Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File:                     yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier:          W5ICke3vdQZuxj+YP6JCyqnIalc6tBtKU5zH6C64jOY=
Subject key identifier:   76:F5:C6:52:4B:22:F4:15:82:07:1B:10:FB:B8:46:6F:1A:81:9F:2B
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer:       /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial:       01901E593572B84989E8EA5BEA8D81C59050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number:          06E7
Signing time:             Sun 16 Jun 2024 00:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:21 +0000
Files and hashes:         1: 2p7NoC24EW-Zg9OTCKVmMqobdF4.roa (hash: Vf/tx5ymjh8BcO2vz/6fds07CPbTxyw6YRORy8jqU4I=)
                          2: mtNULqQYD6M15y3iT2M6LxYNzB8.roa (hash: LsWiwT1k/KsKGX5bytznFeT6YJQ7FIkuFCe4cXIWIR4=)
                          3: usuxmxnRmJ2wxn21JqO8rPTzq0E.roa (hash: Rhl66hlVDRQA5d6a3/wIWgFFgaIFPyx6Phyb/3qoUzw=)
                          4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: RzZx0/Oayh7VgJwgXkwsLBZNMNapeNtihFlvyH6jErc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:35:72:b8:49:89:e8:ea:5b:ea:8d:81:c5:90:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
        Validity
            Not Before: Jun 16 00:01:21 2024 GMT
            Not After : Jun 17 00:01:21 2024 GMT
        Subject: CN=76f5c6524b22f41582071b10fbb8466f1a819f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:52:a7:d4:69:58:0a:c9:bd:96:c1:c6:f7:
                    13:9b:49:68:88:47:64:a4:99:89:58:fd:0b:c9:91:
                    73:fd:51:a9:8e:f1:96:a4:b5:7d:28:43:9c:2d:6c:
                    7d:3c:7b:8e:4d:ed:5e:38:94:c5:cd:3d:c9:b8:4e:
                    e2:fe:61:74:f6:0b:73:54:d1:db:9d:5a:2d:a5:0c:
                    70:36:fd:f4:a5:2c:2a:5d:bd:c5:7b:be:4f:05:e7:
                    82:42:2e:61:11:b7:1d:d2:88:0f:18:a8:8b:ab:02:
                    ae:d0:65:d1:d3:b7:68:53:98:71:85:c0:ce:99:0a:
                    da:a5:40:52:43:88:4d:2c:72:77:95:e4:d2:bb:41:
                    1e:dd:76:fd:3c:68:c9:1e:eb:ea:3c:8c:c2:8c:44:
                    28:29:5b:bd:5e:b3:2a:13:9a:82:f6:ea:eb:0f:24:
                    0d:74:2a:ac:63:2c:b7:19:f6:da:14:c2:29:25:51:
                    38:3b:0d:d2:0b:fa:9e:05:07:2d:c6:40:37:74:80:
                    ed:fd:4f:80:5f:dc:36:c2:da:6d:3e:48:a1:d0:ee:
                    8d:5c:5e:e8:7e:db:3f:ac:81:2e:32:47:31:80:16:
                    f7:b4:17:20:c7:eb:80:74:3a:6d:dd:06:5e:ec:62:
                    ab:00:cf:de:15:f5:00:78:a6:39:b2:90:cc:63:e9:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F5:C6:52:4B:22:F4:15:82:07:1B:10:FB:B8:46:6F:1A:81:9F:2B
            X509v3 Authority Key Identifier:
                keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e7:3e:c2:db:ab:08:d9:51:18:12:df:28:92:d6:4a:b8:6c:
         de:d4:93:3b:39:b1:e9:8f:c7:4e:b6:5c:6e:a5:a3:fd:37:ee:
         a7:c1:12:37:fd:dd:33:9d:9d:1f:fe:a1:d1:56:1d:81:00:4a:
         77:85:0f:7c:49:1c:2b:d5:01:c5:b0:02:a0:f9:cc:50:82:d8:
         1f:90:23:ae:8a:a3:5a:d9:ed:7a:d1:c7:fc:e6:dc:86:6b:62:
         f5:79:fc:b6:d0:6b:b5:56:f7:78:f9:60:48:12:25:ec:ae:58:
         28:23:20:96:cd:74:5d:41:76:b3:46:7b:d3:2f:32:60:b2:9a:
         02:d0:a5:b7:c1:70:9a:d8:3e:0f:fe:fd:2d:61:f3:7b:b3:c3:
         0e:ba:96:69:4f:ff:8d:33:f5:aa:9c:39:fe:bf:c4:40:28:65:
         b6:67:a4:88:ad:56:f4:d5:8c:f9:ca:52:7e:d3:50:3e:a2:5c:
         9c:27:83:f3:8b:99:23:37:b4:b3:48:47:31:42:1a:99:f0:b6:
         1c:47:71:7c:da:3c:2c:77:03:52:c3:30:ba:d3:b6:70:40:5d:
         4b:46:1f:76:5f:5d:b1:b5:12:fc:77:2c:98:02:73:08:79:60:
         2a:14:d8:8b:d2:0a:68:c5:e4:92:c4:8f:82:5f:3f:91:c7:30:
         6e:2a:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:34 2024 by rpki-client on console-fra.rpki-client.org