcqUnKTL1/yOvnUgI0zLHIV9GCU5oTPw=)
                          2: jKMFStCzdaRU_IZrUY2U3PafDJ4.roa (hash: YtDUhbFNlLPvRt34wtXc6MuKAvNxmrfz8G1SSco02Rw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:e9:64:94:8c:0f:38:c0:07:e7:b6:f1:b8:15:59:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Nov 25 20:00:37 2024 GMT
            Not After : Nov 26 20:00:37 2024 GMT
        Subject: CN=8726708f87ae7de53cc1e20c0726817115b80e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:26:6d:58:e8:85:b3:98:96:01:f9:25:15:
                    bc:70:07:a8:76:06:d5:1a:a4:a5:f7:00:99:71:39:
                    7a:b0:57:dc:31:d6:8d:6e:c0:92:95:34:93:31:34:
                    37:5d:85:60:4c:73:22:cf:68:3a:b6:c8:34:15:87:
                    e7:46:24:10:a6:84:1a:61:f6:6d:97:8f:8d:43:3e:
                    74:6d:e9:e5:38:1e:6b:dc:98:5f:53:a2:9f:ce:c5:
                    12:7d:d6:39:de:da:46:a3:4a:17:bc:12:f5:5b:b4:
                    a2:55:ce:76:d3:4d:ad:fb:fa:62:bd:76:9e:4b:e3:
                    42:ea:f0:0e:95:10:d6:2d:41:0d:3f:78:b3:e0:09:
                    d6:19:d7:13:b3:54:95:33:66:11:a1:de:1a:10:b3:
                    7f:4a:ef:a3:74:aa:8c:51:18:ee:ad:b4:0f:5f:0d:
                    36:37:9a:7b:81:16:44:ff:9c:7c:2e:d3:cd:e3:6e:
                    85:83:19:04:54:c8:46:a9:9d:3b:56:19:a3:0f:08:
                    a1:52:21:b7:f2:0b:55:b6:af:aa:00:27:7d:18:bc:
                    08:f3:28:26:a2:1a:ba:75:c8:bc:38:4e:39:16:87:
                    fb:bf:68:b4:65:c1:ff:e7:a8:89:b1:85:51:50:67:
                    68:9b:62:50:d5:59:94:3d:4b:af:5b:a4:01:b6:87:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:70:8F:87:AE:7D:E5:3C:C1:E2:0C:07:26:81:71:15:B8:0E:69
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:2b:75:28:de:1a:ef:a6:2b:de:2a:4c:9d:d1:22:7b:55:
         82:00:4b:92:d0:63:9a:1e:ae:18:b0:d5:4b:a1:9f:8b:27:8e:
         e1:21:8d:d2:5e:1f:c3:df:6c:30:24:e9:c9:5c:e2:a3:ab:a1:
         c6:cd:2e:b8:11:68:bd:43:cc:46:5f:d5:ea:82:37:1f:16:ad:
         3d:92:96:11:a9:80:23:7f:7f:71:f0:27:73:4e:cf:f3:10:35:
         a3:a7:a9:41:99:e0:3d:fe:25:8f:92:65:c8:f4:01:64:31:4a:
         dd:a1:30:f4:00:5f:bd:0a:4a:ce:e0:10:d4:fc:3d:86:c1:e0:
         2d:ee:b7:98:ad:6b:e7:0e:ca:60:ff:7b:d9:3c:95:21:c0:d4:
         7a:13:b1:16:b6:8e:ca:5c:cb:65:a5:2c:68:dd:25:80:58:58:
         74:89:b2:dc:07:7d:f7:ad:c2:70:4b:dd:62:88:b3:e5:40:ae:
         72:fd:3e:26:c4:18:4b:05:07:17:fa:ac:84:8e:1e:ee:55:19:
         7b:2a:ac:af:c6:eb:81:79:32:8b:2d:e2:8d:b5:1c:66:d3:2d:
         19:b8:8f:e7:0a:07:90:9c:12:16:92:57:dc:0b:9a:2c:f5:6c:
         22:2c:81:62:9f:a3:08:94:f0:04:09:94:ec:a1:90:47:70:a0:
         ff:6c:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:28:57 2024 by rpki-client on console-ams.rpki-client.org