Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File:                     yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier:          CVagpkiDBuTDFUe65Py6pKQU8xJgNrPiPvth1QjQyl0=
Subject key identifier:   79:C9:E8:7C:A2:B4:F9:1E:36:9F:F9:1D:FC:CE:F2:2B:82:67:0B:E5
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer:       /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial:       01901EFD63F4E9088F5859EE4C951936DC14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number:          015D
Signing time:             Sun 16 Jun 2024 03:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:40 +0000
Files and hashes:         1: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: d+ujKNmiYkoxLj3oLwcZZbmq1xg2pM3H6b0LCiVPbw4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:63:f4:e9:08:8f:58:59:ee:4c:95:19:36:dc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
        Validity
            Not Before: Jun 16 03:00:40 2024 GMT
            Not After : Jun 17 03:00:40 2024 GMT
        Subject: CN=79c9e87ca2b4f91e369ff91dfccef22b82670be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:ba:52:f2:8e:0c:a0:79:d3:62:0c:70:d0:
                    c7:a5:a0:51:e6:d1:ee:e4:da:d7:79:22:3f:f5:fd:
                    4a:ff:fa:81:f2:0b:96:35:b3:28:54:1f:e4:bb:9e:
                    23:48:26:de:12:7a:e1:80:bc:ec:fe:bc:7d:97:23:
                    e9:88:aa:bd:95:f8:8c:ee:a5:7c:f7:56:c3:9e:95:
                    a7:ce:f8:e1:c4:21:ca:46:dc:27:ae:08:e2:18:24:
                    4a:74:8d:5c:00:ae:cb:ca:f7:27:95:bf:d2:58:ed:
                    f9:85:52:e5:46:7f:79:5e:99:54:b6:2f:e8:77:ff:
                    ac:6e:2d:b0:33:8e:fb:cc:e9:0a:72:f0:f7:94:2f:
                    89:4f:ab:35:9b:6b:31:62:0b:e2:fd:c1:47:00:76:
                    88:48:e3:9a:9d:55:5b:c7:c7:f6:82:79:15:48:8d:
                    34:9e:e4:ae:15:1f:47:12:af:d8:e3:2b:82:24:63:
                    5b:32:23:0f:02:db:e1:2e:e4:a6:a9:b6:d3:e4:d2:
                    3e:39:61:d8:79:7f:e9:27:41:1a:e6:57:07:64:3c:
                    7e:86:ae:5e:30:e3:0c:a6:92:7f:80:ca:5b:3b:7d:
                    b0:8e:65:b2:17:06:06:48:28:15:9c:67:ea:1f:06:
                    cb:65:43:e6:58:08:37:ec:e5:ec:e2:28:ea:01:4c:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:E8:7C:A2:B4:F9:1E:36:9F:F9:1D:FC:CE:F2:2B:82:67:0B:E5
            X509v3 Authority Key Identifier:
                keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:07:d2:56:07:96:5e:89:9b:0b:eb:90:44:8e:e4:e7:d7:a4:
         89:29:c5:72:b0:85:8e:19:96:17:fe:e6:4d:68:2d:9b:be:5a:
         f0:ba:4a:d3:fb:0a:71:d1:4d:1c:f1:f0:9f:59:21:09:22:66:
         7c:12:89:70:1e:21:84:2d:d7:aa:8a:20:3f:e3:b5:dd:42:91:
         b2:a3:61:d5:0a:ee:52:ec:8d:9a:d9:c6:18:25:94:96:5f:0b:
         6a:b0:aa:d4:7b:30:d4:9f:a8:b2:d6:c2:38:df:bf:f1:32:22:
         ea:08:3a:dc:d7:4c:6a:12:3c:7a:c1:45:4c:79:d3:fb:b4:59:
         ea:8a:35:b7:3e:e9:0d:0f:d7:69:0a:f3:9a:79:0c:9d:53:45:
         22:fa:3e:d9:00:95:14:fc:d1:99:93:6a:2f:b1:7c:86:60:39:
         c8:77:82:e6:68:c1:4e:74:3d:b0:49:1f:a7:9d:30:fa:10:7f:
         6c:5e:50:5e:0c:da:3d:00:88:54:86:c2:d9:f2:e2:48:66:88:
         fc:ef:46:70:37:b9:1c:37:60:cc:d5:a3:d5:16:40:d3:40:b5:
         5e:3c:5e:aa:d4:3a:47:73:fc:af:46:b9:c4:c7:6a:01:e5:de:
         22:98:d7:0f:3c:2a:84:cb:25:63:f2:c5:3e:e2:e0:ce:88:57:
         49:b9:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:22 2024 by rpki-client on console-fra.rpki-client.org