Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File:                     Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier:          2ktF8Na2o5dGTuBXfhVbWHajrsyKs718hP5DRudiPsM=
Subject key identifier:   6A:E4:C7:B2:48:83:42:12:8A:63:98:CD:A8:BF:B0:9A:78:6B:EF:97
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer:       /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial:       01901DEAF3C54D280056B233A8DA5FB53EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number:          10F6
Signing time:             Sat 15 Jun 2024 22:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:55 +0000
Files and hashes:         1: 9GEUrkamyMvDeGYUazMAyN0CLPI.roa (hash: WpvwKHpM9RBrUlgzYRDY7fSY1tMRSNe/cueJ7QkJvMY=)
                          2: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: /aHumUxkhV5XwgZWPO86orzCNqtfzUgc0mtY8Baz7hw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f3:c5:4d:28:00:56:b2:33:a8:da:5f:b5:3e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
        Validity
            Not Before: Jun 15 22:00:55 2024 GMT
            Not After : Jun 16 22:00:55 2024 GMT
        Subject: CN=6ae4c7b2488342128a6398cda8bfb09a786bef97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:4a:4f:7c:3c:88:be:fb:e1:97:93:35:7f:
                    99:25:45:02:6a:40:4d:64:ae:21:ba:6c:72:f1:8b:
                    d2:de:97:36:2a:56:95:1a:f2:11:3d:a8:f9:be:08:
                    d3:96:c4:ce:fb:f2:19:26:9a:5a:0a:7d:20:af:dd:
                    32:f0:b4:88:f4:c8:bf:6f:e8:0c:a5:73:0d:2e:6e:
                    61:b8:5a:a8:ce:37:7c:00:dd:25:fd:7b:e1:12:00:
                    7a:44:b7:9b:0b:78:47:30:ab:88:91:29:0b:66:b0:
                    a8:2f:4f:16:47:3f:96:3b:4a:1f:63:8c:81:2d:eb:
                    0d:2b:b0:ce:92:0f:4b:ad:18:b0:ff:c4:84:a1:dd:
                    a7:02:fb:6a:00:c9:65:2c:7f:83:89:c6:9f:ea:9e:
                    65:42:83:dc:0f:3b:f2:1e:cb:1e:c1:df:3a:bd:8c:
                    63:b3:b5:3e:c2:b3:1d:c5:76:56:2f:05:26:ca:21:
                    f3:ad:19:9a:d3:8e:27:da:24:0f:6c:c7:c4:24:b3:
                    1f:8a:d8:6b:93:1c:46:30:1b:ae:42:12:53:72:50:
                    4b:16:09:5b:91:a1:1f:18:1b:83:f6:8c:d1:b6:85:
                    e8:42:19:e3:71:67:ac:f4:15:ee:3e:df:29:ea:29:
                    03:5b:72:ef:42:a0:ed:9f:62:41:81:81:fe:38:ec:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:C7:B2:48:83:42:12:8A:63:98:CD:A8:BF:B0:9A:78:6B:EF:97
            X509v3 Authority Key Identifier:
                keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:94:87:60:51:07:2f:e0:2f:91:e0:30:27:bd:f6:c1:0a:
         ea:e9:c1:fb:34:00:68:e6:6c:56:d8:51:b8:a0:14:76:73:e6:
         be:a9:51:4a:5f:cf:7a:23:61:8c:e8:a9:74:83:05:03:39:61:
         0d:ad:93:43:14:e2:9e:db:01:e3:3d:25:89:5b:c2:82:66:16:
         4d:27:71:5c:c4:34:2d:a8:e5:c5:41:6d:c3:00:db:64:49:8f:
         0a:7e:0c:c5:da:55:59:b0:32:42:ec:28:bf:6f:f8:e3:60:d1:
         1b:c5:fb:12:d3:a9:c7:54:8c:d9:65:28:7b:e4:7b:ca:51:84:
         50:1a:f1:4b:97:cf:b7:00:7c:da:e6:5e:a8:d7:4a:7b:8c:2a:
         6e:a5:79:3f:b0:5a:a2:13:f7:65:11:a5:d9:71:90:40:de:60:
         01:ac:dd:32:8c:89:fa:ef:9f:48:96:79:3a:7f:37:cc:b5:b1:
         75:17:81:74:02:57:1c:30:4f:36:64:31:94:2f:9b:45:f2:be:
         82:a9:b2:e4:53:72:38:9a:8a:5d:21:1b:c7:88:c6:f4:23:22:
         e3:78:36:1a:d3:9d:52:df:11:ca:11:81:f1:df:1c:ad:37:44:
         50:c1:e9:06:68:cd:8f:bc:b9:a4:30:ca:b7:ae:86:5f:09:45:
         19:cf:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:10 2024 by rpki-client on console-ams.rpki-client.org