Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File:                     yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier:          o8zX+KWmrJ6nGfDlhktEuF1l67WpuUy+kSGAw75UDls=
Subject key identifier:   F2:B3:0D:13:C2:23:76:76:87:57:82:2E:A5:4B:EA:1B:03:AD:14:87
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer:       /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial:       01903C2C926BA32454DEFD3843EFB95894F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number:          04A2
Signing time:             Fri 21 Jun 2024 19:01:12 +0000
Manifest this update:     Fri 21 Jun 2024 19:01:12 +0000
Manifest next update:     Sat 22 Jun 2024 19:01:12 +0000
Files and hashes:         1: Yuhkhaj_qsRWcigUeCcm5QMS_DU.roa (hash: //KdAq9hKpV5IWW6siSHbeWjLcYfaxm/OMr13pGE9SE=)
                          2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: 3kENonykb5NAZ8J/HjaVAvA7y1Puam+6yNmCK5XToKg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3c:2c:92:6b:a3:24:54:de:fd:38:43:ef:b9:58:94:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
        Validity
            Not Before: Jun 21 19:01:12 2024 GMT
            Not After : Jun 22 19:01:12 2024 GMT
        Subject: CN=f2b30d13c22376768757822ea54bea1b03ad1487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:fa:3c:3b:52:c1:c4:4c:4c:c5:66:bb:4c:
                    db:cd:b5:82:1f:c8:5b:47:c8:3e:80:52:d0:c6:92:
                    9e:70:d7:bb:bf:2b:9e:7f:fa:48:a7:fa:49:22:af:
                    bf:4a:c2:e0:57:a9:25:43:5b:45:f3:77:3b:59:ce:
                    0e:9a:00:80:14:35:4b:24:f0:6b:1d:41:0a:39:38:
                    33:be:87:da:60:c9:7d:f6:88:70:2c:c5:0e:4f:31:
                    74:03:0e:4b:a8:23:26:fd:f2:b0:c9:c1:d2:bc:f5:
                    2b:98:ae:56:2d:99:66:30:18:5a:ef:55:43:a1:66:
                    56:cf:66:7e:bf:d4:40:7a:e2:c6:db:59:51:11:de:
                    ac:c0:d7:91:85:80:65:fe:ae:64:33:5d:81:ae:57:
                    f5:00:9f:6e:77:96:45:35:2d:b4:70:70:44:d9:f2:
                    cc:82:f3:13:9b:d0:d1:ec:7f:67:c8:06:6b:23:33:
                    06:82:e3:2e:4f:f3:65:cb:42:49:0c:04:73:96:a7:
                    d0:1f:af:ee:18:82:f6:78:91:d9:e6:5d:31:73:a9:
                    b9:1a:4f:a0:e3:7f:f1:a2:67:05:00:60:74:d3:2f:
                    88:08:ae:fa:64:01:0b:07:09:63:0b:1e:a7:9e:57:
                    09:54:4f:8f:a6:09:f8:c0:89:e8:09:61:3a:b4:64:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B3:0D:13:C2:23:76:76:87:57:82:2E:A5:4B:EA:1B:03:AD:14:87
            X509v3 Authority Key Identifier:
                keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:ed:d7:a8:5d:0b:8a:40:c5:53:48:28:b9:91:c1:9f:84:
         7d:8a:51:56:8a:09:68:8f:d5:8d:44:6f:35:9a:0c:e9:94:03:
         0d:05:30:12:70:70:2e:f3:6b:19:94:f4:8b:2a:98:68:86:e3:
         b3:de:7b:7c:59:ef:dc:95:b1:66:17:54:23:21:a3:4a:3b:c1:
         dc:61:0c:0c:cc:7a:0a:30:45:01:8f:48:23:fc:6d:46:e9:e9:
         ad:1d:76:8e:f3:02:51:b9:57:ee:f1:54:bc:93:1e:34:49:d8:
         64:70:ac:a6:64:b8:eb:5d:1b:c8:fa:1c:5f:d1:bc:3c:05:fa:
         b9:03:fd:df:f8:92:d9:01:b1:55:b6:6c:cf:58:05:44:0d:11:
         34:b3:31:23:5a:38:32:c2:c1:0d:49:67:eb:c3:a6:8e:9b:9e:
         0d:04:61:6a:32:98:a5:cf:f0:d7:18:2e:8f:d5:cf:75:4b:71:
         c0:1d:f1:f0:df:ea:61:25:15:77:6d:69:95:04:24:fb:8d:40:
         e4:e1:40:bf:87:f2:c7:07:55:9a:0b:d5:4d:35:2e:d3:96:b1:
         3b:9a:df:70:75:67:b2:63:e5:61:95:b5:dc:30:bb:9c:d6:a1:
         a7:21:8c:61:7e:c3:a3:40:7e:f0:69:36:cf:3d:51:d0:57:67:
         01:2c:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:31:08 2024 by rpki-client on console-fra.rpki-client.org