Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File:                     1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier:          urm43/mva6suhZv/aMvXs/6YrUCC7tjK0m8T/R/oLnU=
Subject key identifier:   88:33:29:63:AD:82:B9:B9:9F:0E:14:EE:49:91:A7:BD:68:95:25:92
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer:       /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial:       01901D0F7CEAB9E6481ABCA33DC3A94AF4C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number:          0D4A
Signing time:             Sat 15 Jun 2024 18:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:12 +0000
Files and hashes:         1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: 9ufEzCxoD/SjbALFn+DhkttgruId0yWaGeLa1lC4P18=)
                          2: zgM-If4ilb3a7cLvfsa0GRmFr7g.roa (hash: VpF4RKQDpxuXfPb8N7s4ZGqvXekvH0LUbdYxovauwFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:7c:ea:b9:e6:48:1a:bc:a3:3d:c3:a9:4a:f4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
        Validity
            Not Before: Jun 15 18:01:12 2024 GMT
            Not After : Jun 16 18:01:12 2024 GMT
        Subject: CN=88332963ad82b9b99f0e14ee4991a7bd68952592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:73:8f:e1:69:7d:8c:5e:f1:6a:8b:04:c5:
                    ed:7f:83:ca:bb:6a:fa:61:f5:dd:b7:41:82:7e:28:
                    ec:33:92:6e:52:f4:b4:fb:f6:4a:ef:95:98:20:ee:
                    99:9d:b1:ae:6b:21:f2:6e:41:a8:7a:df:48:3d:4b:
                    64:ea:de:f9:23:b6:31:c3:e9:47:d3:61:69:9e:c5:
                    fa:39:f3:c8:48:e9:2c:df:f9:0e:32:94:92:f7:47:
                    c9:85:cf:f0:b6:a7:67:68:72:ef:7b:f8:fb:1e:ed:
                    11:3b:15:49:b5:6c:2c:aa:26:41:f3:5c:72:f6:83:
                    09:b1:cc:d5:b9:4a:74:36:f9:78:19:bf:51:d2:19:
                    bc:33:44:ab:d9:24:ea:75:5b:21:d4:fd:cb:68:10:
                    4d:ac:78:90:97:83:b1:39:97:ea:69:a0:b6:45:c8:
                    b7:0c:d9:14:34:60:4a:3e:66:54:0f:e9:d6:68:21:
                    7b:c4:c9:5e:22:1b:c4:92:dc:40:59:dc:10:85:1c:
                    73:b5:fc:0d:13:03:f3:ed:e7:a1:ea:e4:3b:7b:4c:
                    67:4e:94:f2:14:fa:cf:a7:e8:58:a1:3a:69:75:62:
                    db:66:8f:b3:0a:3a:ed:2d:d9:51:7c:07:01:e5:57:
                    60:20:46:8f:95:5a:f5:ca:e8:ad:3d:12:ef:d0:45:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:29:63:AD:82:B9:B9:9F:0E:14:EE:49:91:A7:BD:68:95:25:92
            X509v3 Authority Key Identifier:
                keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:05:ee:a6:9a:df:d9:43:79:7e:16:2a:47:8f:45:4e:5c:2d:
         38:3d:aa:5b:8c:46:18:ce:ac:a0:1a:8d:47:48:ab:69:7d:ed:
         1f:53:e5:bd:e3:ff:96:fa:25:ae:ca:6f:c0:ca:a5:df:3f:32:
         58:0b:38:2a:6f:a6:87:93:54:25:32:fb:3f:15:83:54:c9:04:
         d1:cc:4c:d8:1c:53:5a:e9:66:73:c0:9b:cf:fa:65:ad:37:86:
         71:60:2a:af:b0:c4:28:b7:36:31:b9:dd:d1:c2:36:97:9e:59:
         87:fb:b1:0f:6f:4b:18:20:ac:4d:48:b3:88:a5:4f:91:66:b7:
         49:54:76:67:90:b3:64:87:fb:2d:9e:06:98:00:d6:e2:81:29:
         fe:13:9b:7a:78:9d:e3:ac:ac:90:34:29:dc:da:e2:a2:a2:1a:
         fa:c1:fb:6f:60:07:58:12:52:1e:d5:45:15:90:7d:3b:1a:9c:
         63:31:5b:d9:79:e7:60:57:2c:38:30:77:4c:32:c5:4b:66:39:
         6f:4f:25:8d:74:3e:47:61:59:7b:9c:cb:1e:e6:01:69:d3:99:
         f5:d9:10:ea:05:95:3b:78:15:ef:37:e5:90:4c:e5:e8:ed:22:
         fe:91:70:fb:40:b4:c2:2b:0a:54:f1:f5:f7:ed:f9:ea:a9:6a:
         07:0b:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:37:30 2024 by rpki-client on console-fra.rpki-client.org