Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File:                     y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier:          +mT2Nib1Sngstg9tMSovhjGxphWIX7M/YstruNvxZnU=
Subject key identifier:   42:FF:23:1D:1F:EE:CC:8B:90:B7:FB:23:C0:7B:AD:A3:66:78:4D:F0
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer:       /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial:       01901D4682733D71645709E6D3B3D4537B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number:          0289
Signing time:             Sat 15 Jun 2024 19:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:18 +0000
Files and hashes:         1: 9uhiPEdbFX2QYUEiHjssSEqe9Lc.roa (hash: JDGLc5NMDkCMPEQ4C1PpyznWkfQ7D4xOVKs5nSGckyE=)
                          2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: fYuPfmjKjkhYVbdKz9T+D/7p/DXWggiI3JQBS0czHtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:82:73:3d:71:64:57:09:e6:d3:b3:d4:53:7b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
        Validity
            Not Before: Jun 15 19:01:18 2024 GMT
            Not After : Jun 16 19:01:18 2024 GMT
        Subject: CN=42ff231d1feecc8b90b7fb23c07bada366784df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:1d:6f:ae:ad:3e:45:23:30:1c:33:d9:1f:
                    5f:2c:dc:86:8b:c1:91:fc:c5:2b:7f:47:1b:16:61:
                    1e:79:e4:85:92:3a:0e:f2:80:f1:99:3a:19:bc:e3:
                    34:4c:c0:f5:ba:cc:53:af:0a:1b:d1:b6:5b:ef:bb:
                    bc:cc:40:3e:87:7c:e6:54:fc:61:8a:b5:6d:78:24:
                    47:1d:ac:10:19:62:41:52:14:60:f6:dd:25:4d:2c:
                    ae:4b:06:e9:87:7b:e9:08:88:e4:45:5b:33:b8:1e:
                    11:44:fe:db:be:e3:37:f0:14:21:da:83:c7:77:d9:
                    9e:01:2d:39:55:fb:fb:d5:3b:18:3b:f2:fb:1c:48:
                    75:d4:7f:1a:fa:86:76:0b:18:b3:58:05:50:12:6d:
                    ef:77:ca:c7:ae:ab:66:a6:dd:3e:78:c0:3e:66:ec:
                    c8:73:97:fb:f9:ea:3b:58:9f:c5:43:92:e2:58:96:
                    90:6b:3a:ed:c0:64:19:74:83:a4:a0:04:e9:be:ea:
                    66:11:c5:cd:c5:35:5a:ed:88:5c:67:7b:df:a8:3a:
                    2b:78:55:54:da:07:0f:57:5b:f6:2f:cc:6b:10:6d:
                    fc:d7:91:f6:99:eb:97:70:46:a6:d2:3e:5b:5b:5c:
                    68:27:40:ac:c1:a1:5f:87:c1:11:d3:0f:12:5b:40:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FF:23:1D:1F:EE:CC:8B:90:B7:FB:23:C0:7B:AD:A3:66:78:4D:F0
            X509v3 Authority Key Identifier:
                keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:dc:f6:aa:07:a3:b5:df:1a:c0:53:93:2c:3c:d6:21:8f:95:
         ea:48:26:fe:f4:dc:6e:49:f2:b2:6c:3c:e5:c7:4c:b1:ce:96:
         4e:98:47:f4:71:71:6a:91:21:6d:fc:64:73:07:a0:36:17:b8:
         4e:e7:b0:4a:13:f1:e0:ba:d7:e4:dd:5c:67:e7:14:25:36:c4:
         97:ee:22:2e:08:23:fa:94:f0:2a:83:b9:ec:f6:89:c7:f4:5f:
         58:92:98:73:70:c3:6f:02:84:07:5c:e8:69:60:10:7f:95:dc:
         a2:a9:82:f8:85:d1:2e:9b:3d:c6:33:7d:7e:8e:8e:70:21:95:
         53:3f:e5:b5:84:6f:b6:e3:c1:39:0c:ad:9d:5c:c0:fe:a5:0e:
         6d:61:0b:d3:35:9b:10:ed:a8:6b:4f:08:21:4a:94:e1:41:ac:
         e5:d2:e8:54:42:c3:aa:35:f7:62:e9:0c:0a:75:57:e7:24:d3:
         a2:a3:de:63:7f:c2:68:c5:b6:e3:07:40:02:90:03:4f:fd:48:
         27:20:c2:f2:c9:d0:8a:ee:25:21:0b:66:44:bb:79:cc:f3:e0:
         6e:d1:71:51:02:e6:f0:24:44:80:66:69:b9:17:82:80:d5:d9:
         d6:c0:97:f5:fd:24:a8:06:7c:dd:3e:8d:42:f8:37:d7:b9:ff:
         69:84:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:34:57 2024 by rpki-client on console-fra.rpki-client.org