Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File:                     cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier:          Tj9KTRnV4/KOstXyKrMZrFUxad+GTXFHoK+I011+aJI=
Subject key identifier:   52:01:8F:A7:00:1B:C0:C3:85:6E:42:FC:54:C1:3C:6D:D2:4A:84:84
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer:       /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial:       019045D42E923DBB06E834389AF0118EB7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 16:00:51 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:51 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:51 +0000
Files and hashes:         1: KbRDWMXiKN_b99HDexhbtI1Rp7g.roa (hash: FXkoP90x1vBSBJdZTStYwTJBrRVBnyS0OMcb3PxfcPk=)
                          2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: uxPFdx7bpuFaKC2qJQkYKqBa5lzkZrybiuRQbK6BxHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:2e:92:3d:bb:06:e8:34:38:9a:f0:11:8e:b7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
        Validity
            Not Before: Jun 23 16:00:51 2024 GMT
            Not After : Jun 24 16:00:51 2024 GMT
        Subject: CN=52018fa7001bc0c3856e42fc54c13c6dd24a8484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:a1:83:74:b6:ef:16:ce:bc:69:22:b3:0f:
                    17:59:28:fa:5c:83:c3:71:7f:fd:90:a8:ed:12:4f:
                    b9:b2:fd:f7:8f:a5:c0:d9:7a:47:99:7d:58:c8:61:
                    8f:c2:23:32:47:e1:83:70:bc:3a:b1:0a:31:59:9a:
                    17:26:73:5a:8a:86:6f:ca:82:76:60:38:f8:00:77:
                    f8:6d:76:c1:c8:7b:63:5b:e8:16:4e:60:a9:12:88:
                    d4:27:c4:f8:11:01:34:e1:bc:a0:24:0f:5e:1a:dd:
                    c6:a7:f3:bf:99:21:7a:3b:19:06:6a:61:63:6e:e5:
                    36:f3:68:66:d1:55:ef:d4:8c:68:af:13:cc:91:9a:
                    c2:4c:3e:29:7c:a1:4e:72:54:c2:35:df:07:5a:f7:
                    30:b6:3d:01:66:95:6a:69:4e:b2:47:3e:af:7d:39:
                    97:54:db:e5:19:f8:c4:1e:d9:8e:cb:32:44:36:c7:
                    5b:f3:7f:97:ba:1f:71:40:62:68:92:a9:bf:72:98:
                    93:37:35:9a:89:5b:77:ab:28:0e:08:29:cc:23:25:
                    a2:58:34:a1:7e:09:cc:f6:46:fd:aa:e1:71:ca:10:
                    c5:04:d6:29:f7:8f:e0:49:17:18:6b:80:bc:15:1e:
                    57:1d:79:88:89:ab:41:1d:e6:84:c7:df:70:c1:20:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:8F:A7:00:1B:C0:C3:85:6E:42:FC:54:C1:3C:6D:D2:4A:84:84
            X509v3 Authority Key Identifier:
                keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:5f:5c:d7:76:19:6f:6f:04:70:f4:e3:60:7a:66:9b:4f:
         59:03:34:4f:2b:db:4c:bb:5d:d6:4c:17:c9:b3:08:7d:2b:52:
         e3:2b:8d:5e:d5:a6:ba:ed:9c:0e:0c:5a:ab:f2:37:81:18:46:
         00:57:59:2b:74:21:fe:60:23:dc:0e:2e:fc:8f:64:5c:21:75:
         54:8c:36:0f:1d:bd:fd:7b:cd:b3:c3:b3:75:ac:82:1a:37:53:
         7e:89:77:db:12:13:d8:64:59:ea:fa:af:d4:53:04:d7:70:23:
         27:ed:bb:a9:7e:c3:1e:57:09:74:1d:04:52:bb:a5:07:33:26:
         15:cd:e8:6e:28:c1:af:a5:90:e4:0c:54:d8:fd:23:d5:5b:1f:
         71:11:b8:c4:c2:49:05:08:89:29:9c:c2:40:10:60:db:c4:2f:
         ee:86:92:60:16:f3:95:03:cb:00:29:c7:32:27:f6:38:55:57:
         e7:b7:10:ee:b4:37:3d:2f:d9:7b:bb:af:6e:47:e9:11:45:26:
         2b:8f:91:cf:68:3a:bd:d9:1f:1e:1d:ab:74:c9:29:07:69:74:
         43:77:12:45:d2:46:c6:bf:d2:e7:4d:cf:f7:34:cf:47:55:d8:
         16:11:05:78:ec:ed:3e:a3:78:b6:a5:13:d5:a8:1d:f5:9b:9c:
         5d:b4:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:33:39 2024 by rpki-client on console-ams.rpki-client.org