Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File:                     Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier:          OBsQqOinrPn3EkHN4lJVnYaC7xGKexwIcce3E37tkw0=
Subject key identifier:   72:4F:57:5D:FC:96:DB:45:CE:CB:0D:28:7C:0B:3D:A1:3C:9C:3C:C2
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer:       /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial:       01901EFDE052CA7B4B3CFA330FFE46ED73AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number:          07C6
Signing time:             Sun 16 Jun 2024 03:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:12 +0000
Files and hashes:         1: BM1TxhvMGFwHCBMzL8Fe-fjfydo.roa (hash: oxihfFhDqIR1e1ybP4Zr+jJPSymX+6dDo9bqMxM+aHM=)
                          2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: ewYn5w6AhsyUhLguioDVQlGkFrxNXVG5A9NCes7xfVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:e0:52:ca:7b:4b:3c:fa:33:0f:fe:46:ed:73:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
        Validity
            Not Before: Jun 16 03:01:12 2024 GMT
            Not After : Jun 17 03:01:12 2024 GMT
        Subject: CN=724f575dfc96db45cecb0d287c0b3da13c9c3cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:bd:e8:b6:ea:c8:45:64:23:b8:7d:b3:69:
                    6d:4e:d1:a6:03:2c:e5:06:33:c0:79:fe:6f:31:f7:
                    72:17:1f:eb:b6:bd:83:50:3a:ef:42:df:a8:90:52:
                    4e:0a:fb:ee:bf:74:d7:50:ed:80:11:25:1e:c5:f7:
                    a5:b2:d1:b2:bc:88:d4:2b:ff:ae:40:5c:36:99:d3:
                    04:16:ec:41:ab:88:b2:7a:cf:d9:98:9c:9c:ed:3a:
                    16:15:bc:a4:be:66:7c:0c:fb:01:2d:8b:c6:7e:3c:
                    a4:4b:16:85:ab:d0:0c:58:c3:22:36:ef:6e:61:29:
                    bd:b0:3f:08:a2:3c:7a:2d:d2:09:ab:78:17:8b:71:
                    ca:8a:78:ad:3b:46:bf:ca:6f:4f:67:76:1b:56:c1:
                    bd:a9:8c:64:1c:0a:fd:92:a7:ad:54:05:8c:0f:5c:
                    1a:fd:f5:db:1a:d5:c4:82:7c:40:d8:d9:59:c4:37:
                    74:10:f3:bf:c9:34:e6:82:e3:94:17:1d:16:79:ca:
                    d8:01:79:c5:87:9d:46:95:c7:26:d4:a2:4e:16:74:
                    52:4e:08:fc:37:c8:8d:f8:03:f9:6e:ec:dc:6b:a3:
                    8b:e9:70:0a:8a:d0:f2:2e:aa:d3:c8:d2:99:ff:d5:
                    a3:a5:8a:3e:84:85:08:2b:23:9f:7b:36:87:a8:49:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:57:5D:FC:96:DB:45:CE:CB:0D:28:7C:0B:3D:A1:3C:9C:3C:C2
            X509v3 Authority Key Identifier:
                keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:62:a6:31:bc:11:1f:78:0a:20:2b:cc:0f:3a:7b:9f:ee:cc:
         dc:df:95:8d:52:e9:64:8d:c7:7e:72:53:a5:fd:ec:72:50:d9:
         22:00:c0:ab:2f:4a:88:b7:0d:c3:44:67:6d:2d:18:80:46:4e:
         3b:fe:f7:d7:23:82:4a:35:84:25:32:22:db:92:e2:d7:bb:92:
         09:44:1f:f2:ee:38:5b:26:0e:08:7d:b4:b7:39:71:1e:81:f8:
         cd:6d:15:a8:08:10:f1:32:48:48:eb:e1:20:42:14:d6:56:a1:
         ec:fd:dd:89:04:e9:47:6b:e9:c3:91:90:6c:c0:25:62:36:1c:
         3a:f4:48:b4:59:2b:09:89:31:61:b1:b0:32:02:f3:2a:13:5e:
         0c:40:8a:c6:df:8c:d4:90:dd:d9:a0:9f:e0:37:b5:e4:39:67:
         41:46:96:f9:1e:29:2c:23:ba:2c:a3:2e:fa:84:de:03:44:0f:
         4b:71:35:5b:06:40:69:3a:a9:a2:9a:c2:06:31:b9:15:fb:8a:
         41:62:21:f7:01:7b:9c:d8:c2:00:81:e3:d0:85:fa:2a:1e:b2:
         90:22:78:e3:ab:ab:b2:c1:26:33:82:59:59:59:ae:13:06:63:
         bc:49:60:0e:4f:ed:07:8c:73:23:68:f8:95:94:cf:1d:a6:2b:
         2f:cd:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:03 2024 by rpki-client on console-fra.rpki-client.org