Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
File:                     YzMz1xUm9TOxwc8L6fwyG2IzltM.mft (raw, json)
Hash identifier:          cT0ZSsTapiz3jJZuP4EoGs3vveeCBka3wA+d9mbzTGc=
Subject key identifier:   60:E9:19:C4:8F:D6:A0:58:E7:A8:9E:05:37:08:E5:DD:07:D4:FC:D2
Authority key identifier: 63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
Certificate issuer:       /CN=633333d71526f533b1c1cf0be9fc321b623396d3
Certificate serial:       01901E9016C97D7B076CE02D23574EC6429F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
Manifest number:          025B
Signing time:             Sun 16 Jun 2024 01:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:17 +0000
Files and hashes:         1: YzMz1xUm9TOxwc8L6fwyG2IzltM.crl (hash: kZN1emI26MXGc/9OQna0pK9AlSy45SAPi+hIiUEXibY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:16:c9:7d:7b:07:6c:e0:2d:23:57:4e:c6:42:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633333d71526f533b1c1cf0be9fc321b623396d3
        Validity
            Not Before: Jun 16 01:01:17 2024 GMT
            Not After : Jun 17 01:01:17 2024 GMT
        Subject: CN=60e919c48fd6a058e7a89e053708e5dd07d4fcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:71:88:e4:f6:4e:de:b7:76:86:41:39:0d:
                    e3:07:37:f0:b8:60:3b:b1:f4:66:31:65:32:c3:da:
                    a1:ea:c1:06:b1:47:5c:fc:57:76:76:e9:cd:d5:7d:
                    11:fa:4f:51:18:df:57:07:f9:8e:11:d1:ac:87:31:
                    30:3f:ce:44:45:a3:b3:0d:1f:ee:f3:24:79:89:e6:
                    1d:dd:bb:81:d0:04:f1:8e:4c:d8:2a:6e:ce:75:ce:
                    14:f6:4c:82:14:34:61:b7:01:15:c1:9e:5e:74:5c:
                    20:83:6b:ea:f7:39:fb:5e:ba:a4:4d:80:fc:fa:4e:
                    5d:b5:47:cc:3e:59:3c:19:59:63:86:f1:ba:a2:5f:
                    68:5b:a0:76:de:f3:8e:2b:8b:e8:43:0d:31:60:1a:
                    65:47:6a:14:67:c5:21:7c:74:6b:a6:fa:8e:e7:d7:
                    32:95:35:77:15:74:1e:1c:7d:5d:ce:cf:1c:c8:9d:
                    1e:c8:f3:af:1f:d4:ac:d6:41:cc:28:da:78:1d:86:
                    0a:b3:fb:30:38:31:5a:e1:a3:aa:97:45:7c:5a:61:
                    a0:98:e5:8f:19:10:06:67:74:76:3e:73:ba:87:d7:
                    d0:ec:f3:97:c1:75:63:9a:d0:64:11:ab:c6:4b:8b:
                    d0:c6:8f:a9:1c:3c:06:f4:09:c6:2d:51:d8:21:27:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E9:19:C4:8F:D6:A0:58:E7:A8:9E:05:37:08:E5:DD:07:D4:FC:D2
            X509v3 Authority Key Identifier:
                keyid:63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1c:94:38:2e:fd:ad:08:e8:e9:6c:cd:4e:b9:0c:47:21:90:
         b3:ff:a6:81:ee:03:b8:11:55:6a:4d:35:d2:0b:12:6e:ce:44:
         e7:76:42:c0:1e:e2:03:0e:0f:03:8d:ed:f0:23:6f:88:39:13:
         d7:38:18:14:83:bf:e4:39:a0:69:09:c4:10:be:96:d1:16:38:
         69:5b:de:40:0f:26:56:71:d7:09:be:08:f7:e5:c5:3f:70:ca:
         2a:75:79:90:c3:9e:98:f4:23:96:2e:dd:5b:f0:90:4a:a3:b1:
         c9:b9:3a:3e:9e:61:b7:56:89:6c:a6:83:30:88:10:df:12:a5:
         b5:e5:9d:8e:b0:37:49:e4:f4:62:35:13:04:28:32:1d:19:ad:
         e2:6d:62:df:f8:12:78:74:05:29:0e:7e:ac:0e:a5:b9:3d:69:
         20:83:a3:aa:2e:18:71:dd:29:be:53:20:b9:9b:6c:8c:7d:af:
         e9:f9:c5:bf:52:65:0f:6c:4a:f1:05:2d:d2:e5:1d:67:34:0f:
         5f:97:04:84:f7:01:ca:73:2b:d0:96:e6:ba:4b:80:cc:18:4f:
         57:dc:e8:f0:5f:d3:1d:69:ae:29:a6:47:43:df:7c:f4:ea:56:
         8c:e3:4b:29:d4:31:67:64:b9:64:93:ba:19:16:29:51:57:ac:
         7b:ea:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:01 2024 by rpki-client on console-fra.rpki-client.org