Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File:                     ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier:          utPqfQ2/u6v51hAUHnrwFxFpaVWmfgOqPknXU0XgYOE=
Subject key identifier:   15:D4:24:7B:D5:41:F3:96:2B:2C:8E:DF:15:50:85:9E:7A:8B:E9:2B
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer:       /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial:       01901E8FBA53E27E10A1C5421B4087814673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number:          077F
Signing time:             Sun 16 Jun 2024 01:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:53 +0000
Files and hashes:         1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: kN93smS9dWPi/QSTMuwC3FUxEtJqo2MJlGS5uvjPKcg=)
                          2: DuXmkntd0nzY-tcNdToHs8v9Q3Q.roa (hash: xTDVvKPpTCatQJTeG25xRZS68lRUUCgEgEf3dMh6W6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ba:53:e2:7e:10:a1:c5:42:1b:40:87:81:46:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
        Validity
            Not Before: Jun 16 01:00:53 2024 GMT
            Not After : Jun 17 01:00:53 2024 GMT
        Subject: CN=15d4247bd541f3962b2c8edf1550859e7a8be92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:f1:70:3e:c5:c2:64:0a:11:58:1c:4f:84:
                    39:82:7d:c3:29:d1:97:e2:a4:db:cc:5c:ce:2f:ba:
                    ae:96:e5:0e:a9:58:33:68:10:c1:d6:65:94:6c:ee:
                    9e:6b:42:b2:60:89:84:30:14:5b:e8:ee:fd:b1:1c:
                    12:bd:f0:98:03:23:ce:f8:5e:40:a6:1a:5f:89:a7:
                    76:c5:53:85:9e:ca:d5:41:87:db:eb:fc:8d:8f:c5:
                    3e:83:cc:27:1d:0c:73:3b:f4:e6:2a:95:96:d6:10:
                    5c:36:1d:04:02:f6:47:4c:34:f1:81:89:a0:04:ef:
                    1c:69:a6:f2:53:39:70:04:91:82:fa:53:b2:0a:47:
                    bb:67:b6:ee:7e:fe:72:6b:ab:a3:10:5f:f6:2e:82:
                    86:5a:5d:88:69:4f:c9:7d:f8:d9:76:39:60:b1:9f:
                    e8:1d:61:43:74:39:75:70:fc:69:e8:b5:51:b3:6b:
                    f5:bf:71:c0:77:28:12:2b:1a:fc:2d:bb:d9:5d:09:
                    a5:7e:d1:9a:22:02:60:20:a9:21:65:a2:5b:fc:09:
                    c7:f0:d2:4b:d8:fc:ed:6e:28:da:e6:4e:ca:a3:c1:
                    60:5a:14:08:bd:48:eb:8c:87:c6:6e:aa:81:92:bd:
                    39:69:07:2b:9f:2b:ce:e2:f6:84:a9:aa:ec:d9:52:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D4:24:7B:D5:41:F3:96:2B:2C:8E:DF:15:50:85:9E:7A:8B:E9:2B
            X509v3 Authority Key Identifier:
                keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:61:58:27:c3:25:9f:15:75:ea:a0:29:f7:70:0f:76:5d:a9:
         59:b5:19:9f:0f:98:e6:28:af:6f:97:01:7d:82:f4:b3:9e:60:
         e1:1b:67:9b:95:95:26:ae:8d:0f:78:87:7f:59:e4:f0:31:be:
         6b:6d:78:f6:58:7a:eb:0f:ca:cb:04:f8:6a:a3:4b:9e:c5:9c:
         3a:74:f9:0a:e5:ce:8b:8a:8a:9e:68:88:3e:63:f3:af:62:26:
         31:a1:e3:73:80:ce:27:17:34:ca:89:c0:c8:da:f9:90:2d:a3:
         c4:20:5f:e1:00:7f:86:44:6b:54:cb:29:c3:a0:5f:17:32:c0:
         4a:47:76:b9:a9:f8:0a:b1:95:a2:f1:96:33:aa:83:db:a5:cf:
         40:c5:1f:97:90:ec:89:bc:d2:9d:5d:20:7b:75:b2:42:eb:28:
         1d:8a:4e:db:72:62:80:b4:e1:91:36:33:a5:f6:e7:89:19:89:
         24:3e:4d:97:d6:3a:3e:1a:50:26:6b:02:ef:d4:e8:a6:c0:3e:
         31:3c:f0:22:98:f6:13:cf:e6:bf:5a:44:49:76:85:be:3e:5e:
         52:09:c8:62:7d:fa:ca:ff:ae:7e:9d:dc:13:95:a2:c0:13:0a:
         14:ac:2e:5e:50:6a:31:2c:74:f3:8a:73:68:cd:37:3a:56:65:
         57:2a:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:28:58 2024 by rpki-client on console-ams.rpki-client.org