Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File:                     yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier:          NhB7pGYRDR/QSHy4y9w2N+zMG5uN6nZfNGnyRg5nPA4=
Subject key identifier:   9C:88:BC:73:AB:FD:7E:10:AD:E2:F3:F4:61:F2:E3:98:21:0E:E6:8F
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer:       /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial:       01901DEBEB3C4B13553770EBCDB735E6A90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number:          0E1E
Signing time:             Sat 15 Jun 2024 22:01:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:58 +0000
Files and hashes:         1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: YCzFM48ApWX60bwgg2RhV4cxp5OoBhoCGB6kx51VFb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:eb:3c:4b:13:55:37:70:eb:cd:b7:35:e6:a9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
        Validity
            Not Before: Jun 15 22:01:58 2024 GMT
            Not After : Jun 16 22:01:58 2024 GMT
        Subject: CN=9c88bc73abfd7e10ade2f3f461f2e398210ee68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:96:8f:c8:4b:28:33:2f:ee:ca:ca:84:5c:
                    75:4f:90:64:ff:21:0a:d4:7d:0e:0d:c6:d6:81:98:
                    a6:6c:a5:5b:b5:9b:35:fc:dc:c7:6a:d8:90:9b:05:
                    ce:ce:b0:c7:9c:b5:b2:9c:4f:22:b8:26:3d:a5:b4:
                    18:21:b2:c6:df:38:10:a9:18:7e:ce:71:a0:01:8c:
                    43:2a:db:68:79:83:52:ee:e3:66:e1:2e:2d:7b:5c:
                    19:1d:98:3b:45:7d:35:38:f9:29:ed:3f:f0:cf:95:
                    ab:3a:f3:cf:96:26:12:63:b9:f6:15:0f:19:d1:0f:
                    ca:24:1a:cd:93:62:6b:90:5e:20:9d:59:25:05:b8:
                    ea:b8:10:1a:6a:04:9b:3d:64:eb:f4:dc:b5:df:c2:
                    60:c7:cf:cb:69:c9:6d:21:8e:67:f9:22:35:47:2e:
                    d4:85:22:b5:7f:df:c5:c7:bd:bb:e6:5b:94:11:78:
                    c8:2b:f9:c7:ec:28:4a:82:87:1e:e3:c5:e2:0e:0c:
                    5b:dc:54:5e:d9:fa:a3:4f:7d:5a:d3:f9:4c:f0:4b:
                    28:94:a0:8b:55:af:b3:3e:6f:3b:d3:21:6d:a4:27:
                    e1:0d:a5:09:cb:40:c0:4e:98:04:2b:9e:98:1d:47:
                    3a:6b:44:38:f0:a7:73:c3:e0:40:9a:0f:52:90:94:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:88:BC:73:AB:FD:7E:10:AD:E2:F3:F4:61:F2:E3:98:21:0E:E6:8F
            X509v3 Authority Key Identifier:
                keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:c2:73:ea:bf:bc:09:33:c4:73:d5:30:f8:d9:82:29:21:
         e0:55:fd:71:cd:23:d3:3b:0e:ef:37:9d:5c:50:81:0d:5c:9b:
         50:51:b9:d1:e9:b3:70:da:5e:ff:a8:a7:49:a2:6b:eb:74:35:
         f6:c2:d0:1f:e0:f0:9f:55:c9:db:d1:c1:eb:56:ca:f5:a0:d6:
         40:d6:a9:c5:8c:3c:a1:cd:ee:11:e8:94:b6:db:ca:d2:93:69:
         d7:a1:0e:be:54:b7:79:b6:3f:33:fa:5e:c2:b9:e1:66:06:de:
         70:1e:37:6f:bc:0f:d7:48:11:2a:ab:ea:d0:af:6b:41:32:67:
         a0:de:97:3c:94:32:8c:99:ec:2b:48:f1:e7:37:64:67:20:c2:
         a3:9e:24:71:48:0f:b6:cc:1b:50:d3:7d:fe:78:25:e3:64:50:
         e9:b9:44:13:4e:29:a7:ac:11:b1:ad:18:f0:fc:17:58:b9:6b:
         77:23:65:b0:d0:8d:31:b9:88:36:50:2e:7d:db:57:f7:25:ec:
         61:9d:32:10:d4:48:b2:48:a1:76:4b:ca:65:2f:92:3a:8a:f5:
         0e:af:06:3f:49:ea:a4:c3:ac:6d:4a:93:91:c8:a9:9c:1a:5c:
         7c:15:af:95:fa:55:ff:fe:2a:81:64:95:3c:80:81:e0:5d:98:
         4b:36:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:53 2024 by rpki-client on console-fra.rpki-client.org