Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File:                     f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier:          misUxTOFM+aL7M6syoPTjuWTHwLlWtRWSSum2U8Y0Ec=
Subject key identifier:   B7:B3:7B:4F:80:0F:BF:10:32:82:44:6F:C0:65:3E:9B:7F:A0:E0:46
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer:       /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial:       01901E8F70017309E41C3D72F75C22F58BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number:          0D9D
Signing time:             Sun 16 Jun 2024 01:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:35 +0000
Files and hashes:         1: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: rfxaIgQ3rDsi92wg3Cl+qrM5goS8H+o0ahd/rhIrwIY=)
                          2: i7BfYqRMXB_vWbCstPnD1RScV_I.roa (hash: 03oWpbIMvRi8GZM/J9J2nrFBHAupfmV82nywbW/j1IQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:70:01:73:09:e4:1c:3d:72:f7:5c:22:f5:8b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
        Validity
            Not Before: Jun 16 01:00:35 2024 GMT
            Not After : Jun 17 01:00:35 2024 GMT
        Subject: CN=b7b37b4f800fbf103282446fc0653e9b7fa0e046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:53:76:f6:ec:d8:9a:26:ea:ed:1f:ae:6f:
                    73:85:d1:8e:cb:da:60:dc:47:43:87:4a:72:c0:be:
                    b2:8b:33:de:f1:51:4b:02:7c:fe:a0:cb:f7:39:89:
                    7a:b2:1c:fc:63:75:cb:6e:6a:23:e7:e7:92:47:a6:
                    27:7a:44:79:54:10:70:a7:b9:5b:d9:e7:6a:0e:27:
                    69:81:82:e7:56:94:91:31:92:44:e5:8f:b6:bd:fd:
                    5b:48:70:94:61:af:35:a4:3a:64:e5:a5:fb:2e:4e:
                    d1:52:df:e6:33:b0:d0:aa:d8:4c:c9:91:b9:f1:60:
                    cf:bb:db:2e:c1:11:7b:3a:7a:0e:84:0e:da:d8:7d:
                    b0:44:ff:a8:68:b7:26:76:55:6e:14:0c:1d:3c:49:
                    3c:ed:64:62:7c:1d:61:a6:b9:8b:d8:69:d8:a4:84:
                    aa:87:a4:3d:04:46:88:bd:14:14:8b:62:bc:1d:7c:
                    87:07:47:d9:a0:2f:fa:c2:06:cf:c2:e8:c3:c6:95:
                    5c:8d:ea:49:c6:79:8e:d7:d7:1b:71:ab:6c:e2:d5:
                    9c:36:bc:0b:48:4f:2f:6d:81:72:e0:b0:a3:3d:95:
                    6c:a6:2d:0b:d2:6b:e6:69:9d:4d:a4:cd:f5:47:0a:
                    37:ae:f9:c6:37:ea:3c:22:96:2a:0a:8f:5f:f9:39:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B3:7B:4F:80:0F:BF:10:32:82:44:6F:C0:65:3E:9B:7F:A0:E0:46
            X509v3 Authority Key Identifier:
                keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c6:36:5e:08:1b:3e:21:26:f0:9b:9b:0f:11:82:6a:a2:4a:
         a2:e0:cf:6b:82:a4:1b:7a:a8:1f:46:d3:5a:4d:2e:3a:3f:d9:
         54:a7:08:c0:e1:47:7a:e9:e8:c2:c0:14:8f:8d:d9:fe:ee:fd:
         56:55:c1:39:18:e6:34:09:14:35:8d:71:db:b2:34:67:23:ef:
         20:f6:19:8d:2c:63:5d:dc:01:8d:5b:41:05:73:b3:34:09:aa:
         07:1d:a4:c4:38:7e:5b:ec:a6:ee:8c:52:95:40:1e:64:58:3a:
         c4:7e:fd:ab:ec:a6:c7:b1:f0:2c:e3:d0:88:83:97:fb:75:fc:
         46:cb:11:85:47:51:b2:2e:91:24:8a:15:60:09:60:87:4f:1b:
         cc:c0:94:cf:f6:39:37:f6:21:73:db:27:8c:2e:fa:32:4e:44:
         3c:1f:cf:09:c8:57:fd:41:e8:ed:3a:68:f9:27:d9:6c:da:8f:
         64:98:8c:7d:82:8e:d2:55:9f:01:5b:68:37:ee:4b:a9:f9:72:
         d5:09:5e:5c:d1:15:9f:4a:c3:73:33:ac:8e:60:cb:ec:bb:bf:
         6b:00:b2:f9:ab:24:cd:1d:cc:29:09:c7:ae:c2:0a:6c:ef:7c:
         9f:de:a9:a1:23:78:80:c5:50:6d:1c:27:4b:2a:81:ac:1f:b4:
         c1:7c:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:33:40 2024 by rpki-client on console-ams.rpki-client.org