Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          Rwpy6n9H7VK5BSuCtEBmH6vPRC44Ae0qf0oYtXHJA2M=
Subject key identifier:   B4:D3:5C:F9:B0:BE:F8:1A:E6:9C:45:1C:17:AA:72:ED:2C:65:14:57
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       01901A7BF525D638491476062B10D8FAB8B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          0147
Signing time:             Sat 15 Jun 2024 06:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 06:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 06:00:49 +0000
Files and hashes:         1: 6bhCteonUaYq3N8YAVIXEF-v1lc.roa (hash: LQi50V8UgfI4VSYQXERdCEV8Rmc/2hcTy/UG13v57lk=)
                          2: q_Id4JJar4HSuuqDmAqMVZH6SBk.roa (hash: 9Cn9JtoUOkGFH0pXpyC2kCTvdwqxnV3IU/o2wV1nl7U=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: Ogz1vqu2zkjNcDkZU909XFcYrMOIu6P4IkvYr7BcFUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:7b:f5:25:d6:38:49:14:76:06:2b:10:d8:fa:b8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Jun 15 06:00:49 2024 GMT
            Not After : Jun 16 06:00:49 2024 GMT
        Subject: CN=b4d35cf9b0bef81ae69c451c17aa72ed2c651457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:7a:dd:cd:70:21:a6:a8:2f:e8:78:0f:a7:
                    04:70:10:c1:5d:dc:fb:5e:9e:53:8c:f7:cb:68:10:
                    8d:83:97:c7:35:69:cf:42:09:12:85:dd:2d:af:a4:
                    5f:57:99:3f:6a:1c:93:37:33:53:fc:2d:14:32:07:
                    87:54:e4:7b:97:3f:ac:4e:8d:78:d6:cc:69:4e:ee:
                    42:53:b0:d3:35:30:68:5e:e4:3f:91:c6:41:d2:ad:
                    9f:a8:9e:4e:f4:d7:b6:82:73:80:94:26:d3:c8:2d:
                    20:96:da:4e:c4:44:c9:9d:08:0e:3a:15:42:66:4b:
                    d5:57:74:0c:19:77:ef:b1:b3:f4:99:93:73:8a:63:
                    a0:9a:f9:ba:e6:de:07:a1:d6:e6:a1:25:7d:56:e7:
                    d4:31:29:bd:04:3d:e8:8c:96:83:5f:e7:1e:ef:a0:
                    50:5f:f5:01:e2:9e:c1:e6:73:96:23:72:2c:84:ff:
                    ee:53:a9:b7:31:5c:25:24:92:ee:ab:c2:04:46:11:
                    c2:4e:a7:48:8c:5d:60:60:d5:9b:ab:3d:82:7a:6d:
                    3f:19:ad:51:2a:13:44:14:15:77:56:0b:af:e4:78:
                    32:eb:67:e1:27:a6:3f:06:16:55:90:0a:82:a0:3b:
                    d2:9b:18:80:c3:c4:93:4e:65:29:13:19:01:a9:95:
                    3c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D3:5C:F9:B0:BE:F8:1A:E6:9C:45:1C:17:AA:72:ED:2C:65:14:57
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:04:b2:da:cf:6c:2f:8d:15:c3:8e:48:45:3b:ae:74:65:5d:
         a2:e8:6c:0f:d7:7a:54:48:9a:da:85:27:6a:27:4c:77:2e:80:
         a7:4f:4d:ee:c3:f0:b0:ee:2e:89:fb:39:5b:dc:cc:40:f1:b8:
         39:b0:7b:23:ea:90:5b:b2:12:d6:51:55:48:a5:4b:b9:3a:49:
         de:ca:b8:05:96:c1:93:bd:83:a3:a7:b6:7d:fc:16:a5:71:b0:
         79:f8:ba:3b:18:4c:af:a5:ac:e9:9b:b5:78:71:2d:ee:47:33:
         c1:3e:11:f0:cd:24:8f:53:49:42:db:59:c1:9c:52:ad:89:f8:
         c7:93:b2:b6:73:99:66:b6:16:b9:13:e3:98:9e:ea:19:5d:67:
         11:c2:26:9e:ea:43:69:8b:27:67:c9:a8:e5:e8:ee:81:9b:88:
         5b:c6:3c:d8:ac:cc:ff:3f:d8:ff:35:3c:ca:e9:f5:d4:b8:a0:
         96:3e:ac:cc:2d:25:37:11:ec:2f:4f:bb:62:a3:48:3d:a5:ea:
         f5:c2:67:8a:cd:52:e9:23:eb:09:80:9f:e7:dc:9a:39:2f:d9:
         87:f4:20:96:fc:31:77:e2:d8:d7:b6:ca:6a:4c:36:d8:06:af:
         af:e3:1e:aa:cf:eb:60:51:c3:dd:27:50:9a:02:6d:5a:fa:df:
         22:5f:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:23:31 2024 by rpki-client on console-fra.rpki-client.org