Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          CYHKHtU/4LBQBIf3cKHG89GmA8eZkrcD4H5pCm8lWT4=
Subject key identifier:   9C:36:0B:C7:C7:00:BD:1B:51:D2:DC:57:D5:D8:13:77:82:87:2E:FC
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       01901E21B6AC5290A2821C428A024426A91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          0F91
Signing time:             Sat 15 Jun 2024 23:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:44 +0000
Files and hashes:         1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: HLmxU2IBFIcE6pcFwmH11VmX98nlKUqeduxBtP8vSrw=)
                          2: GHE_EI9dYmcDQ5TBN7W-kWGB1Bo.roa (hash: rqFeFt3X2pMNHHXGYTgFQemqBRvU6CtKe5D41J9g/GQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:b6:ac:52:90:a2:82:1c:42:8a:02:44:26:a9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Jun 15 23:00:44 2024 GMT
            Not After : Jun 16 23:00:44 2024 GMT
        Subject: CN=9c360bc7c700bd1b51d2dc57d5d8137782872efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:c9:15:d2:13:61:73:40:b1:85:43:af:36:
                    6c:a6:2d:7c:c3:72:ff:6e:66:8a:1a:0d:1d:91:b8:
                    53:87:4a:15:42:e7:6e:5f:2b:c7:f6:d4:a1:fb:69:
                    5c:5d:27:b6:72:90:05:f1:a0:e7:5e:ec:f0:91:23:
                    c0:eb:98:b8:cd:50:71:f5:2d:61:86:c8:fe:06:48:
                    b9:22:2f:f8:7c:c4:67:92:90:59:86:12:97:a4:2d:
                    ce:3b:27:b4:59:da:22:d6:86:f3:53:91:c7:15:c4:
                    a5:8b:b4:6b:cd:d1:8f:b6:ff:42:2d:92:7c:b0:f3:
                    6f:82:4b:de:9b:e4:3a:2a:c2:7c:82:76:be:8e:a0:
                    e4:74:d0:18:44:dc:05:7c:04:84:79:80:ee:1b:01:
                    56:59:14:a8:a4:09:96:84:c4:16:a9:a7:aa:ad:d9:
                    7c:83:5a:f7:56:cb:a8:a0:22:f9:f5:7f:d0:1c:c8:
                    f4:f4:8c:5a:e4:5e:58:89:19:3c:4c:7d:9d:3e:58:
                    b3:70:3a:92:65:a0:b1:95:86:47:16:bb:eb:62:9d:
                    7a:9b:bd:d5:19:73:9d:2d:33:45:1a:92:cf:fd:66:
                    e3:7c:73:fc:8d:d8:fc:3f:28:28:49:de:b7:c9:57:
                    12:ca:79:06:14:5b:8d:d4:cc:c6:9e:cb:4f:b8:a7:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:0B:C7:C7:00:BD:1B:51:D2:DC:57:D5:D8:13:77:82:87:2E:FC
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:12:0a:c4:18:e8:fe:c4:11:49:f5:b8:45:78:0c:71:9f:c1:
         f5:75:e4:6e:fa:da:9c:c2:13:f8:f4:8b:8b:0d:1f:ad:47:14:
         b4:7a:75:71:9c:0f:d4:2e:5b:27:de:3f:11:e0:d9:08:64:5f:
         92:8c:b6:90:15:3d:cb:df:ec:f7:ab:7b:e1:2f:d6:9c:55:eb:
         cb:d2:ac:21:45:9e:a5:61:4c:0c:c6:7c:6b:a0:9b:16:23:5a:
         1d:75:4b:79:33:55:75:1b:d8:57:84:e0:27:e9:a1:05:ba:a0:
         22:2e:61:99:a5:03:7e:7a:a0:7e:c2:ae:3e:00:cd:59:23:60:
         eb:5e:00:21:7c:ee:c9:29:32:50:b8:b5:50:85:86:8f:99:60:
         61:bc:d0:f6:e1:3c:20:3a:2d:75:11:ce:bc:40:09:58:56:f5:
         b7:79:48:59:3e:5a:48:9c:7d:a0:d6:69:6b:89:60:bb:3f:42:
         c5:c0:18:ca:6f:e4:ad:90:72:9b:95:0c:52:55:47:f8:a1:d9:
         ea:a5:98:d2:d5:e7:2e:b7:96:b1:aa:64:c6:8b:2b:b0:68:96:
         ea:76:c2:3e:e6:cb:2e:44:b7:32:ad:d9:67:d8:21:3f:96:3c:
         8b:8c:eb:96:24:db:38:47:8a:5c:03:c2:cf:4e:18:61:af:57:
         c3:17:3a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIbasUpCighxCigJEJqkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjQwNjE1MjMwMDQ0WhcNMjQwNjE2MjMwMDQ0WjAzMTEwLwYDVQQD
Eyg5YzM2MGJjN2M3MDBiZDFiNTFkMmRjNTdkNWQ4MTM3NzgyODcyZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5HJFdITYXNAsYVDrzZspi18w3L/
bmaKGg0dkbhTh0oVQuduXyvH9tSh+2lcXSe2cpAF8aDnXuzwkSPA65i4zVBx9S1h
hsj+Bki5Ii/4fMRnkpBZhhKXpC3OOye0Wdoi1obzU5HHFcSli7RrzdGPtv9CLZJ8
sPNvgkvem+Q6KsJ8gna+jqDkdNAYRNwFfASEeYDuGwFWWRSopAmWhMQWqaeqrdl8
g1r3VsuooCL59X/QHMj09Ixa5F5YiRk8TH2dPlizcDqSZaCxlYZHFrvrYp16m73V
GXOdLTNFGpLP/WbjfHP8jdj8PygoSd63yVcSynkGFFuN1MzGnstPuKffJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw2C8fHAL0bUdLcV9XYE3eChy78MB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhIKxBjo
/sQRSfW4RXgMcZ/B9XXkbvranMIT+PSLiw0frUcUtHp1cZwP1C5bJ94/EeDZCGRf
koy2kBU9y9/s96t74S/WnFXry9KsIUWepWFMDMZ8a6CbFiNaHXVLeTNVdRvYV4Tg
J+mhBbqgIi5hmaUDfnqgfsKuPgDNWSNg614AIXzuySkyULi1UIWGj5lgYbzQ9uE8
IDotdRHOvEAJWFb1t3lIWT5aSJx9oNZpa4lguz9CxcAYym/krZBym5UMUlVH+KHZ
6qWY0tXnLreWsapkxosrsGiW6nbCPubLLkS3Mq3ZZ9ghP5Y8i4zrliTbOEeKXAPC
z04YYa9Xwxc61g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:43 2024 by rpki-client on console-fra.rpki-client.org