Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
File:                     YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft (raw, json)
Hash identifier:          EL07TANWzKSkv+69DJN4lUR0NW49GGOlmHl8xgWm3tU=
Subject key identifier:   85:33:32:91:E3:EC:65:28:92:39:49:C8:B7:EA:58:C6:CD:DD:5A:36
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Certificate issuer:       /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial:       01935162C88BCB75F1B1E8254AC1C2F40E9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
Manifest number:          1393
Signing time:             Fri 22 Nov 2024 01:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:48 +0000
Files and hashes:         1: 1-_pkhqy77yXJobQSKKf2OxMtrPY.roa (hash: oM1whLnGUdae/Tke7seBv5294wRLaf+v6WPVXoAAu9Y=)
                          2: IlZoR2x97_iv64zVcVhi-DpZ6zQ.roa (hash: rgsurAG/aokLBHbdQ0ahkUNa3xNf3FIAuAdgZCMWqqs=)
                          3: YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl (hash: BV/MiU+rJyNPWPZtXGmeaBant0B+DQlXfWgat9mt35g=)
                          4: ciboWtyR7k6PmGqNFYVzCVO_ZvU.roa (hash: oz8ttf5TfYfUbzT8dJ6DOvjBHXHDWiaHLWk3+1QswGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:c8:8b:cb:75:f1:b1:e8:25:4a:c1:c2:f4:0e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
        Validity
            Not Before: Nov 22 01:00:48 2024 GMT
            Not After : Nov 23 01:00:48 2024 GMT
        Subject: CN=85333291e3ec6528923949c8b7ea58c6cddd5a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:ea:08:38:25:e4:11:71:40:8e:2d:90:1e:
                    ba:c3:79:d1:b2:bd:74:1d:cf:78:0b:72:ed:87:25:
                    58:33:9a:ec:fb:19:fe:bd:20:87:ca:21:bc:aa:0c:
                    01:c2:66:28:eb:a6:79:1f:b6:58:37:7a:12:1a:9a:
                    28:82:2f:77:34:6b:cd:1d:6b:9f:53:bd:fe:1f:35:
                    80:8b:b6:c3:e1:72:8a:82:66:fb:65:1b:ee:f0:68:
                    fb:2e:82:e3:85:58:00:fd:7e:84:41:f3:87:af:c3:
                    e0:fa:0b:38:5d:00:64:0f:3b:23:21:20:03:5a:c9:
                    9c:7d:f2:7b:e3:1c:32:46:58:27:92:af:de:e1:cf:
                    a7:87:e9:25:85:84:16:44:a9:90:82:58:bf:b9:13:
                    c5:3a:4c:cf:61:d3:ad:20:01:d0:98:16:04:91:95:
                    48:78:98:81:f4:b0:86:b0:78:f7:d4:f6:bb:12:fa:
                    45:85:40:27:f8:3c:a1:34:d8:45:a8:7b:af:13:f0:
                    bb:68:39:e3:b8:45:78:b7:43:20:6b:0f:a8:51:84:
                    fc:d3:4b:5f:41:95:09:e7:f1:16:73:ca:e8:e0:39:
                    0a:32:4f:7a:39:c5:1e:d6:d8:8c:e5:5e:b1:65:01:
                    24:28:70:c2:bf:4b:03:09:c7:fd:60:79:ba:0b:1b:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:32:91:E3:EC:65:28:92:39:49:C8:B7:EA:58:C6:CD:DD:5A:36
            X509v3 Authority Key Identifier:
                keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:11:1b:9d:0b:71:4d:97:51:90:79:ab:09:a1:59:25:1a:67:
         05:a1:cd:99:98:39:a8:94:29:ea:68:21:3f:12:67:b3:77:db:
         3b:c0:71:69:5b:c9:79:46:6b:f4:62:9d:bf:95:fb:e8:81:8c:
         21:ad:c4:62:9a:50:d7:0b:31:db:a7:95:6f:3a:ad:88:c3:7d:
         ac:fc:6a:8b:06:1e:93:39:cb:f2:81:85:f6:1f:f3:82:c7:10:
         57:ca:6e:c5:c0:6e:8c:23:f4:8c:c2:6d:eb:21:e0:4b:f2:86:
         4e:fb:65:45:e8:55:28:0c:6f:25:de:91:09:0c:01:02:d5:e6:
         37:24:ec:0c:40:5f:18:28:df:3a:9a:f9:ff:1d:c0:31:3b:ee:
         ae:7b:d1:35:c4:3e:55:84:7d:06:ce:27:6f:ee:2f:57:e8:2e:
         5d:2d:53:c1:d3:af:53:59:da:5d:06:50:c7:4a:b3:e6:08:16:
         81:de:bb:f2:ea:c8:5c:a4:b9:75:0c:a3:81:1a:52:ba:01:8f:
         23:ed:b1:36:3e:da:8f:29:18:57:9c:a5:f1:53:70:b8:67:5e:
         63:81:07:fd:ae:52:ee:9c:f4:79:17:e3:4d:c1:96:67:34:76:
         c6:29:a0:50:b3:0d:41:09:9b:b2:b9:a9:f9:e2:cb:66:b3:ab:
         72:fc:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:20 2024 by rpki-client on console-fra.rpki-client.org