Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          GmPa7avLgkUmc00VZTaiMI+PzbJVawxpeRsg+4EpZcM=
Subject key identifier:   F7:79:BA:C0:98:8C:D6:F2:57:FF:81:5D:40:D1:9A:C2:D9:12:1F:05
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       0190429E99342354E05DCFDA8CA938185F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          0B3F
Signing time:             Sun 23 Jun 2024 01:03:28 +0000
Manifest this update:     Sun 23 Jun 2024 01:03:28 +0000
Manifest next update:     Mon 24 Jun 2024 01:03:28 +0000
Files and hashes:         1: Phql4pegaP-8g_PnIHgfMUaaJuk.roa (hash: pvXolEsHMj4/pGHELgtk3XFYd/G9tHlwva1rJ5nPZSA=)
                          2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: A4Pr9xSC86XX5GvtqKgSW5wUOyhlC77qO+hVBd/Xke0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9e:99:34:23:54:e0:5d:cf:da:8c:a9:38:18:5f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Jun 23 01:03:28 2024 GMT
            Not After : Jun 24 01:03:28 2024 GMT
        Subject: CN=f779bac0988cd6f257ff815d40d19ac2d9121f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:41:f2:cf:a6:79:21:1a:be:28:ca:0b:b9:
                    a2:3c:19:3d:07:e9:c8:5e:c8:8d:82:d4:2a:64:c7:
                    34:fc:ed:e5:1a:c5:4f:93:a9:ac:a5:10:dc:51:59:
                    71:61:e7:27:71:c6:4b:37:51:54:31:cb:b4:ad:db:
                    3c:12:9c:d3:d2:08:f7:25:b3:8d:b0:80:5e:f0:97:
                    27:c2:c1:cf:9f:02:93:b0:6d:60:0a:05:69:85:c4:
                    5d:a2:44:cf:d8:96:de:1a:1a:9f:75:0b:12:ba:4c:
                    38:d7:39:0b:20:1a:37:08:b7:6f:43:06:a9:7a:d8:
                    9c:25:2c:6d:30:21:7f:de:ef:f4:94:61:32:9d:4b:
                    22:98:34:b3:ff:f7:81:f1:a1:b9:18:91:15:11:16:
                    a5:83:7d:01:f0:cb:ce:b8:74:d7:4d:f7:0c:5f:c6:
                    2e:a1:fc:99:0a:ab:4f:81:ce:e1:3f:95:be:d9:8e:
                    58:1b:9f:62:21:5c:94:9a:a5:3a:45:f3:2b:cf:06:
                    4f:0c:3a:dd:6c:c1:8e:b9:56:13:3a:b6:5b:6b:df:
                    33:df:60:46:64:0f:75:b7:2d:54:a3:e8:0b:32:d1:
                    71:7a:b5:ce:44:ba:71:03:b1:d5:86:b4:9d:91:b4:
                    83:b5:af:19:a4:63:30:b5:59:c1:4b:95:51:aa:87:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:BA:C0:98:8C:D6:F2:57:FF:81:5D:40:D1:9A:C2:D9:12:1F:05
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d4:2c:d1:e2:c4:c7:6b:bd:c8:e2:b0:6c:6e:91:58:a8:f7:
         57:00:82:ce:c4:c7:7a:f6:d7:d6:49:71:fd:d7:29:bb:d3:33:
         d7:a4:82:d9:0c:bd:8f:1e:71:52:32:7b:35:e8:d3:87:f7:22:
         11:92:b0:92:70:c5:63:70:d4:4b:44:c0:9f:7e:9c:b6:e4:c5:
         8a:6b:fd:41:a3:af:8b:4d:86:3b:d4:58:42:11:d7:15:0e:bf:
         46:5d:de:71:e4:2b:f1:01:a5:f0:66:66:33:38:c5:1d:f9:6e:
         0c:cc:29:93:de:48:fb:7f:fb:c5:c7:90:36:1b:13:42:a4:3f:
         5e:42:8b:f4:a4:d4:bc:33:b8:74:17:33:5d:13:15:64:f9:e3:
         df:f1:6e:20:17:ee:f5:17:a1:db:52:36:7e:82:51:cf:5a:95:
         82:1c:22:88:28:8f:10:c0:14:a5:a5:7b:fa:08:28:f3:82:11:
         62:05:7c:f9:a1:76:71:c8:5e:37:7d:3f:e9:70:f2:c9:9c:46:
         8a:bf:3a:2a:7c:15:de:a5:17:a5:61:76:98:81:66:c4:a1:92:
         f9:c1:29:83:11:f2:35:9b:f0:47:a7:ad:bd:a8:77:8c:ff:45:
         ce:e4:04:e3:94:f9:1c:ea:dd:8c:a0:a3:7b:30:ca:6f:8a:ed:
         5d:5d:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:13:16 2024 by rpki-client on console-fra.rpki-client.org