Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
File:                     Z6FPJDBIdf8VT-Kysstuugr5RSM.mft (raw, json)
Hash identifier:          SLL1NyzQXmK5/TWJzxOhWyNE5r9cM3fXtG8+zFM85bA=
Subject key identifier:   64:D3:E2:34:82:21:B0:B6:5F:12:FF:0B:AB:75:26:DA:DE:BE:E5:68
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Certificate issuer:       /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial:       019049431B8DCDC7EB693CC46A1308862442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
Manifest number:          10B4
Signing time:             Mon 24 Jun 2024 08:00:52 +0000
Manifest this update:     Mon 24 Jun 2024 08:00:52 +0000
Manifest next update:     Tue 25 Jun 2024 08:00:52 +0000
Files and hashes:         1: Z6FPJDBIdf8VT-Kysstuugr5RSM.crl (hash: 0kywXzLbYHMIFVdi9/aigtb+ukbKOt+50jFW/eScIPU=)
                          2: gmKoR83phZubO3oVnuhYSnpzNC8.roa (hash: XNNTEh9oWXGcHOkMDL3eErQ6wJWO8zzjc5KtaO2aly8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:1b:8d:cd:c7:eb:69:3c:c4:6a:13:08:86:24:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
        Validity
            Not Before: Jun 24 08:00:52 2024 GMT
            Not After : Jun 25 08:00:52 2024 GMT
        Subject: CN=64d3e2348221b0b65f12ff0bab7526dadebee568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:a1:65:55:c0:bb:94:47:43:76:27:30:5c:
                    59:30:af:84:81:80:c7:8e:92:e3:4b:2a:d9:af:b1:
                    ce:40:36:20:f4:76:9b:d6:b9:13:16:25:f4:de:a4:
                    cb:e2:5c:d7:dc:74:f9:03:61:3c:af:aa:c7:00:d6:
                    c9:0a:ea:4f:5f:5d:5c:0e:6d:b1:d3:9d:ae:a0:8d:
                    8e:3a:a1:5c:bb:f6:15:d5:70:b2:56:a4:7b:e3:92:
                    f9:ec:36:ff:0f:2f:0d:fa:33:04:54:fd:f0:62:a9:
                    bb:a2:01:5d:7f:28:26:8c:0e:69:b2:d4:00:26:3b:
                    76:63:0c:2e:f1:a9:5d:48:d8:65:00:8e:cc:f4:cd:
                    d4:b0:c2:4e:dc:4a:9f:0f:8b:a5:ab:30:ad:5f:12:
                    be:f9:a3:04:b5:49:65:c3:d6:1d:f5:ab:5f:50:8d:
                    dd:56:ce:9a:35:d7:b2:c7:61:54:f4:9b:d1:f1:9d:
                    f8:eb:cb:70:1c:30:dc:d7:ac:ef:d9:87:32:c7:ac:
                    7d:62:95:b3:3c:ce:d2:74:f6:99:81:0c:f2:89:72:
                    df:2b:9d:68:dc:08:c9:4a:c6:9a:ee:91:73:5e:4e:
                    c7:17:7b:b2:03:cb:e9:62:1b:bd:c6:a9:b6:3e:b9:
                    4b:e7:35:0a:b3:fd:15:97:89:72:cf:a4:f3:b8:78:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D3:E2:34:82:21:B0:B6:5F:12:FF:0B:AB:75:26:DA:DE:BE:E5:68
            X509v3 Authority Key Identifier:
                keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a6:fc:58:a7:b8:e4:30:9c:30:12:74:49:27:ae:e1:94:32:
         da:34:2e:0d:ce:12:00:59:95:26:5a:84:40:9b:be:d8:59:2a:
         2e:fb:8c:2d:f5:34:19:ef:b6:74:77:a9:0d:28:5e:d6:96:02:
         c0:b3:77:aa:b4:40:14:dd:f1:c3:f3:c9:f5:5d:c2:6c:61:cc:
         2a:71:c3:23:05:8f:b9:97:cf:ed:c6:0e:52:cb:b6:0c:af:0d:
         ea:0d:c0:76:ca:9e:6f:36:7c:4f:96:53:5c:25:cb:de:2b:46:
         a5:d4:8c:ce:81:fe:5b:cf:9b:9a:7b:27:d8:f5:7e:93:9f:90:
         30:24:a6:e4:f7:a6:a9:41:81:7e:d3:4f:9b:aa:83:69:cb:91:
         6c:a0:10:c2:0d:c1:40:3e:4b:0b:56:ab:47:6c:7b:29:b0:15:
         52:99:77:6f:4e:f9:c9:a1:9f:1b:d0:0e:d4:06:92:30:74:8a:
         7a:6b:06:89:bd:b6:82:51:be:0f:68:f8:a6:bc:93:01:48:4b:
         6b:af:e4:ea:a4:84:de:4c:6a:70:fc:3e:43:5a:af:19:9f:d6:
         f4:59:9d:d3:e5:16:2b:09:9f:80:9e:38:8e:ae:30:d4:7c:58:
         bd:7e:21:3e:eb:15:c4:23:f4:19:b8:67:26:4e:bd:64:7e:58:
         d2:3e:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:46:16 2024 by rpki-client on console-fra.rpki-client.org