Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File:                     yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier:          4953wjUponuUMDSKUaA7FztkG/pvVVh3pkLUltL9xNc=
Subject key identifier:   9A:5E:80:8E:A4:D2:21:BC:19:DE:80:FC:00:F9:99:6E:A2:7E:77:D6
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer:       /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial:       01901F34B17116D51A87C3AA0A72A29B6496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number:          10F1
Signing time:             Sun 16 Jun 2024 04:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:05 +0000
Files and hashes:         1: fjW9QPCz0TS-ACNyYaY_QLJwJMA.roa (hash: BS4ARye4rmNsonmK7zO+va5gFUB5h2N9FvebpIEEibQ=)
                          2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: MWpb1Qk7Aew0sHuY6OlX5G7ySmlvuyEFw8u+P+pWtLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:b1:71:16:d5:1a:87:c3:aa:0a:72:a2:9b:64:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
        Validity
            Not Before: Jun 16 04:01:05 2024 GMT
            Not After : Jun 17 04:01:05 2024 GMT
        Subject: CN=9a5e808ea4d221bc19de80fc00f9996ea27e77d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:ea:44:6c:32:e2:c4:d0:cf:8d:94:b0:e2:
                    70:0f:14:01:5b:dd:f3:15:e1:ac:10:bf:42:bd:7d:
                    92:ae:13:d1:75:a7:67:a2:a5:bc:cb:d3:7b:49:6e:
                    17:98:47:22:68:86:25:7d:ba:42:1b:4b:c2:98:15:
                    d8:23:1e:f3:a4:d3:59:d0:e2:4b:f0:cf:f0:5c:90:
                    82:8c:21:47:06:d8:23:ee:14:b7:9f:2a:3e:d7:18:
                    58:41:a6:ed:1f:6b:85:d1:fb:ec:02:6a:6a:a1:d7:
                    50:92:81:0b:58:ac:ca:82:69:9a:c1:49:a9:69:cc:
                    07:59:7b:9a:35:e2:2a:0c:f5:17:c6:14:0a:51:35:
                    d1:d7:84:fe:75:dc:73:01:b4:c8:e7:fd:5b:a3:2c:
                    ae:d9:05:00:34:4b:5d:17:17:76:2e:b8:db:17:cc:
                    78:5f:14:3b:fd:38:6b:19:b6:25:63:11:cc:8a:35:
                    f4:3d:79:a1:db:af:73:ed:c7:81:db:e7:97:1b:79:
                    1d:8c:7f:61:86:f0:97:4d:ff:90:d6:7f:61:bf:4c:
                    8f:fd:08:74:79:05:90:bf:50:bf:a9:fe:c4:f8:61:
                    9c:75:27:9d:14:1d:38:36:e6:b1:18:2f:77:18:32:
                    c9:2f:9c:7f:91:c4:83:5b:6c:57:0d:e9:f7:92:aa:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:80:8E:A4:D2:21:BC:19:DE:80:FC:00:F9:99:6E:A2:7E:77:D6
            X509v3 Authority Key Identifier:
                keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e5:b6:8d:2a:29:99:bd:9d:30:5c:bb:73:3b:b0:e1:79:81:
         8b:bc:87:26:19:fb:b6:01:5d:b1:d5:e7:d5:a9:51:49:19:bf:
         17:94:23:c7:77:be:54:c2:5f:0a:36:d7:09:1b:d5:48:9a:b6:
         ee:44:8d:43:79:2f:6a:2d:c7:52:d2:05:44:9e:7d:93:5f:63:
         8a:77:4a:cf:c8:fc:72:b6:1f:e2:e3:b8:3a:8d:47:c4:b4:dc:
         f2:9f:cd:f9:0c:3f:98:d0:71:41:41:6b:b8:4c:44:2d:f5:d0:
         fe:63:9b:78:82:f1:63:7a:c7:6d:13:59:5c:bf:7e:da:f3:fc:
         06:18:31:28:7d:54:ea:e2:f5:df:3d:f4:64:6f:17:74:ce:0a:
         14:06:2e:88:bd:14:da:c3:05:9a:67:27:94:53:b3:40:34:b8:
         39:b5:b6:da:31:32:78:eb:8a:32:fc:57:34:a3:03:31:39:e0:
         bc:7c:16:64:98:3b:4a:db:2e:b7:bf:25:3a:77:96:36:50:d8:
         71:30:df:04:89:ed:9c:8c:67:4f:f5:c3:06:49:e3:24:a3:fd:
         5b:5b:52:72:d6:4b:f4:de:30:35:d7:37:b1:23:01:66:a8:d8:
         7e:3e:5e:00:58:89:66:0b:ba:fb:7a:e1:ca:b7:19:22:65:b8:
         bc:75:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:19 2024 by rpki-client on console-fra.rpki-client.org