Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File:                     YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier:          qFOr+wu4/7l3DQ21X2gqgvYCdeibuDLKXP/lxJYd04s=
Subject key identifier:   BF:73:41:5F:7C:C9:55:62:ED:6E:F9:E3:08:10:2F:9D:B8:DF:BF:23
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer:       /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial:       01901DED5C59B4518A66BDD481AE8C8C512F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number:          0A76
Signing time:             Sat 15 Jun 2024 22:03:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:33 +0000
Files and hashes:         1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: 3NxXtrNlFI8VN6vA4U8yvgP0K6CuzYEIkF67QUQHYHo=)
                          2: mDGSqEXnupb0XNcqMiAxRFSLaBs.roa (hash: z9SuoPV8YdVg7sanzzab4NW4lfMgjBJGzSiefOdKHkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5c:59:b4:51:8a:66:bd:d4:81:ae:8c:8c:51:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
        Validity
            Not Before: Jun 15 22:03:33 2024 GMT
            Not After : Jun 16 22:03:33 2024 GMT
        Subject: CN=bf73415f7cc95562ed6ef9e308102f9db8dfbf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:84:0e:66:07:6a:cb:b8:8f:20:a9:5f:7a:d3:
                    3c:89:ed:48:b8:aa:d0:7b:cd:cf:3c:09:1a:95:63:
                    8e:25:a8:2e:3f:01:8e:11:cf:00:5e:ca:8a:be:75:
                    93:b1:4e:f4:35:7a:3e:80:35:9a:12:ff:95:89:9e:
                    e3:da:76:2c:5a:c1:38:75:fa:32:00:5e:4c:4e:f3:
                    30:c8:59:52:ad:88:44:6b:37:30:07:ba:c1:51:d2:
                    6d:70:51:ef:9b:db:0b:56:d2:a2:cd:87:e7:bd:25:
                    c9:6b:30:9a:6d:1b:d9:b8:21:06:4d:e9:5d:c3:05:
                    f4:52:a7:57:fc:cd:e2:ac:14:fc:1e:55:6b:6f:fa:
                    99:46:b4:41:35:14:db:ae:c6:74:4d:0f:b2:2a:35:
                    d4:f3:aa:62:ed:61:0c:68:f0:1a:4c:c7:91:df:85:
                    fe:1b:aa:45:fe:74:60:14:2d:24:d7:12:f6:cf:7f:
                    2b:ad:ad:aa:eb:99:c3:76:cf:81:a2:0e:6a:36:2b:
                    1b:5a:31:2b:6b:2e:cb:3f:c5:ce:55:4f:f5:3c:00:
                    c5:ee:88:ff:0c:ab:d2:9a:48:56:a7:33:7c:7e:e5:
                    2b:67:bc:65:a0:0a:06:cc:38:62:bb:f7:40:d8:b7:
                    29:33:a8:32:36:bf:76:82:5a:dd:0b:a2:27:e9:16:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:41:5F:7C:C9:55:62:ED:6E:F9:E3:08:10:2F:9D:B8:DF:BF:23
            X509v3 Authority Key Identifier:
                keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:4b:c4:78:8b:6f:5a:b1:f0:38:bc:7f:96:90:0f:5f:90:
         25:dc:62:d5:91:27:5d:60:48:97:e9:02:d7:af:e2:2a:84:60:
         9c:39:59:b6:66:92:a3:d8:b3:29:dc:f4:92:b9:54:4b:97:8b:
         5b:a3:f5:31:49:fe:36:57:de:02:8f:39:13:68:7d:8b:96:0c:
         5d:5e:19:fd:e9:54:77:c7:89:9c:ed:07:d0:82:83:80:22:c8:
         c7:37:70:bb:6d:fb:1d:3e:11:0b:7c:f5:10:8e:6e:be:04:2b:
         5b:5d:2f:30:a6:38:d3:a4:40:de:59:7a:47:97:6c:3b:f2:88:
         41:cf:99:6b:a5:6b:08:2f:30:8d:8d:f4:ec:06:6e:f8:ce:71:
         19:f9:c6:5b:7f:7f:b5:f1:93:8d:e7:19:74:a7:63:53:3d:9c:
         1d:0f:be:2b:35:45:4c:64:c5:50:38:f4:b8:4c:ce:bf:43:e4:
         27:85:d2:2b:28:2e:fb:0f:cf:16:ed:9f:44:3e:6e:b5:fb:55:
         63:c4:69:d2:69:ca:cd:e9:c4:c9:1a:3d:b0:3f:fe:ad:54:52:
         30:80:70:88:33:c0:a4:ee:12:9e:5e:e6:77:d1:ce:9b:df:7b:
         30:d7:21:d4:1e:b5:76:9c:5b:cc:d6:aa:87:45:4b:d5:a1:e6:
         f2:12:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:15 2024 by rpki-client on console-fra.rpki-client.org