Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File:                     yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier:          TJeCxn+7bgJ5mRG4k4yQ16RC6yL5TSlh5/oLwTiRObM=
Subject key identifier:   21:3E:1B:94:72:4F:DC:5C:8C:9C:CD:F8:63:10:A3:A4:2E:E8:4D:A4
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer:       /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial:       01901BFF038BD74C6944387E7528E2BAA371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number:          024D
Signing time:             Sat 15 Jun 2024 13:03:35 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:35 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:35 +0000
Files and hashes:         1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: +LnCdwDe9mPz8rXFlR8uCFvpy50dyel/45FjAJUXYbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:03:8b:d7:4c:69:44:38:7e:75:28:e2:ba:a3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
        Validity
            Not Before: Jun 15 13:03:35 2024 GMT
            Not After : Jun 16 13:03:35 2024 GMT
        Subject: CN=213e1b94724fdc5c8c9ccdf86310a3a42ee84da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fb:d0:8e:3d:b8:7c:bb:8a:77:3b:8d:26:38:
                    5b:98:67:92:37:84:76:32:f8:73:d6:fe:f0:5e:f1:
                    0e:50:15:ff:95:a2:0b:b5:dd:6c:19:9a:a3:f4:c7:
                    81:95:e0:01:28:e9:d1:46:6e:3d:02:51:09:df:72:
                    86:18:4f:6d:98:c2:17:dc:4d:e8:26:d6:c6:69:be:
                    85:ba:84:94:4b:3e:ec:3e:71:db:cc:d4:a0:b1:9d:
                    d1:82:56:f0:57:17:47:1a:fb:37:de:dc:40:e3:1a:
                    b1:f3:a4:ad:53:52:2e:f9:6d:e4:4b:d2:83:c4:b9:
                    24:97:75:cd:0b:57:1a:a5:d2:06:a6:90:60:ec:0a:
                    3a:51:18:7f:f3:56:49:f9:82:c6:f2:ab:5a:af:de:
                    5c:70:f7:26:bf:ea:c1:aa:ae:39:d5:e8:1d:bc:c8:
                    4f:d3:cf:54:96:37:dd:bc:ac:42:5e:2a:92:0a:f2:
                    9f:38:27:28:e2:23:e4:72:9d:fb:30:47:49:8a:e3:
                    75:a6:93:a1:45:d9:34:50:28:a2:84:fa:aa:76:d3:
                    80:03:ed:5d:2c:3f:bc:95:30:13:3a:c8:53:58:1d:
                    a0:ab:ec:8f:f4:89:b9:08:a0:35:3b:60:89:47:b7:
                    a9:d3:34:20:88:55:78:a2:00:28:e3:52:e3:6c:c1:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:1B:94:72:4F:DC:5C:8C:9C:CD:F8:63:10:A3:A4:2E:E8:4D:A4
            X509v3 Authority Key Identifier:
                keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:f4:2f:f9:36:6d:7d:f2:52:d8:91:da:e8:dc:b6:41:16:
         79:e8:a0:49:e7:61:de:87:93:73:c7:06:87:81:27:16:09:5b:
         24:38:5d:92:cc:b7:e6:17:df:9f:6a:b8:15:e0:0d:02:61:32:
         b9:ec:24:51:89:26:13:6d:4b:e5:91:f0:4a:5a:43:95:23:f5:
         ef:0d:64:4c:c1:04:f2:3d:cc:65:e6:bf:59:78:9e:fb:17:be:
         c5:a3:ad:78:a2:b2:09:99:c3:ef:e1:07:f3:3f:4e:4a:b0:27:
         f4:fb:ce:57:fb:ef:99:37:a4:f6:a6:bc:00:fb:26:4f:57:b2:
         e5:9d:41:30:d0:ba:6e:80:06:3e:03:5d:5d:1e:ea:8b:91:5b:
         fc:b4:27:e7:3b:1c:83:a5:3f:7f:1c:98:b0:18:11:5e:18:f3:
         f9:1a:fa:a4:6e:af:4d:f3:02:b3:11:de:82:df:81:6e:45:b6:
         12:95:6f:ef:78:65:b5:12:94:a9:b2:69:71:9c:58:64:f4:15:
         cd:0e:1e:c9:5e:2d:49:93:94:2d:ba:c6:ec:ce:41:81:b0:5c:
         ff:99:9a:36:2e:8c:7f:26:ee:52:9c:97:8f:e5:10:aa:f8:0d:
         df:83:8c:58:59:d0:9b:fe:c8:32:1b:78:d5:41:1b:15:60:58:
         21:b6:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:57:19 2024 by rpki-client on console-fra.rpki-client.org