Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File:                     y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier:          U62rMMTx9BaQJYLxNePpwYBleWyTK3l6FTdbiF5tuOI=
Subject key identifier:   80:7B:4C:07:42:26:7B:B2:44:EE:AF:27:4D:34:B6:8D:57:EC:B3:8F
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer:       /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial:       019048697B0397CCCC8E96BDE2A10A27119E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number:          054C
Signing time:             Mon 24 Jun 2024 04:03:10 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:10 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:10 +0000
Files and hashes:         1: cxGh9vne57jOWZda-oaB91SGlww.roa (hash: 3L5CnyvEyY1xND0Y6b9V6QtK1gLCz1HJrRRwabccIHU=)
                          2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: t7X1MWQdMnNJnP+tnhQAgTeHUxkHCxpIoGjE1iQc398=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:7b:03:97:cc:cc:8e:96:bd:e2:a1:0a:27:11:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
        Validity
            Not Before: Jun 24 04:03:10 2024 GMT
            Not After : Jun 25 04:03:10 2024 GMT
        Subject: CN=807b4c0742267bb244eeaf274d34b68d57ecb38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:f0:e5:1b:66:85:6f:85:ac:f1:aa:75:d9:
                    32:2a:c8:31:64:11:92:ed:f0:7f:cb:13:c8:66:85:
                    e2:dd:18:49:cf:5b:19:9d:39:f9:25:35:8d:be:7d:
                    f7:0c:ca:9f:b8:28:8a:3a:13:c1:53:6e:19:95:71:
                    35:33:ae:be:09:b2:4f:5b:7b:33:14:3c:9c:72:71:
                    d4:9a:8d:9c:49:86:39:6f:fa:21:64:06:c1:af:fb:
                    ad:78:33:c7:69:f6:1e:8d:c9:19:dc:4c:de:af:19:
                    70:17:fd:60:a4:35:47:8a:cf:a5:78:1e:05:56:dc:
                    06:14:a2:41:9a:16:7d:99:dc:97:51:79:18:e6:e6:
                    aa:7d:c9:fb:5c:45:55:d8:0a:26:91:f1:2f:a7:9a:
                    46:fc:c1:69:12:a2:1f:a0:a2:93:f5:9c:39:bc:03:
                    d1:01:32:3a:4e:98:b0:30:c8:dc:92:6f:33:33:99:
                    19:9e:15:68:b9:86:fd:ef:4d:f6:91:eb:03:89:cd:
                    33:60:69:4b:e9:00:20:55:44:b1:a2:e7:b4:46:16:
                    af:95:26:c9:eb:28:c6:9d:4d:a3:05:83:c6:fd:e9:
                    f7:da:eb:a1:81:4c:1a:77:3a:dc:20:9b:5a:fb:44:
                    81:11:c6:ab:2f:bb:1e:f2:b9:bf:4b:d1:6e:99:03:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7B:4C:07:42:26:7B:B2:44:EE:AF:27:4D:34:B6:8D:57:EC:B3:8F
            X509v3 Authority Key Identifier:
                keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:93:0f:e1:7b:44:62:e9:e1:61:30:2e:90:21:51:0f:03:
         67:18:30:77:f6:6c:d4:67:59:5d:94:e2:e3:a0:85:9a:98:41:
         9d:f6:8e:88:f0:88:9d:c5:2e:2c:c2:7a:e8:12:79:94:61:43:
         7a:bd:2a:b3:b4:e6:30:9e:f1:42:63:9b:e0:eb:fc:ee:e4:05:
         5d:16:e4:2f:55:4b:61:fb:9e:b5:8b:c6:02:24:3c:41:9c:97:
         ef:1b:c4:ac:83:af:5e:69:85:4e:25:d9:21:e0:21:60:5f:4f:
         12:90:8f:73:31:59:bc:19:03:c8:b3:51:c3:f3:26:88:43:d9:
         d3:91:11:83:d7:16:b5:e9:cc:1f:78:71:9c:ee:a9:56:98:59:
         35:61:5f:3d:19:d2:e0:29:68:a5:d4:6f:c6:07:9d:44:17:5d:
         e8:99:d1:ea:3e:7d:45:eb:cf:01:74:52:11:1a:cd:12:37:71:
         c1:21:ea:b0:ab:71:b6:4e:22:49:5b:a9:7c:25:b3:6a:5b:f3:
         d8:a0:10:09:01:74:bb:60:4e:da:5e:2d:23:2e:9e:ec:a0:f9:
         0a:2c:62:6f:0d:ac:e3:31:63:8f:8a:5a:2d:da:d0:48:ce:ec:
         db:ca:cc:46:3d:10:99:f6:e2:92:b0:45:5f:00:fd:cb:3c:ec:
         0a:c3:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:19:52 2024 by rpki-client on console-ams.rpki-client.org