Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File:                     yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier:          goGpBwL38bvi9DWSkjdDdOd6SCE7ykc91h6K5acaW8I=
Subject key identifier:   83:FE:F3:B6:73:37:54:00:5F:BA:22:33:01:31:F0:09:CE:B1:87:72
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer:       /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial:       018F885B54DBC4CE38959F7C5758D0A958A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number:          08B1
Signing time:             Fri 17 May 2024 21:00:37 +0000
Manifest this update:     Fri 17 May 2024 21:00:37 +0000
Manifest next update:     Sat 18 May 2024 21:00:37 +0000
Files and hashes:         1: JBoZ2X7VX15F3cJLu3WxsbAuW0c.roa (hash: 6m4rvIAC9+eDqtImENv/GkHJUXah7bPbBeR51s3k/ls=)
                          2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: Odk7pD0Wk0SG/7rcBu+zdRAeOfAhYlMolm/wO8Ck+84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:54:db:c4:ce:38:95:9f:7c:57:58:d0:a9:58:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
        Validity
            Not Before: May 17 21:00:37 2024 GMT
            Not After : May 18 21:00:37 2024 GMT
        Subject: CN=83fef3b6733754005fba22330131f009ceb18772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:14:22:f5:e7:1f:ae:b8:da:53:e1:8d:fb:
                    7e:7c:78:94:9f:e8:d8:9c:4f:57:71:c5:cd:cc:74:
                    37:2f:e4:17:f0:28:5a:54:8c:45:c0:bb:00:1a:b2:
                    64:ff:b5:e6:8c:98:dc:27:07:8e:7b:c6:af:77:87:
                    91:92:4f:0d:ea:97:db:2f:8c:a4:71:3b:91:4b:83:
                    81:35:bf:82:b9:f9:ed:1b:79:fa:7d:e7:60:46:a6:
                    ba:4e:cd:69:77:4d:ea:94:bd:59:67:84:1d:4b:03:
                    15:29:0b:16:64:b7:5c:f0:de:8f:dc:4b:5a:6b:1d:
                    c3:2a:31:84:f7:f0:ed:9d:81:a6:71:0a:b6:45:14:
                    aa:06:0f:62:ea:ae:da:ca:67:c0:0f:1e:3f:b9:7b:
                    54:a2:13:1c:a4:40:8d:b3:09:f9:ea:ec:7f:9a:13:
                    28:5b:dd:9b:7e:66:cb:ec:8b:5a:83:2d:db:f6:5d:
                    8c:b3:52:9a:c6:69:5a:fb:27:f4:cd:39:3b:3a:7a:
                    92:b0:17:5c:7c:47:ea:15:60:ae:d4:f8:81:34:90:
                    e6:7c:69:85:90:48:4d:a6:a5:77:18:be:33:f5:bb:
                    f0:66:af:6e:7b:c4:89:3c:5e:23:c2:bf:af:c3:42:
                    03:b7:51:e9:84:81:6a:9a:9f:56:6d:96:3a:6d:8a:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FE:F3:B6:73:37:54:00:5F:BA:22:33:01:31:F0:09:CE:B1:87:72
            X509v3 Authority Key Identifier:
                keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:f7:8d:83:89:26:54:db:a7:f9:0c:dc:b9:73:60:ec:bd:
         9a:29:b0:cc:ef:f6:24:d7:11:86:c3:f1:99:54:cd:02:1a:76:
         43:9a:8f:cc:03:d6:5b:ea:d6:84:80:51:b2:0d:30:d8:53:02:
         bc:95:0c:2c:3f:2a:96:a4:a2:de:d6:85:30:20:31:b0:ab:15:
         f7:69:f1:30:fe:93:33:93:ec:3b:df:d4:3e:33:9e:a1:b9:4b:
         ed:7a:09:fa:45:12:e4:76:cb:df:b8:59:82:9d:c6:76:49:92:
         3c:2d:9e:bc:dd:aa:43:66:2e:37:21:58:0b:80:6c:2e:70:a3:
         2c:b7:5f:bb:ff:bb:d8:f1:f0:18:82:b8:a0:a5:4d:c3:37:d6:
         56:94:e4:30:bf:a8:f0:a3:6c:ff:0f:36:b2:62:68:5c:3a:5a:
         01:c4:7b:66:8c:88:5c:d2:b7:b3:fe:05:39:19:4d:c7:a2:c3:
         1e:3c:e2:fa:b0:8f:0c:a3:ea:43:eb:c3:4d:d3:10:55:de:f6:
         ab:0b:de:26:f8:65:8d:22:61:6e:af:c1:16:14:c4:e9:2f:ea:
         18:b2:4b:a8:0c:6f:44:3b:3a:c5:ae:0b:fc:a4:ac:d6:d1:f4:
         22:d6:be:85:58:97:10:c5:66:f0:66:b0:a3:fb:ed:b3:60:92:
         33:3c:e9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:32 2024 by rpki-client on console-fra.rpki-client.org