Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File:                     ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier:          80gAzffi7RDbbIUYXgpvbTcD4qSFddvi04VKqHRVP9w=
Subject key identifier:   CA:37:B4:97:31:93:5C:61:8C:34:08:B4:A1:78:07:31:AA:C2:02:81
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer:       /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial:       0193587918C2B1358AEDFE3445FA52294BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:02:31 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:31 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:31 +0000
Files and hashes:         1: HDiriWbUUICCN3bosu0VLxeBKy4.roa (hash: r0AO2sXEQkWwK679jfEp7AeV1pQPaI4LHcasTVuWJd4=)
                          2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: E8b5zTFbeUuJIrgVxlPTWBSxyL7++n24uCII7gyi81M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:18:c2:b1:35:8a:ed:fe:34:45:fa:52:29:4b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
        Validity
            Not Before: Nov 23 10:02:31 2024 GMT
            Not After : Nov 24 10:02:31 2024 GMT
        Subject: CN=ca37b49731935c618c3408b4a1780731aac20281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:68:0d:2f:50:52:69:74:d1:41:3c:96:82:14:
                    60:ad:95:c4:aa:64:95:90:1f:70:f6:c9:73:2e:9a:
                    23:01:e6:cd:f1:19:97:17:b8:ee:72:8b:ca:83:9b:
                    de:90:c4:a8:36:79:27:82:79:58:70:81:c4:9a:a7:
                    c3:31:3d:34:21:78:70:c4:1a:a4:d1:f1:66:e9:62:
                    f9:35:75:44:db:78:bd:ca:47:ae:43:d0:18:7d:c4:
                    f9:b7:b5:ab:07:12:51:3b:aa:54:d9:5e:e6:f3:42:
                    1f:37:a1:af:21:e1:b0:b3:dd:83:7c:14:fb:2b:9f:
                    60:6c:f4:71:db:5c:8e:db:3b:cc:20:15:46:49:62:
                    5b:85:4b:d2:9d:8f:95:34:77:ad:92:e6:97:22:b4:
                    7c:56:3d:31:ca:93:d6:8a:22:82:99:47:00:55:82:
                    5e:46:cf:fd:0b:ae:8b:3b:93:47:be:a0:4c:73:a9:
                    04:f6:bc:28:74:2c:76:bb:93:fc:4c:bd:2c:5a:b2:
                    20:19:9f:5d:33:2c:df:df:a2:35:91:36:57:c2:7d:
                    85:fb:73:a4:e6:d5:a0:dc:a1:d4:a1:75:d7:b8:29:
                    fd:96:1d:2c:b9:37:6d:22:e1:a3:51:ba:33:fa:0d:
                    ed:0e:ea:3a:d8:b6:e4:76:28:71:b8:82:98:87:3e:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:37:B4:97:31:93:5C:61:8C:34:08:B4:A1:78:07:31:AA:C2:02:81
            X509v3 Authority Key Identifier:
                keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:d7:d1:56:56:d9:27:7e:58:f5:f6:a5:ae:96:21:aa:07:
         e3:9e:a2:f7:1f:17:ca:b6:23:67:9a:79:de:3c:bf:73:97:dd:
         25:5e:b2:89:2f:47:ab:a9:4a:14:f9:8f:5d:a0:33:63:7d:88:
         8a:31:8b:89:f7:db:c5:4b:7d:27:51:1a:eb:b7:37:86:1d:50:
         fd:08:f6:0f:ab:60:5e:7e:28:68:ea:c2:ea:1d:bc:2d:c4:90:
         32:51:15:cb:c1:5f:4d:44:e3:f9:62:f8:81:98:44:a3:e4:26:
         a0:9d:2a:25:62:3e:a1:52:bb:91:35:79:eb:fb:b9:01:48:84:
         19:41:4b:72:05:5c:5f:ce:ad:bd:b7:ae:5e:93:2c:a2:5f:55:
         fb:eb:8a:9b:c1:fb:cb:ad:5f:32:3c:1a:e6:67:09:e6:29:32:
         d9:03:2e:fb:5b:fa:b9:be:35:c6:ff:e9:fc:27:b0:78:fc:a5:
         0d:04:7e:92:9c:df:d8:b7:a4:be:55:04:99:14:ab:4c:ed:4a:
         ec:96:4d:cf:c6:95:c1:08:ac:f9:74:3c:53:08:b8:64:06:20:
         46:a0:f9:08:ac:23:0e:c2:34:15:10:9c:3f:2b:e8:56:8c:bb:
         12:44:b8:db:dc:97:64:78:fc:2d:c5:c7:8d:a4:73:07:3c:d7:
         a4:95:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:20 2024 by rpki-client on console-ams.rpki-client.org