Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
File:                     YzvKDtH5tgvA7UIwItA4nim2zdQ.mft (raw, json)
Hash identifier:          xA+QHEcy4xrh3u83Uilrv1muL/NFMsY2RAzPrN23jVg=
Subject key identifier:   D1:96:91:E6:CE:86:EB:8A:ED:F8:C2:05:B7:C8:CD:D3:73:52:39:30
Authority key identifier: 63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
Certificate issuer:       /CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Certificate serial:       0190452F8DB8E4C04E9358C0EB6A1E454288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
Manifest number:          05CE
Signing time:             Sun 23 Jun 2024 13:01:02 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:02 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:02 +0000
Files and hashes:         1: JuzJv2whUaGWSIt2wcajXmUD5zI.roa (hash: RQ8bEyAdCH9JfvTAquhnEneX+ZhdPiNYVLtxPsIVxvQ=)
                          2: MB63xwwlxwESq4ySPkFb_7OoD0I.roa (hash: FEYpr6pwu6U7Xto6H6DCQNUui65oFbBSxyJ2/8NS3bY=)
                          3: YzvKDtH5tgvA7UIwItA4nim2zdQ.crl (hash: dTHdkeMFvvMZJ48LtaYf1fkq5nyWcOmiqbr/BslsvIY=)
                          4: wMRua81DP0XDP8KptHbiHx1Ay-w.roa (hash: TfJKVEyaCPziNkBiGr7HwkTnXLN9sJXXH0nQfXyGVY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:8d:b8:e4:c0:4e:93:58:c0:eb:6a:1e:45:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
        Validity
            Not Before: Jun 23 13:01:02 2024 GMT
            Not After : Jun 24 13:01:02 2024 GMT
        Subject: CN=d19691e6ce86eb8aedf8c205b7c8cdd373523930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:74:83:6e:06:99:2a:1a:88:60:61:a7:a2:78:
                    c7:e8:96:9e:cd:ff:63:2e:74:9e:f1:12:18:aa:da:
                    41:29:81:3a:eb:7d:9c:02:6f:5c:09:33:a9:df:3b:
                    ca:40:21:5f:30:b5:b5:b2:4f:92:9e:a4:c2:e1:62:
                    35:59:0d:e1:62:96:eb:c2:b0:4c:39:02:bc:f3:55:
                    93:c6:29:e4:35:58:29:06:f7:4f:f0:26:f3:61:6e:
                    23:44:80:5d:44:37:d5:24:b1:0d:23:c6:90:9a:22:
                    ce:33:25:99:b6:80:b0:35:44:09:f3:54:2e:d0:a1:
                    9d:d8:f1:0b:66:49:e8:13:11:93:b8:97:cd:12:b3:
                    00:b3:c7:3b:cd:79:54:29:1b:b3:86:5d:52:5a:1c:
                    16:1e:36:91:47:9a:a2:b2:8e:30:52:3f:e5:a8:0e:
                    9d:4c:8d:63:0c:05:98:c6:41:2e:b0:02:be:0d:d9:
                    cc:7e:1f:6b:a5:60:f0:7e:1d:ce:b9:fd:33:41:a0:
                    28:ad:41:9d:45:89:83:81:6d:13:2d:14:ed:40:89:
                    67:15:ac:48:0c:21:02:25:2f:61:fd:19:a1:91:e5:
                    01:a0:e6:82:22:7a:59:97:3c:2d:59:a3:7a:1a:5d:
                    8e:61:fb:0b:a6:9f:b0:ad:03:9b:51:42:d5:c9:dd:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:96:91:E6:CE:86:EB:8A:ED:F8:C2:05:B7:C8:CD:D3:73:52:39:30
            X509v3 Authority Key Identifier:
                keyid:63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a5:ac:f0:65:42:be:e5:f1:a2:66:69:0f:cb:3c:9d:ed:8b:
         4d:82:c5:62:81:08:c2:00:bf:ff:fb:f7:02:00:f2:ab:cc:af:
         04:5a:1f:db:93:d9:61:70:b0:ae:a2:fe:48:c3:49:b2:64:bf:
         29:8d:e4:8b:14:7c:49:3c:94:f1:24:9b:f0:9d:74:78:9e:67:
         a7:fa:33:46:46:61:96:7e:1b:62:cb:b2:4b:c1:54:df:19:2d:
         27:86:8e:9e:07:9e:df:37:18:3a:f3:79:68:02:62:6d:f6:2f:
         b2:b8:c7:61:8e:5c:c7:55:cc:e6:aa:ba:5a:91:eb:c8:69:0a:
         1d:d8:c6:b4:d3:65:96:7e:69:d3:5e:92:41:b8:b1:f9:b7:cd:
         64:08:24:a8:26:c4:52:af:bb:4f:d0:22:88:d6:39:06:19:be:
         72:7d:34:fe:6c:6a:88:5e:9f:7d:9e:7a:66:90:a1:9c:d7:40:
         ac:94:04:bc:b4:b6:94:bb:f0:a9:b1:55:ff:10:dc:c0:07:ac:
         96:7d:a5:79:45:e8:7f:9c:67:b8:46:4b:69:56:1f:b1:ca:31:
         2d:5c:0d:7c:b4:24:0f:49:f5:27:fb:0f:7d:89:d7:8e:80:e2:
         b5:9a:cb:85:71:5f:94:01:aa:a7:ae:d7:33:2d:dd:f3:49:99:
         b8:bd:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:05:32 2024 by rpki-client on console-fra.rpki-client.org