Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
File:                     YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json)
Hash identifier:          a6m4M9ZFSjGXgQQaIFSUGJVH5uYi2bi5rTJHv5bo7k0=
Subject key identifier:   EC:00:DA:09:09:86:A8:EE:78:2C:9B:59:B9:14:F3:4F:8D:9E:73:38
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Certificate issuer:       /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial:       018F87ED6F6AEEBC6B853FD4527DEC8AA1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
Manifest number:          0145
Signing time:             Fri 17 May 2024 19:00:35 +0000
Manifest this update:     Fri 17 May 2024 19:00:35 +0000
Manifest next update:     Sat 18 May 2024 19:00:35 +0000
Files and hashes:         1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: A3SHEbnJUrF5GFZarUZKzEqjnF7y1Y1dlxwbBydYlBc=)
                          2: nEbEAI4Kl6B2pRjyWWyJm8nX5QI.roa (hash: qYyg303gwHsQ9ddKUak/IzlrW/XAojDoUTpf0GFgduI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6f:6a:ee:bc:6b:85:3f:d4:52:7d:ec:8a:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
        Validity
            Not Before: May 17 19:00:35 2024 GMT
            Not After : May 18 19:00:35 2024 GMT
        Subject: CN=ec00da090986a8ee782c9b59b914f34f8d9e7338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:e9:89:38:4a:60:e9:c2:b6:cb:3c:09:c6:
                    f8:30:0d:98:ef:eb:c5:54:c7:d6:21:38:7b:95:c8:
                    f4:9d:49:a1:f8:d3:43:ad:80:4a:22:2a:6d:58:cc:
                    04:b4:2c:0a:64:79:8a:ac:ea:f9:6c:5c:c6:06:e5:
                    c4:73:c9:c5:27:7f:da:0c:4c:7b:4e:a4:88:90:6d:
                    4e:f5:78:f7:12:0a:4b:d1:99:af:3b:a8:51:c7:07:
                    e7:a5:7b:a7:52:49:9c:4b:b3:8e:fb:3c:fb:32:fa:
                    b5:6d:71:03:80:14:da:ec:ef:86:f0:a8:bb:04:81:
                    b7:c3:03:fc:d3:93:f4:44:01:45:c8:83:3e:b1:e3:
                    36:91:1c:b6:eb:8c:3a:e4:72:9f:67:24:20:83:cf:
                    f6:c4:67:95:51:7c:d7:b9:ac:88:4d:25:72:f8:0c:
                    4d:53:a7:0b:4f:ab:bf:0b:f9:23:1d:92:a1:e7:8f:
                    0f:18:3b:bb:50:22:56:57:14:e6:95:90:ee:16:78:
                    d7:2c:aa:7e:09:fe:15:25:4a:86:0b:5e:a4:7a:a3:
                    94:41:d1:97:b5:2a:4a:68:67:90:b2:47:b1:91:55:
                    0b:18:2d:a9:b4:a7:c5:2f:d4:2a:6a:27:75:7d:5a:
                    4c:89:5c:9b:4b:36:c9:b7:a6:92:d9:31:b0:cf:ea:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:00:DA:09:09:86:A8:EE:78:2C:9B:59:B9:14:F3:4F:8D:9E:73:38
            X509v3 Authority Key Identifier:
                keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:a0:f5:01:90:f2:f2:28:e9:b9:81:18:99:b7:16:ea:0b:
         93:78:e8:b2:56:d6:a6:1b:85:e1:36:eb:a7:5d:58:3b:0a:ea:
         f4:8a:78:7d:88:e8:10:02:40:0f:68:e1:f3:cd:f3:82:6a:e1:
         ed:dc:92:8f:41:bc:a1:87:2e:01:c7:09:72:fd:4c:d5:47:1d:
         8b:13:22:e1:9c:6b:30:59:a3:2e:0a:de:a1:17:38:bc:77:ec:
         ec:43:5f:4e:97:29:b0:f3:cf:23:1c:a4:25:c2:d2:70:e2:8c:
         57:6d:55:cb:9e:14:f2:a5:1e:dd:9a:43:25:e9:fa:36:68:aa:
         1c:13:46:00:92:d1:ba:a1:23:13:bf:04:49:c2:e1:df:4a:94:
         ce:01:70:84:e5:ce:28:c5:f0:d9:e1:44:af:5b:0a:0c:12:a7:
         49:1e:79:9d:2f:bf:56:0a:1a:21:c7:38:29:ea:3c:69:86:f6:
         b6:ad:42:55:f2:c9:80:05:0d:53:1e:76:3c:e0:6d:c8:e8:d7:
         5b:16:49:ab:c0:79:a2:a5:26:f8:93:7f:ca:19:1f:06:df:b6:
         a1:0c:74:74:86:6e:7a:9a:3b:31:b4:bd:c8:a6:e9:62:fb:6d:
         6b:40:fb:f1:88:e8:01:5e:7a:93:ee:b9:a5:c6:a9:5b:2d:7e:
         42:9a:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:53 2024 by rpki-client on console-fra.rpki-client.org