Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
File:                     YzvKDtH5tgvA7UIwItA4nim2zdQ.mft (raw, json)
Hash identifier:          mRWpvcuobMoLAmsvavmq4GJY+goNz88YlUabB/FCDY4=
Subject key identifier:   8D:72:65:20:61:5D:D8:8F:DC:3D:40:5B:71:2C:4B:AE:F6:18:A3:B9
Authority key identifier: 63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
Certificate issuer:       /CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Certificate serial:       0190964C02910B0F00710405A651B09EDCFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
Manifest number:          05F8
Signing time:             Tue 09 Jul 2024 07:01:21 +0000
Manifest this update:     Tue 09 Jul 2024 07:01:21 +0000
Manifest next update:     Wed 10 Jul 2024 07:01:21 +0000
Files and hashes:         1: JuzJv2whUaGWSIt2wcajXmUD5zI.roa (hash: RQ8bEyAdCH9JfvTAquhnEneX+ZhdPiNYVLtxPsIVxvQ=)
                          2: MB63xwwlxwESq4ySPkFb_7OoD0I.roa (hash: FEYpr6pwu6U7Xto6H6DCQNUui65oFbBSxyJ2/8NS3bY=)
                          3: YzvKDtH5tgvA7UIwItA4nim2zdQ.crl (hash: suoX3ucx9JSz4+HQ0OYmnaQ/vtzSDZkTpzEBCtcZAcU=)
                          4: wMRua81DP0XDP8KptHbiHx1Ay-w.roa (hash: TfJKVEyaCPziNkBiGr7HwkTnXLN9sJXXH0nQfXyGVY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:96:4c:02:91:0b:0f:00:71:04:05:a6:51:b0:9e:dc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
        Validity
            Not Before: Jul  9 07:01:21 2024 GMT
            Not After : Jul 10 07:01:21 2024 GMT
        Subject: CN=8d726520615dd88fdc3d405b712c4baef618a3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:54:07:d1:4e:86:05:7b:e9:96:e7:a9:ef:
                    96:48:bb:87:02:dc:be:f4:78:24:a8:30:51:ca:4c:
                    df:21:c6:67:d6:4d:11:98:3c:b3:14:d1:46:b8:b0:
                    e9:91:b5:5e:02:84:ee:cb:cf:6e:df:e5:1a:cf:93:
                    91:33:89:b8:d3:80:99:c0:e2:05:80:c3:7c:d7:b9:
                    f2:66:64:b9:99:9b:7e:e0:a5:3d:85:14:27:3b:13:
                    66:4e:83:fe:60:07:02:d3:a8:2f:48:8f:da:49:04:
                    21:f8:a7:94:cd:e9:29:1a:d0:7b:45:fa:c2:07:e1:
                    22:7f:25:aa:66:7d:2e:72:79:4f:35:dd:d6:9a:00:
                    32:96:04:38:b6:48:b3:ea:e2:8d:36:a7:64:04:6c:
                    9b:7e:92:1e:57:b0:54:ef:d1:3f:0f:5c:ca:9d:3a:
                    20:fd:ab:eb:df:17:d6:7d:29:5a:4f:4f:2e:61:64:
                    a7:41:40:f0:ce:38:45:11:91:a6:77:bf:6a:b4:34:
                    02:52:3e:17:81:b0:af:69:f8:f3:74:2f:1e:e7:5c:
                    23:aa:00:c5:93:aa:ca:ef:8e:2c:b7:07:18:0c:5c:
                    38:e0:80:ac:5c:b9:7d:d3:b4:c6:6e:49:ce:47:38:
                    49:24:b0:8e:90:e1:b1:d8:cb:f8:d7:dd:e9:c4:de:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:72:65:20:61:5D:D8:8F:DC:3D:40:5B:71:2C:4B:AE:F6:18:A3:B9
            X509v3 Authority Key Identifier:
                keyid:63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:07:27:ca:ea:42:38:47:39:c5:13:dc:f4:fa:3d:dd:41:a9:
         ed:a4:30:83:15:ec:9e:33:21:88:2d:26:e3:90:21:49:a1:b9:
         4e:bd:6d:58:9b:da:5a:6c:4d:46:8d:3d:cb:ce:1b:0c:da:4b:
         1e:0a:f3:4c:36:df:47:16:57:7e:aa:5c:34:d4:04:08:76:6c:
         53:8f:e5:41:a1:2f:91:e5:02:13:cc:af:64:3f:e8:8e:ea:a6:
         a6:4f:97:f6:e8:a7:ff:ca:dc:9d:ff:38:2e:9a:f9:b0:8a:14:
         3a:cb:9d:25:e5:50:2f:6d:c8:06:ee:51:96:96:6b:71:99:f6:
         b9:37:34:d1:2c:6a:97:06:2b:83:53:d2:1f:13:5c:f2:5e:4f:
         cd:b3:8a:a5:ca:65:a8:a1:8b:26:6d:16:7a:c3:a9:3c:1b:7f:
         03:fc:96:cb:c9:08:ce:1b:7d:65:fe:89:83:39:3a:15:14:7c:
         76:b8:62:7d:c6:e8:df:84:4f:41:f7:f2:fe:41:48:8c:02:5b:
         36:fb:d8:c9:31:82:b8:27:c1:77:26:b0:d8:51:e2:39:e9:6d:
         ad:46:27:90:99:03:9a:a7:5d:99:61:ce:2a:30:b6:7b:4a:20:
         ff:35:cf:79:fa:6a:8b:64:03:6b:58:32:bc:6f:04:1c:ec:b5:
         3f:0d:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:29:56 2024 by rpki-client on console.sobornost.net