Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File:                     y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier:          dxZuprhapWvPVW40y9h1Hz19EIiI/bmEPZvMz8UxsgE=
Subject key identifier:   BC:D0:CE:73:FF:06:BD:0A:F8:95:29:6B:E6:F1:0D:B7:FF:BE:F3:20
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer:       /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial:       018F874AC8F0F518D78EEAC50FA8266B5C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number:          0280
Signing time:             Fri 17 May 2024 16:02:56 +0000
Manifest this update:     Fri 17 May 2024 16:02:56 +0000
Manifest next update:     Sat 18 May 2024 16:02:56 +0000
Files and hashes:         1: lgfzdEXa9dxvA4zW3jEUxECMx1Q.roa (hash: LIe6kyLKst2oz0YJYr9ljaOh2XIPykdHvAr5rMbJ/CU=)
                          2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: XaAIWUpE7Ce/cS0AQvuHQ22/L9bCLF6/GehNaFEqZ1E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c8:f0:f5:18:d7:8e:ea:c5:0f:a8:26:6b:5c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
        Validity
            Not Before: May 17 16:02:56 2024 GMT
            Not After : May 18 16:02:56 2024 GMT
        Subject: CN=bcd0ce73ff06bd0af895296be6f10db7ffbef320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:ee:74:53:15:70:c6:a8:af:c7:91:55:a0:
                    74:9b:42:2c:34:64:5a:37:20:66:c4:f6:f4:75:1e:
                    57:37:a9:b3:ce:8e:34:d8:d1:f5:91:18:77:72:eb:
                    ea:47:ec:99:ab:eb:59:08:b7:a8:cc:8a:63:83:4b:
                    ce:01:bb:cc:28:b1:d4:2a:8b:d6:ee:d3:ad:1a:38:
                    ee:32:3f:b7:15:df:4a:84:b0:9e:2a:66:3b:d7:85:
                    76:d9:4c:fd:a0:d6:29:8c:7d:2a:b4:62:b1:12:7d:
                    8e:9f:55:bd:9b:63:87:01:11:e2:11:b4:99:ca:54:
                    9b:dc:e9:4d:5c:c0:86:86:88:91:5d:3f:3a:d3:bc:
                    37:86:ab:19:fa:a0:b3:6c:a5:f9:c5:af:1d:47:8b:
                    ea:49:c9:56:c9:43:68:18:30:3c:bf:32:43:16:04:
                    82:06:ba:19:70:63:40:11:c1:78:56:b7:58:18:58:
                    50:37:75:d1:d0:4e:2b:c6:62:9b:f5:14:4a:ed:83:
                    ea:59:bb:dd:9f:9c:cb:e4:be:00:c5:9d:81:aa:60:
                    f9:c9:55:1b:08:d8:51:fc:52:2c:4b:93:49:e2:a2:
                    0d:8d:74:02:72:a6:db:ea:9e:7a:b6:74:cb:a7:36:
                    cc:c6:fd:07:20:4d:b1:44:4f:e2:52:2f:8d:00:ec:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D0:CE:73:FF:06:BD:0A:F8:95:29:6B:E6:F1:0D:B7:FF:BE:F3:20
            X509v3 Authority Key Identifier:
                keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:54:ac:3c:1a:a3:7c:07:3b:6f:d5:e2:00:43:85:e7:90:
         d4:f4:61:60:79:fa:c1:c2:8c:27:38:11:41:98:15:c0:7c:a9:
         b0:05:cf:f5:d8:4b:27:cf:bc:f8:41:57:10:45:63:bc:19:7c:
         aa:dc:d9:68:f4:fb:ba:6c:05:be:b7:a3:08:ee:02:3f:de:2f:
         fe:3e:e9:77:46:9c:e0:f7:87:8c:23:8c:32:72:fc:c2:fb:5c:
         62:0a:ec:65:48:df:ef:1d:fa:5f:e9:b9:03:50:98:ca:1f:43:
         a4:51:da:40:f8:12:e3:b7:b2:90:82:8f:88:b7:70:de:df:00:
         bb:22:8e:77:d8:ce:b1:8e:4c:bc:c3:78:49:5d:63:6a:49:a0:
         8b:e5:04:63:78:a5:f1:7b:2e:a8:d6:d2:d5:2b:fc:80:21:5a:
         bc:65:e7:22:cd:70:ff:eb:7d:96:ec:ac:19:eb:12:fd:30:d5:
         69:fd:44:b7:a0:78:c4:15:8d:3b:90:60:d5:f3:ae:04:3d:67:
         b7:0a:1a:c8:cf:27:b3:24:d9:0a:64:45:85:70:e8:5f:f2:8d:
         e0:4e:a1:05:5a:ee:9c:b8:6e:aa:9f:03:1f:47:03:f8:b6:1e:
         e3:40:ed:e6:28:54:d8:3d:ef:2a:cb:69:f1:41:1b:18:9c:ae:
         98:b3:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:36 2024 by rpki-client on console-fra.rpki-client.org