Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File:                     fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier:          YsgZYqDN0MxT0ycBQ5/60aXxEqUrv1n7cs1smSmIGhs=
Subject key identifier:   7E:4F:C3:5C:D7:64:E8:6E:1E:EF:35:55:36:D4:40:9E:0E:CB:9E:E0
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer:       /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial:       019040B018C2214C611EDA6FE85C9CB08E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number:          0662
Signing time:             Sat 22 Jun 2024 16:03:20 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:20 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:20 +0000
Files and hashes:         1: UKSF_Fv3CqLh_32l4ChuUDH6Du4.roa (hash: rZ+qNXv0G4X7XJfTY+kMW3aMlnV651iu53nf85Uhvcs=)
                          2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: h2/mFt4Nw3RS+Dr0XlGXKgn4cFDRA9VrUEJkHMrVtEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:18:c2:21:4c:61:1e:da:6f:e8:5c:9c:b0:8e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
        Validity
            Not Before: Jun 22 16:03:20 2024 GMT
            Not After : Jun 23 16:03:20 2024 GMT
        Subject: CN=7e4fc35cd764e86e1eef355536d4409e0ecb9ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:f0:e0:ef:cf:fe:09:91:72:3d:fb:85:58:
                    69:76:a4:89:90:b7:af:49:08:f7:ca:74:f3:b3:9c:
                    f7:d2:b6:ef:10:dd:87:67:cb:82:7e:25:ef:bb:90:
                    32:a7:89:07:5d:a6:a6:04:a8:c1:2e:80:f4:5b:42:
                    74:73:3e:fd:16:31:8a:11:26:b1:5b:56:87:fb:e2:
                    0c:56:6c:63:93:92:b1:86:d7:ab:fc:f6:4c:79:01:
                    5f:68:26:fa:e0:49:7e:76:c3:4a:70:67:3f:b4:f6:
                    62:82:47:69:be:c6:00:df:34:56:84:65:8e:e7:18:
                    9e:00:22:ad:37:51:f0:de:93:17:51:5b:ba:dc:9c:
                    18:e1:56:0e:b4:37:32:52:09:8e:99:25:00:a7:71:
                    d9:1d:0a:e8:be:e5:4d:24:b6:96:c9:76:ee:7d:26:
                    82:7c:e4:48:18:84:5f:08:5c:c7:47:2c:45:f2:c9:
                    09:2e:1b:13:b3:e8:c1:2a:2b:ee:fb:c8:4a:ba:bf:
                    4c:6b:9a:92:e4:f5:62:a5:e6:f4:27:c2:34:39:d1:
                    fe:e2:fe:72:16:71:e5:cc:a6:ac:3b:84:6c:07:81:
                    8e:16:f4:0a:ba:b5:0f:03:ac:56:c5:e2:65:6f:8b:
                    d2:62:1b:93:63:63:95:e7:a4:e8:0d:35:09:42:07:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:C3:5C:D7:64:E8:6E:1E:EF:35:55:36:D4:40:9E:0E:CB:9E:E0
            X509v3 Authority Key Identifier:
                keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:95:3d:55:0d:1a:06:d3:b5:b3:cd:e6:e7:bb:c0:82:cc:9b:
         47:db:a2:c9:e9:97:94:29:16:45:b5:3e:98:5d:30:8b:a2:90:
         98:3f:9c:82:da:47:61:14:4d:ff:aa:99:cf:79:d9:46:06:16:
         90:1c:ab:7b:ef:02:65:8f:e9:0a:ee:45:72:90:76:9d:30:6b:
         e3:e9:55:b2:66:99:08:0e:e9:ab:8a:9d:95:f5:86:b7:b2:1b:
         c1:89:ee:b7:ef:90:6e:45:e9:34:11:18:2c:83:33:82:69:49:
         15:8a:75:49:ed:cc:bd:e0:ab:64:d3:63:a5:e3:46:91:74:3f:
         ca:84:65:3c:ac:d2:df:ef:5e:f1:a9:6c:37:f0:07:06:a4:ea:
         8a:b7:b4:d3:94:96:6c:78:7e:ad:d8:1c:dc:c6:d6:62:66:fb:
         70:8c:75:c4:8d:1c:67:a6:50:cf:9d:cd:d3:52:1d:91:a3:93:
         69:ab:cf:91:32:a5:e2:04:21:b5:9e:5b:77:1e:8a:7f:18:d7:
         40:8b:68:8d:fe:1f:d5:88:f9:75:78:22:a1:c2:2d:c6:7f:d7:
         c4:00:3c:c8:6f:4b:69:7c:bc:40:2a:54:ec:59:dc:60:33:0c:
         47:8f:3b:f1:94:03:5e:df:aa:76:e7:60:4b:e2:b2:b3:5a:d7:
         55:67:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:59:31 2024 by rpki-client on console-fra.rpki-client.org