Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File:                     _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier:          JsSiM/5eyEvsZ5CwcjqnWg7mCbUQvhiaMmKWy6PL+Do=
Subject key identifier:   72:B9:B8:32:E5:B5:DE:8D:C5:B3:6C:B8:33:8B:4E:B4:B2:89:43:DB
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer:       /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial:       01901D0F2BCBA89FD10BF1D2CA25206DB5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number:          80
Signing time:             Sat 15 Jun 2024 18:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:51 +0000
Files and hashes:         1: Qa3EgRF0m_us83QixIsOvgHKfqA.roa (hash: RiawXyg/f4Y5uV5qKPSu7rcetpZjlM8SZzjKigcoecM=)
                          2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: Tdb4NzPA9+BL/HVefMwqZ5AkjaIxfRJKHQc4eUdOwNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:2b:cb:a8:9f:d1:0b:f1:d2:ca:25:20:6d:b5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
        Validity
            Not Before: Jun 15 18:00:51 2024 GMT
            Not After : Jun 16 18:00:51 2024 GMT
        Subject: CN=72b9b832e5b5de8dc5b36cb8338b4eb4b28943db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:c7:d7:6e:1d:35:f3:0f:8e:69:88:15:c5:
                    09:13:5a:ef:c4:a2:db:1e:f4:87:79:78:f2:bc:a1:
                    20:67:58:c7:e6:9c:e3:0c:10:9e:7b:9a:e5:1d:2d:
                    e7:2e:e1:de:dd:85:b5:09:20:c0:14:27:3a:3b:6f:
                    31:b3:ad:9b:a2:92:b6:89:46:56:c2:6e:5f:82:b4:
                    c0:a6:2a:78:e5:88:5e:22:bc:83:5c:d9:d6:d2:07:
                    19:22:47:0d:e0:30:09:fb:bd:52:d9:25:da:0c:09:
                    81:76:86:d9:68:62:29:67:45:38:a1:38:ef:dc:6e:
                    b7:72:28:ff:80:0b:87:d6:1c:c7:2d:fe:3c:7f:61:
                    6f:58:7f:fc:03:1d:02:1b:da:fa:71:3c:3f:9e:af:
                    fe:36:d8:3a:de:0d:54:e0:f0:1e:d0:9a:c2:d9:5e:
                    c8:78:55:d8:e2:ba:62:1e:9f:d9:41:56:17:ff:c0:
                    d4:47:3c:5d:49:51:00:33:3d:0f:d4:3e:db:c7:e1:
                    6c:54:8b:1b:3f:bd:a8:1f:a5:80:fe:13:8a:96:79:
                    a5:26:5a:eb:0a:dc:d8:93:b8:50:d1:7f:92:e1:ed:
                    e6:39:e1:0d:2f:1e:bc:ca:84:20:80:a5:f0:9d:d2:
                    0b:29:95:bd:91:b8:26:b1:f2:87:88:58:a8:15:d5:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B9:B8:32:E5:B5:DE:8D:C5:B3:6C:B8:33:8B:4E:B4:B2:89:43:DB
            X509v3 Authority Key Identifier:
                keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:d3:b0:8d:2b:c3:3c:47:1b:b4:46:b9:6c:97:71:21:07:
         fd:52:2a:0a:a6:54:74:ea:c9:88:a4:18:de:fa:e2:9d:7c:3b:
         39:87:59:82:dc:30:21:1e:27:b5:74:b8:b0:36:5c:20:64:22:
         37:8f:c4:ba:a1:b3:7b:ce:f6:16:44:0f:dc:db:4a:7c:8a:c3:
         2b:88:b7:e7:d6:3a:3f:52:09:5a:ac:49:89:cd:8e:e5:8e:72:
         6c:af:22:00:82:f2:bb:66:f1:70:f8:24:90:fd:a0:10:b4:c2:
         88:86:ea:3b:90:01:ae:1e:a4:5a:d3:ba:cf:42:2d:f6:e6:51:
         08:2b:04:3d:2e:b5:9b:e8:1a:cb:cb:44:17:bd:30:57:d3:c9:
         3f:77:c8:72:de:32:41:2a:0d:73:86:0d:a7:44:3c:f2:25:f8:
         2f:1a:09:3a:0f:3e:aa:9a:5d:b3:de:ed:b0:8b:8d:4d:7b:1d:
         3e:6d:03:75:70:df:06:12:43:44:55:8b:50:97:f9:c7:fe:22:
         70:df:96:d2:b7:69:54:34:ea:70:f3:e2:e5:53:64:e5:05:9b:
         35:ae:56:29:76:41:67:6a:22:be:8a:93:27:78:24:d2:95:f2:
         d0:64:50:4f:ab:86:b4:4d:35:db:fe:85:91:5b:c4:2a:e1:16:
         a7:43:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:17:18 2024 by rpki-client on console-ams.rpki-client.org