Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File:                     SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier:          +377Goy9122/usipfinz5s0QysyEN+kVB1MidMbwjb0=
Subject key identifier:   F8:69:E5:FE:44:72:C9:4F:B4:02:FF:58:B2:47:1E:51:38:0B:9F:37
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer:       /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial:       0190448C1C659148D78EF4FC49EF2A3E7C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number:          116C
Signing time:             Sun 23 Jun 2024 10:02:31 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:31 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:31 +0000
Files and hashes:         1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: 5oU91FeMHK5xLe9grG2pnqjlcPDTRsP/FDennzn4mPM=)
                          2: zpHBXy6xl0YQdWyNWtrMvoJxoKE.roa (hash: jXnvrp/Fl43QltJLNJZAo7NZC16d4wbMx8lcAKplpI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:1c:65:91:48:d7:8e:f4:fc:49:ef:2a:3e:7c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
        Validity
            Not Before: Jun 23 10:02:31 2024 GMT
            Not After : Jun 24 10:02:31 2024 GMT
        Subject: CN=f869e5fe4472c94fb402ff58b2471e51380b9f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:0e:60:15:1d:ea:06:2a:f2:7c:a7:ca:ef:
                    57:f0:94:c6:6a:f7:fa:39:f6:85:e6:23:8d:d3:f7:
                    10:95:f3:3b:f4:1e:22:e1:dc:33:ae:78:c8:96:00:
                    be:47:19:71:6b:02:38:8c:4d:a5:ec:a5:90:57:a3:
                    13:a2:98:af:e3:bf:6a:e0:62:eb:ba:54:b5:3b:ba:
                    b8:66:7a:59:4e:eb:e8:f7:88:5b:a8:a4:79:cd:30:
                    6d:70:8c:a2:1b:b9:4e:d4:90:4f:dd:83:85:0e:ef:
                    8b:80:0f:1a:38:cc:06:8a:59:18:7e:10:94:46:7f:
                    49:af:a9:b5:7d:67:bf:26:fd:cb:38:b6:31:0b:f8:
                    25:a9:85:e4:f7:20:e6:de:76:5e:60:1e:aa:72:b0:
                    cc:e4:86:2c:d4:00:00:0a:35:ba:3b:f6:6e:4b:44:
                    37:cc:f5:08:47:8c:b9:22:58:cc:c6:60:a8:8c:96:
                    12:51:7d:a8:55:a0:f0:f0:d2:bd:8a:37:d2:91:de:
                    d5:91:f3:e9:33:c9:cf:33:7d:58:45:1e:24:1d:1b:
                    f6:83:a2:91:25:ba:6d:a3:53:8e:f2:18:65:c3:de:
                    52:b9:95:2d:9a:f9:e4:d4:f5:0b:e1:1a:c0:d3:4b:
                    51:eb:1a:ba:bf:d5:a1:5f:02:8f:d9:63:06:ed:c4:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:69:E5:FE:44:72:C9:4F:B4:02:FF:58:B2:47:1E:51:38:0B:9F:37
            X509v3 Authority Key Identifier:
                keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9b:b3:4e:3b:67:be:63:c0:0d:4c:37:00:c9:bb:71:03:71:
         7c:a7:89:f8:c3:c4:c2:fc:55:64:82:91:d4:e3:a0:a3:2e:0b:
         f9:05:d8:da:b4:c3:b0:f7:16:a6:e6:76:0f:12:8a:4a:0d:5c:
         34:5c:7a:d0:31:6e:67:8d:9b:0e:d5:48:4c:87:0b:00:69:d1:
         66:5d:da:1c:da:e2:82:c4:68:24:0d:00:14:39:90:e4:a6:0b:
         c3:91:f0:78:b2:7f:d5:70:58:48:55:75:51:28:75:f7:33:29:
         b7:e3:2e:61:05:78:3b:66:4c:12:fb:b1:24:86:e6:ae:13:d8:
         d7:6a:5f:3b:72:be:ca:09:87:20:79:ae:65:c0:20:50:02:60:
         6e:09:58:bc:65:ec:cc:9d:91:60:6b:8d:40:66:67:9b:ff:6e:
         a3:75:cd:3a:48:26:c0:3f:ea:af:9a:b0:66:67:4e:d0:6b:96:
         7a:cc:0f:4b:4e:4e:28:e2:f6:80:39:dc:ce:b0:6a:57:8b:de:
         60:c9:36:af:a0:46:cc:23:2a:3f:14:d9:67:96:5f:8f:92:52:
         dc:d0:25:5c:8f:90:36:5f:e0:09:12:b6:cd:8e:5f:26:b6:ae:
         7b:26:a3:a4:3a:52:6f:5a:8f:73:1e:88:51:9f:40:d5:18:35:
         02:4b:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:00:03 2024 by rpki-client on console-fra.rpki-client.org