Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File:                     yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier:          MN2OwxZvuTdyd6JdGxUfxlcCbrref7IVsIOifLcuNs8=
Subject key identifier:   C3:AE:E5:C1:69:1F:98:51:5B:91:A0:E8:6C:73:03:6B:50:64:74:47
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer:       /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial:       01901EFDF0333D50178D563CC0FD0A6A6DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 03:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:16 +0000
Files and hashes:         1: 6Pd25QvIETeUiRX2VbZ2mMp2iA4.roa (hash: qeMq1pp4qncSr1PigOtZRyZAi6wHKWKW0FgoRAT88Mw=)
                          2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: a+ru+hYsdoAsYuqd64XN5Fl5OKp+NPzK/DBHKM8ph0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:f0:33:3d:50:17:8d:56:3c:c0:fd:0a:6a:6d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
        Validity
            Not Before: Jun 16 03:01:16 2024 GMT
            Not After : Jun 17 03:01:16 2024 GMT
        Subject: CN=c3aee5c1691f98515b91a0e86c73036b50647447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:9f:b9:38:cd:fd:ba:d7:f4:1e:6b:3c:b8:
                    c5:83:6e:e1:5c:f2:f6:4b:00:d9:de:38:39:b9:d3:
                    ba:04:a9:02:a5:18:59:62:a5:4f:28:40:18:61:0f:
                    40:74:a3:1d:c0:b7:fa:af:ba:0b:13:fe:8b:e3:ba:
                    2e:99:8c:72:8a:ba:92:f9:1e:9c:01:ad:c0:ab:23:
                    e6:e2:21:0b:56:7c:20:57:96:05:5b:26:b0:95:39:
                    96:32:c9:9a:48:f0:08:68:65:31:6d:99:10:95:02:
                    d9:d8:0a:22:5e:b7:d5:1a:9d:13:b7:c3:d7:24:a8:
                    3a:7b:0c:70:b8:42:b7:88:27:f9:5a:8f:06:08:24:
                    ab:dd:23:9d:3d:f5:51:e2:3b:11:fc:d0:67:5c:22:
                    32:bf:bc:e5:80:f4:5d:ba:13:57:bf:32:c6:8f:21:
                    5c:a1:0c:d4:60:9b:1a:c7:79:0a:26:41:52:6d:f4:
                    5f:4c:d5:a6:f9:30:80:1c:fe:07:7c:87:c7:d2:d7:
                    ac:99:fa:14:95:a0:ac:38:b8:de:a8:af:0c:b1:9e:
                    3f:53:5f:f2:43:92:2c:24:2f:62:c4:1b:24:00:fe:
                    b7:89:02:17:fd:7f:12:8c:1c:48:01:56:f7:14:83:
                    0d:30:3c:4c:d2:71:29:9e:d9:59:5a:07:91:e8:5a:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AE:E5:C1:69:1F:98:51:5B:91:A0:E8:6C:73:03:6B:50:64:74:47
            X509v3 Authority Key Identifier:
                keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:96:6d:c0:ea:89:70:11:ab:19:78:29:dc:f6:e4:03:6a:
         a2:aa:91:64:ed:2b:0f:89:49:54:44:cc:64:f7:3e:aa:01:4c:
         ed:85:0a:b6:51:c0:2f:b5:83:c3:43:66:49:c7:d0:d7:a1:9d:
         97:b5:e1:a5:88:85:72:fc:e2:31:f5:86:a6:fa:97:4c:a4:8e:
         d0:c4:2c:18:7d:e9:15:40:ae:fe:a4:7d:fe:d0:13:54:d6:25:
         15:fa:f7:20:ec:fc:33:42:f6:31:03:e2:98:f4:11:79:f8:5c:
         c8:6c:8a:12:b8:51:f1:e9:17:96:94:e1:aa:36:74:91:76:18:
         14:09:b1:4f:e3:d7:02:d2:15:c5:57:ad:f5:8a:c6:3b:ce:e7:
         bd:60:e3:ad:43:03:15:f9:1e:82:d0:72:fe:49:81:ae:61:11:
         62:98:ee:4d:f8:22:cd:9a:f4:5b:f2:ab:2b:35:64:e9:2e:c4:
         82:48:6e:b9:29:01:0f:92:cf:97:4e:2a:28:72:38:b6:ea:7c:
         ab:e2:7b:b4:8e:81:61:b6:d1:27:5c:ea:33:46:f2:6a:43:94:
         3a:96:8a:a2:96:35:99:f7:b0:3e:31:ec:5c:32:4f:34:8d:3d:
         76:77:f5:d2:4b:5e:9b:d7:16:f3:0b:66:0d:ff:f0:18:86:d5:
         0e:9a:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:51 2024 by rpki-client on console-fra.rpki-client.org