Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File:                     yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier:          cZgaVqW5XznVnetxbmTACbLndZ+LEK6wUtIUQ6H0n5M=
Subject key identifier:   95:7A:19:63:A2:9A:98:71:49:15:FE:76:1D:0B:31:44:0C:AD:A0:7A
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer:       /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial:       019041C05EDCD6108A2145BFE1F1D21A0238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number:          11D6
Signing time:             Sat 22 Jun 2024 21:00:44 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:44 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:44 +0000
Files and hashes:         1: RAAP_GrLUxmuNl7TyfBuHNa9EEw.roa (hash: iiaM/RTOovTRttdOptRCPpQ5Ps0XcPBeJKCyzgrJrmg=)
                          2: l4-dQ-fQTWSg5bNTLxQrwjWWcnY.roa (hash: aUP326l5vfdFYZ1OXCQE+NRpYxboLpm5Hcz70gJI+dQ=)
                          3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: rOja5ieXCgYdI/xNEA67+yvIPwcj2ymRcDC7AbeivKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:5e:dc:d6:10:8a:21:45:bf:e1:f1:d2:1a:02:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
        Validity
            Not Before: Jun 22 21:00:44 2024 GMT
            Not After : Jun 23 21:00:44 2024 GMT
        Subject: CN=957a1963a29a98714915fe761d0b31440cada07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:ec:c1:f3:5f:a1:06:44:c0:fb:1d:8d:43:
                    30:63:25:86:ea:b0:c9:f8:f5:46:63:0f:d2:a3:c3:
                    60:88:d4:4d:34:85:bd:5a:cd:a6:93:68:86:f9:a4:
                    14:56:1f:3b:97:81:9f:ca:12:65:9a:95:a3:c5:7f:
                    ca:12:3a:9a:83:22:e2:be:02:93:20:71:40:6a:d0:
                    4f:d8:5f:cd:2b:cb:33:53:0a:65:31:2d:22:12:c6:
                    19:46:d7:65:62:d7:97:2e:1d:53:da:77:8e:c3:a4:
                    6c:88:3b:66:82:a9:f4:10:c0:51:03:59:95:75:55:
                    a7:cb:72:fa:8f:c4:4f:f9:a1:a9:e0:19:00:32:ac:
                    02:3a:c0:35:29:c5:4f:03:87:0b:34:bb:4a:c5:6a:
                    42:e7:02:b4:06:d9:ba:d4:4e:2d:57:1c:d3:a3:2a:
                    ae:19:0a:17:5a:48:6f:ed:4d:2b:4e:24:45:71:de:
                    51:84:dd:ca:2c:c3:31:ad:dc:7c:9e:a6:1e:38:b6:
                    b0:28:c8:b8:b8:9a:db:08:86:f7:f3:8c:32:7c:9f:
                    f9:fd:98:a1:d5:54:83:fe:75:20:04:8c:74:cd:b4:
                    f7:43:5f:63:8f:59:38:5f:2d:ad:d5:d1:da:02:8a:
                    1e:8f:4b:3e:b7:ef:bd:cc:7f:9d:94:a2:be:c6:6d:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7A:19:63:A2:9A:98:71:49:15:FE:76:1D:0B:31:44:0C:AD:A0:7A
            X509v3 Authority Key Identifier:
                keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:46:c4:f5:95:8b:a6:d1:f7:61:f1:2a:3f:43:e4:e9:37:81:
         9b:ef:3b:72:3d:c9:e5:de:06:65:71:c7:48:21:41:1d:94:e8:
         46:19:1e:a0:19:d9:7e:ef:2b:7f:cf:c2:85:a9:60:de:7a:b4:
         e8:9e:10:fd:f2:69:4f:12:49:43:07:1b:9b:b1:10:c6:fd:8c:
         b1:83:a0:66:55:d9:f8:bf:9d:da:5a:f6:39:8b:2c:35:17:2e:
         2b:6d:3e:49:a0:ae:b4:b8:1b:17:1f:e5:f9:9d:5d:4d:2c:42:
         e9:e8:ff:8c:1a:45:12:a9:13:bc:3d:e7:a7:c9:f4:2e:d5:dc:
         e5:5d:71:1d:3c:f5:3f:ca:a4:0e:6b:0d:36:ef:b8:d1:78:70:
         c3:b9:e7:64:fb:61:76:b0:b9:78:d5:6e:8b:cd:d1:cb:71:41:
         1f:de:19:81:79:aa:5a:0d:39:38:bf:35:db:9f:32:ce:a4:05:
         e1:c5:4f:5a:bb:e5:05:53:83:65:d4:47:2c:90:ca:01:bc:e1:
         11:e0:f0:14:43:ce:c8:51:0b:81:b5:90:61:af:54:45:ca:f3:
         38:2e:b8:c1:7f:b9:d5:73:74:bf:8a:ed:68:35:e1:e8:c3:0f:
         23:df:88:f4:17:53:c0:23:8f:89:df:c4:3a:da:6a:6b:21:e6:
         2b:f5:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:47:20 2024 by rpki-client on console-fra.rpki-client.org