Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File:                     Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier:          bSArNVPsPSBlzDeKnbV56fHmC8btpxuOW4q5u765vKw=
Subject key identifier:   04:8F:54:12:4A:B2:41:51:C0:B7:25:E2:F7:80:00:78:DB:88:A0:B9
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer:       /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial:       019073883B8DE918BAC0CC908E2ADC7E559D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number:          11F8
Signing time:             Tue 02 Jul 2024 13:00:26 +0000
Manifest this update:     Tue 02 Jul 2024 13:00:26 +0000
Manifest next update:     Wed 03 Jul 2024 13:00:26 +0000
Files and hashes:         1: PmO_uOpAaee8Q6P9O2qRKkVaABc.roa (hash: eQTpX81RRqb/yNLkIUCvbrgN3q9lYBnbavWv4fly0nU=)
                          2: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: d9Sa/h+tTiHsPlZm6l3JhdYU92wOV58Bqbjek69J+ME=)
                          3: pnw46b8q4O1SLQ_CKYNcUIA_cP4.roa (hash: hvi2VV92szvwCFLLK1sBnMcEC62YOW9GzatVyTdkLZw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:88:3b:8d:e9:18:ba:c0:cc:90:8e:2a:dc:7e:55:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
        Validity
            Not Before: Jul  2 13:00:26 2024 GMT
            Not After : Jul  3 13:00:26 2024 GMT
        Subject: CN=048f54124ab24151c0b725e2f7800078db88a0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:ad:84:1d:69:0f:b7:49:03:fb:28:b1:72:
                    41:9a:7b:c7:3d:e9:ce:ba:95:6b:6c:78:c8:16:b8:
                    0c:c0:77:12:a0:56:e1:57:b8:96:e7:e4:d7:cc:de:
                    44:33:e4:79:73:f5:75:76:79:14:25:b6:07:9b:5d:
                    8e:43:8b:0d:17:4c:8a:91:8c:9f:96:d2:0f:8f:b9:
                    09:8f:3e:f0:fd:43:90:a4:53:c4:40:0e:6e:a3:ac:
                    6c:2a:e8:d3:d0:eb:0d:4b:48:27:02:75:91:c3:2a:
                    ff:1e:40:0a:ea:cc:42:ca:40:75:9c:13:10:57:44:
                    bf:8f:59:c5:0c:bb:55:71:78:ab:76:39:65:5a:86:
                    49:39:4f:20:11:c0:2c:e6:ba:fc:73:29:d5:d9:5c:
                    03:12:94:e1:26:36:d9:4f:bc:df:ea:7a:c4:df:34:
                    af:73:71:43:55:c8:a3:29:cf:50:a1:02:13:bc:f6:
                    29:f0:d8:a7:96:1b:69:84:d4:fa:bd:4a:71:f2:7e:
                    91:c0:45:e8:94:5b:f9:94:dd:5f:47:c5:15:31:07:
                    91:b4:4f:0d:61:40:d3:6b:86:a0:b3:13:b9:50:22:
                    b7:75:5c:86:9e:27:8f:71:27:72:df:97:82:a3:77:
                    7c:4b:30:dd:89:55:f4:7d:50:ba:45:2e:4f:83:ce:
                    af:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:54:12:4A:B2:41:51:C0:B7:25:E2:F7:80:00:78:DB:88:A0:B9
            X509v3 Authority Key Identifier:
                keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:cf:b7:7a:63:86:cd:34:70:a1:61:4d:d6:12:c6:21:dc:
         21:0b:c4:da:17:a9:4c:80:dd:d2:0d:b0:59:db:c6:63:df:0a:
         7e:53:b3:25:24:51:91:40:ec:4b:3c:5d:f1:13:05:10:41:12:
         58:24:2c:27:11:c4:be:e8:c2:5c:4b:36:7f:f6:08:b4:41:01:
         5f:90:ba:5a:31:98:9e:8e:44:c1:6d:24:26:bc:f2:a0:ce:33:
         e5:0a:e0:5e:20:d8:bd:fb:92:67:fc:57:d7:4a:99:49:c3:e4:
         63:03:4b:ed:29:c1:27:68:2b:03:d0:09:24:bd:6c:b5:a9:25:
         6f:0f:58:46:58:17:b0:b5:26:79:63:b4:17:3a:ac:bc:1e:54:
         a5:e7:74:b2:ec:4b:81:eb:68:2e:d2:0c:c8:fb:85:bb:43:96:
         c1:35:0c:12:5f:d5:d3:db:e2:c8:86:0f:95:a1:8d:fc:a4:ef:
         2c:56:20:71:7f:c3:4d:42:f6:69:55:48:80:64:99:1b:04:cc:
         b4:61:60:95:61:ae:c3:68:81:f7:bc:eb:bc:81:dd:a2:a3:c6:
         cf:d5:a1:42:f3:5e:a4:21:94:76:d5:17:a5:b4:97:c4:8e:a4:
         ac:19:29:9f:55:19:51:ac:86:bc:e2:19:26:70:16:1a:0a:7f:
         9c:a2:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:13:01 2024 by rpki-client on console-fra.rpki-client.org