Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File:                     mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier:          urd9Z9WH35mmJRgmpTO7RzKqtrR2wWCBhEKzFyPOQPM=
Subject key identifier:   E0:6C:45:20:C2:7F:84:B8:BD:51:F7:61:BD:F5:D6:5B:BA:03:EA:32
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer:       /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial:       019037E1EDEEC70B79E3D649BED0DE44D75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number:          04D8
Signing time:             Thu 20 Jun 2024 23:01:11 +0000
Manifest this update:     Thu 20 Jun 2024 23:01:11 +0000
Manifest next update:     Fri 21 Jun 2024 23:01:11 +0000
Files and hashes:         1: VX76WEc2y2FrRC6vZX6CjQUlQG0.roa (hash: ofedL2vyU4RMGZfb6sma7EixWxGJi8bAaVhL+JMuxFU=)
                          2: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: GEWKMsQGhDZlUTlGXDugkmpcdpMBGQtv6l2YkPGd0cA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:e1:ed:ee:c7:0b:79:e3:d6:49:be:d0:de:44:d7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
        Validity
            Not Before: Jun 20 23:01:11 2024 GMT
            Not After : Jun 21 23:01:11 2024 GMT
        Subject: CN=e06c4520c27f84b8bd51f761bdf5d65bba03ea32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:ae:5a:c9:44:35:e8:bd:a6:86:45:5a:2d:
                    f4:aa:92:10:ad:b7:c0:dd:ba:d9:92:70:c3:64:46:
                    e1:68:be:10:20:4a:08:c4:f0:e9:1a:d1:f6:d1:3e:
                    d9:8d:08:56:b6:d4:66:7b:89:8e:fc:d9:32:2e:a6:
                    e3:c9:64:73:ee:4b:87:d2:c7:5a:8d:8d:fe:4c:49:
                    4e:a9:ad:b6:2e:3b:37:37:f8:f2:4a:41:ae:4d:4d:
                    1a:53:0e:01:31:e1:d3:6e:d2:06:d2:8a:20:5e:29:
                    37:bd:f1:c0:e3:cd:92:1f:59:f7:85:a8:32:15:c4:
                    19:8c:7e:4f:97:6c:27:aa:68:a8:29:86:20:70:55:
                    df:6b:ce:0b:85:69:94:0b:55:c9:8d:85:9d:81:84:
                    84:7f:f3:db:21:77:80:d2:ad:c8:6b:59:fc:30:18:
                    48:fe:ab:ef:e7:75:0c:a7:6d:18:d8:50:01:b7:f7:
                    13:4d:ae:ef:27:8d:a8:27:78:e7:33:49:bd:4f:f4:
                    19:4e:67:10:c1:e8:01:23:ea:0d:46:b0:c9:a5:11:
                    5c:e7:3a:43:cc:a0:37:d4:d6:03:ab:6b:c9:61:ff:
                    52:9b:1d:4a:6e:3d:69:1d:34:d3:e2:b8:b2:5d:9d:
                    63:b4:15:c6:0d:e7:a2:08:98:7e:c2:bf:dd:48:ae:
                    03:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6C:45:20:C2:7F:84:B8:BD:51:F7:61:BD:F5:D6:5B:BA:03:EA:32
            X509v3 Authority Key Identifier:
                keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:af:c9:62:a7:ee:62:79:be:15:4b:01:f2:4e:39:ed:75:e3:
         0a:ff:4f:d9:3f:47:bc:55:f7:aa:0d:6d:cf:b2:eb:1a:b8:62:
         4e:0b:fb:e7:53:36:0a:5b:43:85:c2:c0:51:1c:11:d2:95:5b:
         8a:d2:6a:fb:e1:84:45:24:18:62:fe:d6:34:01:2c:71:d5:5e:
         a6:81:5d:7d:2e:96:3d:c8:7f:b9:99:47:20:26:97:a5:07:aa:
         b7:d3:a8:e5:3e:b3:90:cc:40:32:04:9d:e8:d7:32:47:ae:58:
         d6:ec:36:ff:e8:7b:81:f5:e9:da:e6:63:97:54:c7:cf:09:40:
         be:c7:77:59:fe:66:8f:12:60:99:dd:d2:6e:ef:75:94:0e:0f:
         be:57:c8:9b:6b:17:27:66:3f:49:68:6d:70:94:4e:c8:ac:ed:
         a9:15:65:02:a4:59:02:86:b5:89:77:8a:4e:b6:68:09:11:bd:
         b3:8a:d0:e4:b9:81:34:e1:bb:c7:2e:61:47:34:e0:db:22:1a:
         5e:07:83:f8:17:3f:4a:96:f0:3c:e7:15:ff:07:71:44:42:67:
         39:d1:84:29:5f:0f:bb:3f:00:d4:f0:7b:5a:21:cc:b9:ff:23:
         7c:b8:c9:99:30:11:c7:e0:c4:22:13:1b:d9:eb:fc:df:1b:07:
         f9:5a:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:31:40 2024 by rpki-client on console-fra.rpki-client.org