Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File:                     YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier:          9icWucq2MPJzkheBAjoG736MorPMciN9jVzdI5lItn0=
Subject key identifier:   57:08:22:7C:7B:EF:5E:76:55:94:22:49:5B:D5:FF:0C:6A:39:E7:28
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer:       /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial:       018F874A732F78F31BF2252C802C58081A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number:          0C2A
Signing time:             Fri 17 May 2024 16:02:34 +0000
Manifest this update:     Fri 17 May 2024 16:02:34 +0000
Manifest next update:     Sat 18 May 2024 16:02:34 +0000
Files and hashes:         1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: b9RoU9ucXCG1tjpmKuc0VzyMPpnYgyNy7O10FWQXloI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:73:2f:78:f3:1b:f2:25:2c:80:2c:58:08:1a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
        Validity
            Not Before: May 17 16:02:34 2024 GMT
            Not After : May 18 16:02:34 2024 GMT
        Subject: CN=5708227c7bef5e76559422495bd5ff0c6a39e728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:a5:9b:03:be:8c:1f:77:ef:93:2d:b1:24:
                    1e:1d:d1:0b:b6:3f:8e:e7:a6:3f:56:31:d3:da:71:
                    15:a6:81:0a:5f:48:73:c1:3a:f8:78:d3:12:3b:9f:
                    c1:1c:91:25:9d:b1:b7:73:02:8d:c7:b8:d4:36:1c:
                    01:22:c0:d8:ce:a5:9f:d0:50:ff:f4:bd:15:25:93:
                    f6:e8:6b:03:13:a8:c6:0d:4e:53:e2:07:b7:e4:ae:
                    79:16:46:a4:ba:fa:9b:44:cf:ab:76:92:07:de:b5:
                    5b:75:5f:ae:4e:0d:1b:bc:80:5a:ea:61:98:98:53:
                    d8:97:48:d3:ad:67:97:27:f2:1e:27:59:3a:70:98:
                    8d:b2:a5:ea:1f:8c:11:0c:93:7d:97:4a:ee:cc:42:
                    c0:be:c0:f8:0c:f0:3c:ea:06:dc:75:bb:5c:26:1c:
                    12:bd:d8:3a:be:03:0b:41:24:89:bc:8b:41:e0:45:
                    ea:c0:f5:6d:a2:0d:81:4f:60:9f:9b:1d:1c:3f:93:
                    2e:3d:d0:1b:50:fe:dd:1f:c2:32:2b:2f:12:2c:63:
                    52:7b:ca:8a:42:9b:4d:0d:0a:6c:93:fd:3a:03:e5:
                    99:1e:c4:30:a1:7e:6a:67:10:52:5a:74:1b:8e:7e:
                    fb:32:be:52:2c:6e:96:ed:78:26:2f:56:55:d4:ac:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:22:7C:7B:EF:5E:76:55:94:22:49:5B:D5:FF:0C:6A:39:E7:28
            X509v3 Authority Key Identifier:
                keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:72:c3:e7:b8:3a:48:46:59:ac:38:c8:74:5a:2c:f2:7d:a8:
         a8:ca:71:37:1b:c5:3e:f1:97:be:ce:28:a1:76:de:cb:80:8c:
         c1:e3:ca:52:73:43:b5:15:a9:d4:d3:26:ff:46:ff:d2:b7:cf:
         66:e2:b6:0b:92:69:90:51:5f:a3:2e:9b:60:3b:98:2b:17:2d:
         5e:ab:84:03:00:cb:6b:37:6a:ba:3c:97:e2:af:bd:c9:c6:97:
         4f:fb:73:b6:d2:5b:b1:f9:58:63:33:ed:b1:22:6a:66:7a:c6:
         e2:ee:5b:a9:ab:ab:2a:1a:d7:71:1f:94:52:6f:65:69:56:40:
         3c:f0:bf:04:72:a1:b8:d1:a5:74:68:7a:31:0c:26:f2:96:e3:
         e0:56:c5:d0:aa:9b:76:4d:85:b9:5d:ef:43:ce:49:02:99:13:
         bb:8f:7c:9b:18:07:89:3c:7b:25:e9:bd:d6:4b:70:b9:96:d5:
         e3:ea:5a:db:db:47:55:5a:11:ba:2f:ff:80:7a:a4:bc:82:64:
         84:58:d3:43:32:a5:ce:2a:a6:43:a4:88:24:3c:11:8c:89:4d:
         38:26:16:2c:7b:b0:73:b7:1a:dd:1e:e5:85:09:b3:30:0e:1c:
         65:5d:d1:c5:28:55:9f:d5:32:c8:24:99:e4:63:eb:7c:56:aa:
         e7:ae:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:38:23 2024 by rpki-client on console-fra.rpki-client.org