Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File:                     YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier:          zgEmQ2CNmA5KKNnsBCYeS5IXgcMCp0I0mErfOIFOCLs=
Subject key identifier:   70:AA:40:E5:EB:2B:94:F8:54:DD:E9:E9:A3:FD:27:B8:D5:8C:B4:03
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer:       /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial:       01901E901867F333285DE3582136022F6EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number:          11C2
Signing time:             Sun 16 Jun 2024 01:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:18 +0000
Files and hashes:         1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: uFE87qQVBqKtWSMIkENODYBQxUhstXcVLzTAo/kxo6k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:18:67:f3:33:28:5d:e3:58:21:36:02:2f:6e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
        Validity
            Not Before: Jun 16 01:01:18 2024 GMT
            Not After : Jun 17 01:01:18 2024 GMT
        Subject: CN=70aa40e5eb2b94f854dde9e9a3fd27b8d58cb403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:3d:36:91:68:ca:f0:99:73:a4:ef:97:cc:
                    63:e9:37:bc:83:23:4b:b5:5d:44:e1:eb:d2:9d:b1:
                    54:09:14:f4:8d:db:69:8e:23:90:41:da:e0:35:a0:
                    17:1a:78:12:39:c1:13:35:24:b5:aa:c4:9f:38:a2:
                    13:04:37:ce:23:9e:67:17:5c:82:ad:7a:fb:ab:82:
                    9e:43:eb:09:eb:88:af:d2:68:e3:50:8b:a0:d1:27:
                    04:ee:dd:b6:60:8c:c6:17:2d:9f:33:53:e2:03:92:
                    69:15:b6:ea:4c:17:95:54:01:71:e1:8e:e4:f5:34:
                    74:6c:72:b7:ea:42:e5:fb:cb:1e:66:6c:02:a1:df:
                    46:b0:6c:4e:2d:76:23:7b:c5:6d:44:42:82:d1:03:
                    be:8f:45:81:47:95:6d:c6:01:af:3a:31:3f:1d:c5:
                    f4:4d:97:60:57:23:fc:0d:12:9c:18:fc:e3:0c:66:
                    7d:c4:51:ec:7e:e4:3c:7e:6d:a6:e3:d7:a8:4d:f0:
                    3b:8a:f7:ba:c9:ac:50:15:b8:81:65:38:d8:83:42:
                    a9:ea:1b:6b:6e:d1:a5:d9:96:06:0a:12:38:dd:bf:
                    b0:97:7e:c4:9b:58:0b:70:a7:fe:e9:12:5e:a1:68:
                    b2:bb:ae:55:91:95:a0:8f:ba:f3:65:85:19:45:87:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AA:40:E5:EB:2B:94:F8:54:DD:E9:E9:A3:FD:27:B8:D5:8C:B4:03
            X509v3 Authority Key Identifier:
                keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6b:a7:36:82:9e:b4:3e:97:47:45:b5:e4:4e:e7:e0:79:dd:
         ee:13:0a:bc:f7:f0:8c:f6:be:f8:2d:04:2e:b4:cb:6d:70:ec:
         62:b2:da:8b:bb:ea:df:0c:69:32:a7:37:15:a4:5f:e6:4d:d7:
         fe:7f:07:98:ac:11:46:46:27:14:41:c8:43:18:cc:a7:cd:1e:
         1a:f4:01:c7:1c:25:48:34:c4:76:39:4e:a5:46:f3:fc:ce:87:
         ff:4a:de:85:1d:4c:6a:aa:30:27:a1:70:e8:47:2a:0d:60:af:
         33:48:63:cd:1f:c9:bd:56:0d:dd:2c:f8:b2:77:d3:dd:fe:f9:
         0f:59:a5:18:ce:0b:5b:15:f8:25:ac:a6:51:4d:32:7d:39:27:
         82:e9:6e:e2:20:b5:42:65:35:a0:5c:98:88:ab:7c:ec:a0:72:
         1e:59:dd:b3:32:97:d5:23:49:c7:64:fb:bd:31:4b:d3:b4:04:
         ec:82:1e:1e:89:27:cc:cd:22:78:50:ee:2e:6a:4d:a1:c9:36:
         9e:d8:38:8c:5d:78:0b:6d:c8:0b:2c:8a:b9:03:1e:71:1e:a9:
         c4:06:6b:7f:48:45:bf:3c:b3:b9:b9:2f:8e:e8:eb:c8:c1:bd:
         07:fb:8b:a6:77:e0:d8:3d:e6:a0:26:8d:39:62:0e:24:f7:56:
         77:68:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:42 2024 by rpki-client on console-ams.rpki-client.org