Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File:                     yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier:          fxzhUGu4vZZ2XA5ydDhlUTb+LOj7C1M8/iXSov5k2ts=
Subject key identifier:   CB:50:07:28:9E:D9:63:86:A8:33:50:F5:AA:46:B7:9E:06:A6:48:B7
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer:       /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial:       01901D4679CCB6440047CE4069E332AD8591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number:          0E59
Signing time:             Sat 15 Jun 2024 19:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:16 +0000
Files and hashes:         1: VdExYz2klk7xgVOG78BFe8HvGJ8.roa (hash: vDKdF7+FU60mAq4iA3a3AWyBYcs6dGq4+o1r89iduZU=)
                          2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: W9erU3NfuR5nvONeflVIvZFRhGAlWn+tVjd/JAqSjH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:79:cc:b6:44:00:47:ce:40:69:e3:32:ad:85:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
        Validity
            Not Before: Jun 15 19:01:16 2024 GMT
            Not After : Jun 16 19:01:16 2024 GMT
        Subject: CN=cb5007289ed96386a83350f5aa46b79e06a648b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:3d:05:75:65:f1:97:af:25:b5:79:e8:67:
                    b8:7c:a5:f3:19:73:55:3c:07:94:eb:0a:c1:71:1e:
                    1f:b5:76:82:50:30:5d:a7:be:7b:c3:15:d7:e6:e0:
                    d3:12:f1:89:ee:ac:88:1f:d9:33:61:2e:02:1e:e8:
                    d3:6b:2e:eb:1a:46:c2:4a:ef:52:af:08:b9:46:6b:
                    8f:d9:53:57:e6:87:0a:b6:9c:7b:c1:2a:ed:89:74:
                    27:d9:97:c9:7c:3a:fc:64:ad:50:4c:25:d3:fb:4a:
                    ba:25:ef:27:04:8f:5d:d8:63:e5:ca:44:37:eb:2e:
                    c5:f6:e9:83:b6:1c:9b:f2:bf:f8:12:ce:90:c7:a8:
                    9a:18:df:ea:6c:b9:94:89:a5:b0:b5:1e:0f:fb:08:
                    8c:dd:95:90:32:a7:33:66:d5:dc:c5:9b:10:d2:5b:
                    c6:6c:37:3d:aa:f6:41:a1:f4:f2:56:18:df:95:a0:
                    78:5b:4b:13:98:94:96:de:52:a6:52:7f:3e:35:5a:
                    13:92:a6:17:32:6e:34:b9:42:6e:a0:ad:aa:10:c6:
                    f4:e0:4e:f7:5d:75:a0:f3:d6:ff:fb:b4:1c:ae:cd:
                    8e:36:10:7b:ad:14:a8:76:ac:dd:d9:19:56:ae:b2:
                    95:03:09:82:38:9d:b1:e0:1f:87:ca:41:84:f5:75:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:07:28:9E:D9:63:86:A8:33:50:F5:AA:46:B7:9E:06:A6:48:B7
            X509v3 Authority Key Identifier:
                keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:2c:bc:d9:fb:f7:33:ef:6c:71:db:b5:2b:cf:28:4c:76:
         e6:4d:d2:fc:68:51:9d:32:3f:b6:19:74:75:62:63:ca:2d:ab:
         3a:ae:39:6c:b3:b5:c9:b7:8f:85:1e:d6:6c:6b:0e:8a:c9:83:
         ea:a9:0f:74:55:f0:51:c9:04:42:36:93:c8:3f:5c:bf:78:ff:
         2c:11:62:38:cd:87:cd:8a:99:a7:29:21:b3:02:e9:07:20:88:
         07:a2:1b:d1:fd:9e:1b:dd:fd:bc:56:2c:b8:95:df:53:cc:89:
         24:23:09:03:e0:76:85:6a:7e:df:ac:23:56:3a:d6:d8:4e:d5:
         ca:91:ca:64:a2:c2:66:4a:d6:64:c3:8f:1e:01:1b:7f:98:3a:
         46:18:36:e1:e8:07:28:11:82:15:68:46:ba:60:8b:81:67:1e:
         2a:05:3b:ed:61:88:4e:93:e4:5b:7b:ff:d3:4c:9e:68:ee:ee:
         94:15:d7:a3:43:29:0b:33:9e:df:2b:cf:a4:5b:6c:5d:f6:08:
         35:87:05:a4:5b:7a:86:bc:45:44:ea:5d:7a:97:01:ea:46:8c:
         6f:cb:02:41:ef:9c:66:fd:b1:01:f2:ef:4b:60:6e:e4:48:a7:
         be:57:36:8d:92:3e:7d:61:89:41:f0:71:65:88:29:c5:e7:0e:
         84:bd:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:07 2024 by rpki-client on console-fra.rpki-client.org