Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File:                     ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier:          W5Jo/QU+F1WEQmEuH2qzLpQ/ZmFQd3/4ff/1OfpBhIk=
Subject key identifier:   14:86:6A:06:05:4C:11:6E:71:A7:76:5D:A4:60:8C:23:04:3B:0B:2A
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer:       /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial:       01901DECF7320218B25CDC5EA3E252EC7AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number:          05D3
Signing time:             Sat 15 Jun 2024 22:03:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:07 +0000
Files and hashes:         1: KG9u-CV8kUoTu5pJeRfWlD-eZQc.roa (hash: sQn3Djr+wlEqtwKDtU9eyEmPaOtji8KV72eHw35F59Y=)
                          2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: ANblBAIJFQp1lh3EpzzjWSjST2Jn/IVoc2fxc5INvaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:f7:32:02:18:b2:5c:dc:5e:a3:e2:52:ec:7a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
        Validity
            Not Before: Jun 15 22:03:07 2024 GMT
            Not After : Jun 16 22:03:07 2024 GMT
        Subject: CN=14866a06054c116e71a7765da4608c23043b0b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:16:a7:3d:6e:d3:43:ac:5a:e3:e6:06:76:
                    3d:bc:b4:54:7a:7f:10:3d:ef:05:01:04:c5:d3:95:
                    03:aa:71:a8:ea:c5:04:b1:28:bc:d0:fc:87:90:7b:
                    be:7f:42:52:a7:bf:c4:17:e7:3b:4d:c6:22:fb:4d:
                    23:40:0c:5c:7c:6e:d3:28:02:b8:5d:66:6c:22:60:
                    d9:2d:ce:f4:b8:2b:30:17:c6:24:8c:b6:12:99:6f:
                    54:ba:11:a2:4b:7a:3c:1b:9a:04:af:db:e4:f9:47:
                    d3:c7:4f:cb:a7:3c:3b:14:d8:bc:d5:6c:a9:a2:49:
                    c8:59:20:74:e6:34:a7:83:86:ed:f7:23:ac:fc:7f:
                    2a:0a:c2:56:4c:8a:d2:58:0a:3d:a7:91:82:d1:90:
                    bc:44:4c:da:a4:10:f6:5c:bc:e4:6d:66:65:83:12:
                    d9:3c:e1:45:5c:8a:13:1c:3d:e0:d7:d1:e3:32:66:
                    b8:16:62:0d:76:2d:fa:cc:cf:d7:60:04:b1:a3:f7:
                    3c:25:de:4c:84:8a:bb:34:8a:e9:a7:19:8f:7e:98:
                    1b:0a:c4:41:ba:3d:e4:ff:dc:10:c4:7e:eb:e3:f9:
                    87:df:61:72:a8:af:d7:8a:11:e5:6e:fe:30:92:1e:
                    a1:86:c7:53:7f:13:10:67:5b:a5:ff:47:51:c9:a6:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:6A:06:05:4C:11:6E:71:A7:76:5D:A4:60:8C:23:04:3B:0B:2A
            X509v3 Authority Key Identifier:
                keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a2:5e:ee:06:4c:aa:59:c6:9c:8a:4a:97:e6:f4:81:28:a1:
         be:0d:d0:40:89:34:d4:b2:14:58:82:4a:f4:6c:92:29:8e:72:
         3e:12:62:52:06:3f:47:66:6c:09:87:57:ee:8b:38:5a:a0:ea:
         ff:f9:35:5c:6b:0c:a8:11:1f:7b:3e:54:43:20:06:53:ec:7a:
         aa:42:50:30:11:9a:56:31:72:4f:d2:0f:8c:fa:cc:c4:c5:4e:
         b6:ad:1a:e7:0f:e3:22:3e:e3:53:b4:30:01:30:08:fa:15:b9:
         b0:39:34:ea:d8:6c:57:f0:57:61:27:df:8f:45:88:d1:1a:61:
         80:ed:c7:aa:cc:78:60:6c:1a:c0:5a:a0:95:4e:f2:03:29:40:
         31:a9:08:ca:5f:cb:25:12:b1:6e:5e:33:d5:63:2f:8e:21:1e:
         6f:29:32:b2:01:85:70:e3:72:1c:2c:6c:3b:98:f2:51:8e:8e:
         fa:14:75:92:36:d7:b1:3f:13:05:63:1d:69:56:36:af:31:3f:
         c0:c9:9e:14:34:8e:e1:74:21:31:8f:b3:9a:5f:10:d4:a3:b1:
         f0:2c:f1:15:9c:89:db:fc:37:38:26:d5:6c:3c:09:83:37:59:
         74:a2:c6:89:92:28:c8:53:17:60:f7:96:85:01:79:c1:34:c8:
         7e:3f:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:25 2024 by rpki-client on console-ams.rpki-client.org