Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
File:                     y45sWpKLpIynL3B7t5TeSdcKDnc.mft (raw, json)
Hash identifier:          Rrdy1VVbQ9d+p91I9AjwocNV1iTR8zoNmY/xYN7pvCA=
Subject key identifier:   BE:CF:81:4F:0A:DE:79:4F:34:31:F5:17:7B:99:E6:F9:71:1C:9F:2D
Authority key identifier: CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
Certificate issuer:       /CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Certificate serial:       01901DEC06527E58C0F8E58548EAC199EC89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:02:05 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:05 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:05 +0000
Files and hashes:         1: 1-hCsELGTPhIOYXe-h8aaadcnQJs.roa (hash: LHOr094XHMaHqDlni+k6P0YmcbpeRQwEoX9siJfGWmI=)
                          2: y45sWpKLpIynL3B7t5TeSdcKDnc.crl (hash: qwB3cOimxWw1Mt6XQsZs/dPZDj0pXn5M3Udg2IfeP8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:06:52:7e:58:c0:f8:e5:85:48:ea:c1:99:ec:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
        Validity
            Not Before: Jun 15 22:02:05 2024 GMT
            Not After : Jun 16 22:02:05 2024 GMT
        Subject: CN=becf814f0ade794f3431f5177b99e6f9711c9f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:b7:04:75:a7:45:51:27:89:20:67:5e:ca:
                    dc:db:e2:7d:d0:54:8a:5c:6b:c3:46:11:8c:d2:b2:
                    11:e8:f0:61:f2:5d:4e:34:18:d7:c9:80:67:8c:5b:
                    cb:f2:d9:7e:16:00:b5:d5:a6:63:f2:03:21:b9:36:
                    ac:ef:c3:66:e5:40:16:7b:63:16:0e:8e:f2:21:bd:
                    96:9f:78:7f:ce:5e:e5:e7:2b:fd:30:c6:44:ea:43:
                    ab:c8:f7:44:2d:e9:58:60:71:21:ad:39:d5:b0:9c:
                    18:fb:1e:cf:4c:50:cf:bc:9c:e1:aa:69:3c:1d:19:
                    c3:19:61:2e:6d:5c:a2:59:b2:30:9d:ba:57:dc:a9:
                    5a:a3:d3:f4:d0:66:c7:86:b4:da:7d:c1:8f:7c:8b:
                    33:d7:ba:54:7d:0c:8b:58:b1:78:ef:5e:f5:c8:c9:
                    f4:48:30:46:64:03:bd:29:ed:05:f4:35:44:c7:45:
                    de:da:e7:9d:59:e4:70:44:3b:a1:a9:cd:ef:14:82:
                    c8:a5:0a:a8:bf:5e:fa:5d:ea:63:67:2a:ca:67:40:
                    77:99:6f:b9:85:c3:22:5f:08:23:21:7b:b6:66:c0:
                    e8:30:02:3f:38:a6:99:ed:37:bc:bc:56:ad:f9:65:
                    b9:80:72:80:1e:68:e6:82:1c:cd:59:42:5d:6c:fe:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CF:81:4F:0A:DE:79:4F:34:31:F5:17:7B:99:E6:F9:71:1C:9F:2D
            X509v3 Authority Key Identifier:
                keyid:CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6e:9a:12:28:0d:00:df:43:d2:29:83:04:7a:f4:97:72:09:
         30:dc:ca:8e:3c:14:2b:e9:88:92:38:ab:8f:90:79:d4:b2:c5:
         9a:12:44:44:16:b5:66:02:c8:b1:75:d3:8b:ea:f5:7f:86:f8:
         9e:22:0e:a8:41:26:19:14:9c:94:bb:72:07:d1:58:52:28:60:
         1e:d8:f9:82:e9:18:b9:ab:64:f3:9e:d3:f2:34:82:e3:de:fb:
         4e:db:c0:f9:e9:ad:73:80:b2:13:0f:1d:db:3f:6c:2f:f1:a5:
         3c:76:db:b7:ed:73:a3:2a:f1:cd:a7:b6:7f:d1:84:0b:59:ca:
         f1:7d:ce:01:2a:ee:a4:74:16:6c:d0:a8:de:51:f1:49:20:84:
         95:15:6a:d5:5e:c0:2b:ea:93:f3:59:93:0c:5d:85:90:14:1d:
         fe:0e:f9:14:68:f0:3d:76:7f:2c:8a:88:d2:36:90:7d:5c:9f:
         72:2a:78:1c:75:1f:90:40:f7:1f:b2:26:a5:38:4a:ec:f9:b1:
         56:4a:7d:1b:04:b2:6c:81:00:2d:04:8c:3b:d0:05:05:59:d2:
         e2:84:39:2e:3b:bd:2a:b2:e1:cb:ed:9b:83:fd:a5:3f:d9:27:
         39:96:e7:6f:c3:6a:e6:c9:57:d3:a1:11:5d:9b:f4:2d:fd:33:
         3a:c8:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:39 2024 by rpki-client on console-ams.rpki-client.org