Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
File:                     YOLI9184WstLlKaNiZNRujR6MyM.mft (raw, json)
Hash identifier:          T5c0KaNEEuW9h/SnruBmp4N3OCUixVeEB7TevFygT80=
Subject key identifier:   E1:44:CA:56:01:E7:54:34:0E:E6:60:B6:72:7F:6F:B1:5D:70:13:8C
Authority key identifier: 60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23
Certificate issuer:       /CN=60e2c8f75f385acb4b94a68d899351ba347a3323
Certificate serial:       0196B7B6578A4FD33D8B6B59905B9A88E446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
Manifest number:          1440
Signing time:             Sat 10 May 2025 01:01:42 +0000
Manifest this update:     Sat 10 May 2025 01:01:42 +0000
Manifest next update:     Sun 11 May 2025 01:01:42 +0000
Files and hashes:         1: YOLI9184WstLlKaNiZNRujR6MyM.crl (hash: QZod1wDRH+gA5T2y71hyjN2kz0tGdOfEpfHX8ZoSfMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b6:57:8a:4f:d3:3d:8b:6b:59:90:5b:9a:88:e4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e2c8f75f385acb4b94a68d899351ba347a3323
        Validity
            Not Before: May 10 01:01:42 2025 GMT
            Not After : May 11 01:01:42 2025 GMT
        Subject: CN=e144ca5601e754340ee660b6727f6fb15d70138c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:a0:80:88:24:7a:2f:e8:b0:fb:66:7e:0c:
                    6d:d8:6c:42:97:f0:2d:81:44:58:e8:46:bd:19:b5:
                    d6:81:fd:c6:06:da:12:cb:f7:c3:ff:3b:c6:f6:ad:
                    b3:45:a5:50:2d:c1:44:3a:40:6b:e5:21:8a:c3:37:
                    b6:5d:0d:ef:33:15:89:35:6c:c6:f2:2f:85:cc:dc:
                    d7:f9:e4:1c:98:fd:40:6e:82:2a:1d:8e:c8:73:eb:
                    37:3a:82:6c:b9:8a:d9:c3:06:83:91:c4:ba:9d:f8:
                    f9:da:fe:28:4f:59:b3:64:05:ac:d2:32:c8:8b:2d:
                    5f:0c:84:dc:a0:8b:4a:10:45:28:c7:59:f2:b5:56:
                    3f:b7:87:a8:ed:56:d6:b7:2e:06:93:31:02:80:2f:
                    33:03:43:00:6d:62:f2:ea:09:94:01:e0:93:fd:05:
                    09:a6:91:aa:f3:6d:b0:c7:79:ee:cd:fa:ec:57:1a:
                    a3:04:3d:b8:9c:c6:6d:d8:ba:09:f3:10:0f:2f:bc:
                    69:db:fd:96:36:03:20:51:33:7c:5a:d8:d0:9e:9f:
                    1b:a5:59:dd:65:a9:9c:63:eb:2a:1f:cf:69:f7:70:
                    64:12:d7:b1:85:0c:7d:e7:12:de:88:e3:19:1c:cd:
                    3b:22:37:d8:67:88:0b:44:35:a7:cd:cb:e8:0d:77:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:44:CA:56:01:E7:54:34:0E:E6:60:B6:72:7F:6F:B1:5D:70:13:8C
            X509v3 Authority Key Identifier:
                keyid:60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9b:6a:d3:18:c8:28:3f:52:b7:a9:77:15:99:d8:99:99:38:
         4d:df:03:0c:d6:51:1c:5a:6c:c8:29:a4:c1:69:5b:4a:f4:6a:
         7b:5b:fa:ce:36:7b:b7:a0:bc:e1:35:fa:6e:cd:c1:1d:61:5a:
         01:46:47:7c:f3:89:43:ac:6f:34:fe:e2:09:66:0a:4f:5c:f8:
         28:24:3d:04:3e:23:71:f4:fe:73:10:bd:15:d9:cb:5f:22:ec:
         12:da:8a:15:09:d4:a9:ac:28:c4:93:63:70:73:b7:7f:47:15:
         8b:47:5e:6d:be:ea:4c:61:67:da:9f:f6:16:46:fc:b8:11:f2:
         b2:0b:06:c5:53:de:49:47:dc:4a:66:f8:d4:a9:19:19:b1:e1:
         ee:05:31:e8:18:ba:bc:7d:8d:91:cd:bd:7b:de:cf:9a:1c:01:
         ea:72:17:ad:1c:7e:de:19:53:4c:e7:84:61:4c:fb:3e:55:00:
         34:d7:fc:84:38:af:65:1d:77:d6:03:6a:44:48:91:71:0f:41:
         33:df:86:2c:1a:f8:24:e6:5b:fa:42:8b:96:81:ba:1b:7a:70:
         15:01:70:0c:53:22:d9:d6:e4:29:e4:f2:f6:e5:ca:1d:f5:16:
         9c:74:f8:91:b9:6c:7b:7d:9c:78:ad:e6:e0:1b:f4:04:39:45:
         a0:bf:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:17:16 2025 by rpki-client