Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File:                     YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier:          ttHzTXClDKVRODHEYqaJ6OHpooqFH4Gd6/rVSTf9xPA=
Subject key identifier:   25:7F:F9:E8:DD:8E:2B:52:70:74:65:59:71:BD:8E:CC:27:48:BF:9B
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer:       /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial:       019354D158ACE265250581F47D737B9097B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number:          0197
Signing time:             Fri 22 Nov 2024 17:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:25 +0000
Files and hashes:         1: 1YjUG6dbDuaJGU-pGPiowxRKSkU.roa (hash: /IyfliTfh/ApQV5993ktkjhDCyHCwuKF/CTKwxwnuiM=)
                          2: 9Av8yqu-QbjMMsm-zmFY7DjINQA.roa (hash: Ilf9gfh/Zl9adF1J04lpxXCKTdbjkBrI6E3LSXUFlpo=)
                          3: NiIyQc4-WlCedIn6p8ScUSrBMCw.roa (hash: ao3kFnmR/+F35EeF8PMOSiarB8BoKWoU9LE5ic0qSt8=)
                          4: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: Db8Hn4/KaTE+8MggD84bP8S1PAWUlABtbiOUw4vSpds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:58:ac:e2:65:25:05:81:f4:7d:73:7b:90:97:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
        Validity
            Not Before: Nov 22 17:00:25 2024 GMT
            Not After : Nov 23 17:00:25 2024 GMT
        Subject: CN=257ff9e8dd8e2b527074655971bd8ecc2748bf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:8e:21:16:c8:79:c7:06:fe:5a:97:60:40:
                    34:d6:b9:7a:82:68:f3:ab:02:26:aa:0a:f0:ea:74:
                    60:58:07:d8:58:a9:ca:98:27:b7:14:bf:41:90:ad:
                    1c:30:6e:f8:3b:62:a0:3d:af:dc:01:2e:8d:e9:53:
                    bf:ae:b6:81:2c:cc:03:a7:84:4e:49:8d:4c:48:6a:
                    e2:e3:a9:21:d1:77:5e:b7:11:66:f7:d7:be:93:ca:
                    9f:4a:40:9a:b5:9a:71:74:c3:6a:ca:ba:1d:08:24:
                    11:8d:b9:2e:80:3d:a5:5f:06:4e:f0:af:3d:f5:d3:
                    43:84:4a:a7:32:c5:42:40:43:8c:e3:80:80:e9:64:
                    8e:7e:86:ed:06:eb:3e:67:b7:a0:a1:6f:7a:35:b7:
                    d6:be:33:0b:e2:07:21:ee:68:8b:53:23:ca:8b:a1:
                    38:34:8e:7a:06:58:f9:09:8b:49:93:d2:8a:5e:a0:
                    f2:8b:0d:cf:8b:43:13:e9:73:43:b8:e0:2b:d3:9f:
                    40:11:2e:98:0f:7e:a4:d8:d0:8d:e7:61:1f:02:ed:
                    5e:24:77:ec:d5:d5:1f:bf:26:34:d7:8d:68:b0:a1:
                    5b:71:13:aa:76:81:3f:a6:83:d5:24:d2:73:92:58:
                    11:d8:72:45:41:ff:95:f1:56:66:22:bb:8e:76:9c:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7F:F9:E8:DD:8E:2B:52:70:74:65:59:71:BD:8E:CC:27:48:BF:9B
            X509v3 Authority Key Identifier:
                keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c6:60:6c:81:ed:b7:72:3e:8f:11:ba:d7:e6:e3:fa:78:18:
         cd:a7:0f:e4:c0:f5:2e:34:29:77:8b:b6:fb:d4:ee:77:5e:ae:
         51:85:fa:53:43:dc:71:b5:e0:6d:e7:68:ea:66:4f:31:cc:3a:
         a7:34:bd:56:8f:30:09:49:6e:5e:a2:c0:f8:b9:c4:4d:4d:3f:
         46:c9:51:1c:1a:12:68:87:34:85:fe:d0:16:13:16:1a:79:46:
         54:05:d6:2f:a4:48:14:d2:89:be:0f:cc:9e:c7:7e:57:cf:c6:
         e2:38:0b:9b:c1:20:08:57:11:ac:ec:95:ee:0e:5c:0b:67:10:
         83:07:a9:37:4d:17:af:2c:d7:ac:eb:70:90:81:f9:12:81:8b:
         8d:0a:6c:b0:64:e5:03:ca:2b:99:76:4d:2e:4e:17:94:22:f3:
         e7:27:c7:7f:40:1f:31:a5:20:46:ef:09:19:88:e8:6a:58:56:
         c7:d8:ca:7b:40:50:67:e5:55:fe:ac:70:50:58:20:13:19:59:
         73:ed:bb:a3:07:ea:38:aa:7d:af:91:c5:8a:dd:d4:bc:b5:53:
         9f:79:b6:c7:ce:c2:2b:4a:ed:19:ca:ce:2d:9e:93:81:1b:e2:
         86:b0:57:b4:35:df:db:49:63:6d:d7:19:16:50:cf:83:c8:a8:
         59:12:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:53 2024 by rpki-client on console-fra.rpki-client.org