Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File:                     YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier:          RlF3W2nYJA9YA6mE6qDG6tILweYxDRIyZ82ZZRUVKeY=
Subject key identifier:   FE:8F:5A:E7:5E:8C:AD:8A:77:7B:40:7B:A6:9E:8D:B4:FC:25:FA:8D
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       0193516260A93802F3110281D55C4458F2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number:          0264
Signing time:             Fri 22 Nov 2024 01:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:21 +0000
Files and hashes:         1: 2L3SEp9aMtIJk721QKD1Z2QBw-8.roa (hash: a9/6OxVRukRZdko+PvqA45JYtpg6pC9UXEAJgHtKdz0=)
                          2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: OC57PTNzb8MDVv6l7tCSOi6jouUvDMIhtls3bcuC1lI=)
                          3: s_DDJizQ3TiI67jqXBNw2sapKdQ.roa (hash: enW01zgoGhwaDk423V0FneC+QFsXIZueUaegj6oOCFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:60:a9:38:02:f3:11:02:81:d5:5c:44:58:f2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Nov 22 01:00:21 2024 GMT
            Not After : Nov 23 01:00:21 2024 GMT
        Subject: CN=fe8f5ae75e8cad8a777b407ba69e8db4fc25fa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:93:ee:f9:91:b0:29:d3:2f:68:a8:48:d7:
                    12:36:b4:3e:2f:0a:18:7c:df:72:cd:ec:2c:53:93:
                    90:58:6b:84:b5:32:59:4d:a1:58:a0:f8:04:dd:77:
                    29:6b:84:6c:18:80:54:30:28:07:54:f2:21:54:f4:
                    be:5f:71:5a:70:07:01:41:69:03:cf:68:20:65:b4:
                    1c:7b:71:4c:9f:80:c2:9e:a3:7f:91:4b:47:26:4a:
                    ae:92:91:66:fa:0a:71:01:37:01:34:be:ca:42:7b:
                    c5:72:c5:20:e2:90:53:c2:60:4c:43:a5:2f:3d:2a:
                    bd:39:29:6e:07:c9:45:4d:61:9d:05:0b:2c:a2:08:
                    1d:f7:d8:44:a1:ed:b5:4f:8a:6a:d2:b8:1e:b7:66:
                    26:eb:52:b2:a4:e4:33:2e:f3:26:57:92:e5:f1:de:
                    4f:b5:d4:b6:1f:7a:75:14:59:06:cb:7c:d0:b6:d3:
                    fc:5f:05:0d:91:a6:62:7f:e6:95:c3:13:10:15:73:
                    aa:77:ac:86:64:33:30:db:f2:4d:72:cb:b4:84:a7:
                    a5:bc:c7:62:2a:a1:9c:84:e8:7f:e4:67:a8:d4:75:
                    80:3f:7d:7a:a7:3a:e2:78:e0:9f:b7:ad:fe:d7:2f:
                    62:f1:9c:c9:31:e1:5f:44:03:f1:c3:ca:28:7e:aa:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8F:5A:E7:5E:8C:AD:8A:77:7B:40:7B:A6:9E:8D:B4:FC:25:FA:8D
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:49:6c:fb:9f:b9:d2:42:f6:05:77:24:70:17:4c:be:04:
         d6:b3:06:4b:fd:62:ed:0a:3e:f2:44:37:36:4e:11:06:03:90:
         e3:28:4f:35:d3:fd:69:02:24:07:48:ef:b2:a8:b3:f8:59:18:
         a4:ef:66:c6:62:54:59:cd:93:7f:09:5d:8a:1d:f8:4e:e0:b9:
         5b:18:32:db:bd:24:55:15:6f:93:de:85:97:45:de:03:9d:7a:
         9f:73:e8:b9:07:ac:38:ac:cc:73:ee:90:82:6b:82:db:5e:d1:
         dd:b8:1b:45:70:de:26:e2:ce:2e:a1:26:df:f9:d9:9f:06:d2:
         bb:79:a8:14:51:a0:20:60:7c:36:97:a8:bd:7c:77:91:70:32:
         2f:4b:64:00:ff:59:fa:cd:68:ba:b1:3b:48:97:b7:21:c4:e9:
         c5:89:ea:d4:7a:2a:26:dc:5e:41:d1:db:1f:09:85:2e:f2:47:
         ed:f3:16:a8:16:cc:ea:5e:1e:46:4e:13:b3:80:bd:fa:d9:24:
         6d:ac:fd:db:c6:66:57:b8:52:25:c8:64:70:80:86:60:54:10:
         07:6e:0d:eb:cd:c6:61:ec:dd:3a:e5:7e:ab:61:8c:fd:ea:c1:
         a1:38:8a:c3:47:d4:b5:66:13:bf:3a:fb:21:3b:08:97:88:19:
         50:4e:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:07 2024 by rpki-client on console-fra.rpki-client.org