Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          uGIi8YY+mpA5YQSExp0uCeImaTyxL4YexXVYxgpAZ04=
Subject key identifier:   C8:47:AA:CF:CE:42:3C:DF:66:CF:4F:61:1A:23:0C:DC:97:F1:83:5C
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       01901DED200C93E6FCC15DB1B67EF684EF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          0B2C
Signing time:             Sat 15 Jun 2024 22:03:17 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:17 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:17 +0000
Files and hashes:         1: Phql4pegaP-8g_PnIHgfMUaaJuk.roa (hash: pvXolEsHMj4/pGHELgtk3XFYd/G9tHlwva1rJ5nPZSA=)
                          2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: GkKDJV3crQRjoXTtzU5MuX+nt516h5eKjWLQsKSTOUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:20:0c:93:e6:fc:c1:5d:b1:b6:7e:f6:84:ef:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Jun 15 22:03:17 2024 GMT
            Not After : Jun 16 22:03:17 2024 GMT
        Subject: CN=c847aacfce423cdf66cf4f611a230cdc97f1835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:b1:f2:91:87:29:5a:55:19:4f:8b:28:3c:
                    ee:e2:46:fe:57:0c:17:16:2d:be:ca:2b:7a:5d:e3:
                    bd:1c:a5:85:7a:d5:d8:c8:cb:10:b0:73:94:7f:8b:
                    bc:5d:3b:ed:05:0f:49:bf:04:cc:1b:84:99:bd:8b:
                    6e:a8:2e:71:7b:36:ca:97:b6:3b:e6:92:95:3d:23:
                    19:6e:f8:4f:5f:dc:9a:1a:e6:56:0e:81:db:bc:83:
                    3e:61:33:ba:06:e9:a8:f9:4c:6c:8b:af:ef:13:df:
                    87:93:65:da:ee:4a:89:7c:93:e5:c0:db:08:54:fd:
                    47:6c:37:57:7d:1d:71:74:27:07:45:6d:42:c5:31:
                    a0:93:62:76:4a:da:50:c2:9f:76:1b:18:21:4a:ec:
                    7d:71:30:2a:8f:f1:ea:11:4d:46:f6:46:a3:3d:17:
                    a2:e3:3c:26:01:59:a1:f5:32:35:a4:1f:be:4e:65:
                    19:3f:ed:d5:a4:57:a3:93:23:00:cb:c5:87:30:02:
                    da:45:6d:07:b4:94:a1:35:e0:42:9b:b9:b7:1e:a0:
                    07:28:f5:44:ff:e1:ec:a8:f5:d0:af:90:e5:b4:8c:
                    01:94:8f:b8:23:6b:28:a3:e2:fc:24:43:fd:e0:59:
                    2a:44:ea:61:11:d4:9a:7c:dd:c9:97:4c:1e:ff:c6:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:AA:CF:CE:42:3C:DF:66:CF:4F:61:1A:23:0C:DC:97:F1:83:5C
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:27:32:69:9a:18:65:22:b6:70:4d:67:24:aa:ba:1a:5d:6f:
         11:64:77:6f:c4:80:a8:3b:31:28:23:dc:dc:10:f5:77:48:4f:
         35:11:05:8a:86:4d:47:91:de:2f:43:7e:9b:ca:1d:d6:12:d7:
         da:94:ab:79:f3:10:d0:40:00:4b:dd:cb:7a:7d:8e:c8:9c:7e:
         7f:77:3f:ce:b5:cd:fb:41:b4:b9:9a:3d:f6:3a:24:ce:8a:60:
         80:7c:a9:e8:fc:48:9f:37:57:1c:e3:16:f7:24:13:fa:af:dd:
         5b:11:75:6f:3e:48:9e:56:30:22:63:65:07:38:39:9d:31:cd:
         49:bc:c1:9c:e7:44:0b:68:8e:9f:e8:a3:8d:fa:40:ad:6b:7d:
         9a:e8:7a:a4:9c:5f:99:50:77:7b:15:84:fc:a9:70:3c:aa:f1:
         ad:b6:33:cb:03:08:83:db:4b:ff:72:67:6b:b6:f9:68:0a:90:
         6f:7c:3d:9b:42:cf:a3:b7:cf:26:01:05:55:eb:b7:55:ba:65:
         0e:76:bd:7f:58:b5:98:cf:f1:2d:a8:bb:96:98:04:52:51:60:
         ac:23:af:49:43:7f:95:c4:95:b2:e8:8a:52:25:c4:2f:71:91:
         af:e3:cb:9d:10:1b:41:c0:7a:f5:16:d6:5e:53:27:fc:05:96:
         78:fb:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:07:02 2024 by rpki-client on console-fra.rpki-client.org