Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File:                     ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier:          rHGusqYDpIqwaXJCv0s+g+nxQUvlfaUg06FDR41g1SI=
Subject key identifier:   38:1D:C5:77:4E:2B:06:A4:64:2D:9B:1F:F4:FB:19:A9:E6:82:A7:23
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer:       /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial:       018F87EDBA9DBDC0691EA906E80C86798DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number:          1013
Signing time:             Fri 17 May 2024 19:00:54 +0000
Manifest this update:     Fri 17 May 2024 19:00:54 +0000
Manifest next update:     Sat 18 May 2024 19:00:54 +0000
Files and hashes:         1: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: 0OdwhLOx1FOXI8MbAq3LHo7yl5en0awKOaklA38Rr94=)
                          2: zrgfiyT1-zLCvjo8vunFpu8GeKs.roa (hash: uYznNi3OV8BdhkyXm2Vdx3+8Kncqp4+1ksO7bCAkodY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:ba:9d:bd:c0:69:1e:a9:06:e8:0c:86:79:8d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
        Validity
            Not Before: May 17 19:00:54 2024 GMT
            Not After : May 18 19:00:54 2024 GMT
        Subject: CN=381dc5774e2b06a4642d9b1ff4fb19a9e682a723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:9d:02:4a:30:d9:31:94:4d:a8:76:c3:f0:
                    59:c9:a3:3d:46:a5:9f:b3:96:68:e1:8e:5a:61:08:
                    a2:de:06:37:77:fc:ba:d9:27:56:35:cd:f4:09:4c:
                    46:9c:43:a4:aa:0d:ea:63:e1:d1:a9:5a:0c:cb:46:
                    56:7e:3f:b7:85:7e:21:6a:95:48:48:3b:09:43:d5:
                    2f:36:9e:74:47:43:9c:35:6b:88:62:ad:d4:7b:e4:
                    d4:5a:9e:bb:3e:05:64:f1:b4:9a:62:88:0f:39:8f:
                    1e:d0:69:81:fc:a9:9d:d1:2c:5a:79:36:24:54:d6:
                    6e:58:70:96:7d:c4:77:41:4b:f8:e5:5e:06:af:3a:
                    5e:3e:d9:dd:a0:4a:d6:1d:ff:cb:57:8f:d5:3d:19:
                    c2:a6:47:23:bc:50:c9:86:1a:72:00:48:83:48:2b:
                    ac:c3:39:be:91:a4:32:7c:c9:80:ea:0e:96:79:21:
                    62:d2:ff:e3:aa:d5:f4:51:5e:b0:ca:d5:3a:27:dc:
                    48:d7:92:dc:3b:54:8f:53:33:c6:37:59:98:70:92:
                    d1:d5:d3:9b:cb:8c:89:57:3c:a3:d9:b0:24:f4:ba:
                    8f:9a:1e:34:07:bd:f2:b1:f6:02:e1:66:07:45:28:
                    82:11:35:55:b3:92:aa:43:7f:c8:30:35:11:07:c1:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:C5:77:4E:2B:06:A4:64:2D:9B:1F:F4:FB:19:A9:E6:82:A7:23
            X509v3 Authority Key Identifier:
                keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:d4:f4:e1:fa:8b:31:b4:36:2f:34:33:93:7a:1b:16:4d:
         0d:3a:f2:50:d5:89:cf:15:94:92:4b:43:0b:08:19:5e:a3:2b:
         1c:11:63:97:2d:a0:f0:b9:8b:c6:47:9d:f1:b5:bf:af:f5:05:
         2d:87:94:c0:51:83:da:0f:e7:b7:86:8a:c3:8f:c8:14:07:b2:
         2c:81:3e:43:d8:c0:b7:f0:0e:63:dd:df:98:b9:89:5e:4b:99:
         1f:ae:13:db:09:e9:45:9f:bb:96:7a:38:ff:0c:c3:09:e5:4f:
         f7:9f:d8:e1:07:eb:7b:0a:5d:c7:88:eb:1a:6a:4b:d6:ba:e2:
         fd:5f:65:3c:44:75:b3:a6:e1:90:df:2d:cf:f2:f8:6d:cc:ba:
         40:fd:6c:71:1d:ab:26:ee:41:87:69:70:09:79:39:6c:fe:dd:
         cb:50:a5:ed:29:d4:43:d9:e5:df:4a:fc:19:f8:d0:70:88:6b:
         ab:e1:07:7f:1e:e8:71:e1:9a:0b:a4:6f:47:c3:07:61:ed:8d:
         4d:30:7e:96:f4:ac:5c:21:e2:1d:59:e5:01:94:9b:53:e1:1a:
         da:1e:c9:f3:91:45:40:44:3c:a8:0a:05:3d:3a:41:50:6e:9d:
         0f:2b:92:7a:14:7f:ef:de:72:9c:59:61:b5:c0:13:d7:df:af:
         17:5b:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:44:18 2024 by rpki-client on console-ams.rpki-client.org