Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File:                     Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier:          SNCYhLTrc0B1fOJK39XZ5W+i3SAwfrf3lFSJ0we09y4=
Subject key identifier:   72:94:26:02:FB:AA:B5:07:53:6C:58:58:C5:42:DC:A4:DA:F2:B3:8D
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer:       /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial:       0190448B6C89449352A25AE5989123E4008A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 10:01:46 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:46 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:46 +0000
Files and hashes:         1: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: RA4FlaJfywZn02JGKlA2gAiG/RNlrYaxpfYqq9Vt36s=)
                          2: tl4RdW2jq6P3-6N106_qPAd66Lk.roa (hash: Tq7ZGHJwoXuz5Q4M53aVeSrw9r9EKAtjro1f837zVWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:6c:89:44:93:52:a2:5a:e5:98:91:23:e4:00:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
        Validity
            Not Before: Jun 23 10:01:46 2024 GMT
            Not After : Jun 24 10:01:46 2024 GMT
        Subject: CN=72942602fbaab507536c5858c542dca4daf2b38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:91:41:ae:d7:f8:e4:5c:7c:40:90:c6:35:28:
                    71:c1:9d:f8:e5:b6:7e:86:a5:7e:13:86:e2:a8:12:
                    51:19:7a:f4:01:c1:1a:2d:51:7c:4d:05:ae:96:d3:
                    54:dc:ae:ea:36:39:c0:b3:48:42:71:98:2e:36:8c:
                    83:02:3b:dc:bd:6d:c0:07:97:18:e9:33:30:d7:f2:
                    ac:1a:1a:1b:43:01:c1:a4:61:89:2e:a8:9c:06:d3:
                    d8:75:90:0c:98:2b:fa:65:f4:fa:1f:7a:7d:8a:05:
                    52:70:75:90:83:bf:be:a3:24:76:88:e7:a5:38:eb:
                    13:5a:69:30:4d:d1:c8:b6:1e:81:ca:c1:0b:b9:e4:
                    22:b7:2a:f0:ee:f9:ec:23:3b:09:89:7a:d3:75:42:
                    eb:20:43:d1:58:c9:73:2f:b4:62:6b:6c:33:f3:bd:
                    6b:7b:07:98:3a:79:6b:4c:a4:a7:ed:6d:1f:63:35:
                    26:09:9b:65:38:6d:43:c7:04:3f:3a:6f:57:5c:67:
                    88:79:a8:e2:39:e2:23:59:79:ce:fc:f6:ea:b3:11:
                    95:e8:9b:19:3b:d5:e4:e9:76:a2:a1:6d:e4:ef:7d:
                    40:27:ed:6e:80:c7:20:1e:1b:e4:9a:29:9e:fb:1e:
                    26:b6:33:79:ea:f1:d2:20:10:7a:b8:31:5b:fb:d1:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:26:02:FB:AA:B5:07:53:6C:58:58:C5:42:DC:A4:DA:F2:B3:8D
            X509v3 Authority Key Identifier:
                keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8d:b8:42:ac:bb:72:78:56:79:32:ff:27:6c:ca:65:1f:a4:
         b1:56:b8:c0:1e:16:0a:a1:67:9a:7b:59:3d:75:4c:a2:cf:cd:
         5b:9f:cc:ed:55:f7:90:d6:ee:04:3f:75:89:95:13:6f:c9:72:
         3a:16:79:a8:e0:f9:07:67:ce:a6:80:41:ad:9b:9f:f7:af:1d:
         88:89:32:a8:80:63:73:99:8f:4a:55:21:a5:1b:35:ab:ef:91:
         41:b1:58:40:3f:f3:f9:5a:39:cb:e2:3c:65:09:5a:9c:d1:40:
         f0:39:41:0d:a5:ea:6f:fe:56:48:bf:55:40:a9:9d:68:65:70:
         a2:76:0c:36:a8:58:7f:8b:55:78:22:3b:04:8a:bd:8b:c5:e9:
         1e:14:08:cf:f5:28:ff:ca:9b:22:8b:8d:37:55:28:03:49:ae:
         4b:97:0f:c1:82:c9:56:ff:1e:13:1a:1b:63:61:f1:e4:51:d6:
         36:2d:03:41:72:74:05:e2:70:61:8b:ae:3b:e7:fd:41:89:51:
         71:e3:58:c0:33:b5:5c:cf:88:86:f3:01:1b:38:1f:ff:d5:de:
         76:21:35:34:da:f5:25:7b:b6:9e:1f:73:1a:fb:3d:91:0e:6f:
         ac:d2:72:36:ca:02:a0:2c:70:0d:38:56:be:53:68:7d:d2:e6:
         a1:c3:03:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:53:47 2024 by rpki-client on console-fra.rpki-client.org