Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File:                     yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier:          9i4oXZbIm4nklSzvlcQvgLfoHJnT7qmKrCYKmv/kVPM=
Subject key identifier:   40:9E:FE:29:A5:1F:33:72:5B:81:5B:90:2E:A2:A7:BE:A4:10:73:FB
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer:       /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial:       01901AB313D7BDCDF5806F464A28C166B4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number:          08F8
Signing time:             Sat 15 Jun 2024 07:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 07:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 07:01:01 +0000
Files and hashes:         1: Ill1sGHntv2NjO44PFxzLc8pAyQ.roa (hash: cZce0SUqpvdD8d8H5dRsacFanZX3g3NgwBrmmLqOXcs=)
                          2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: MHqYQ76Tp3tyP1gARubZp1DFC0mpYGV4CGNlZHRy5eM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:b3:13:d7:bd:cd:f5:80:6f:46:4a:28:c1:66:b4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
        Validity
            Not Before: Jun 15 07:01:01 2024 GMT
            Not After : Jun 16 07:01:01 2024 GMT
        Subject: CN=409efe29a51f33725b815b902ea2a7bea41073fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:15:1f:77:9e:1a:77:1d:d2:53:eb:4d:f0:
                    18:05:b2:60:c0:fa:45:37:2b:dd:58:f1:10:58:ba:
                    ca:ee:e4:1c:79:f2:b8:65:d5:0c:92:90:3a:95:39:
                    0d:f0:0c:b4:03:13:39:5a:b0:36:b7:82:ec:17:6a:
                    d5:69:ae:9c:0b:11:32:10:e5:75:f6:9a:d2:57:48:
                    1b:71:ab:3e:c8:b8:b1:8d:6c:1a:03:31:72:63:50:
                    f6:ba:66:6b:d7:b3:30:7e:a0:2e:22:72:9e:ad:ee:
                    97:66:ea:9f:e1:27:d3:b5:be:92:90:79:9f:ca:66:
                    e2:38:64:1e:75:87:ab:f9:ef:43:e4:ce:fa:dc:cc:
                    41:74:34:8b:32:db:51:c7:4d:b0:9a:ed:04:27:d8:
                    24:56:f9:d1:07:18:6b:37:a6:d8:6e:85:28:60:4d:
                    76:af:91:6e:1a:16:d7:e9:5b:a3:de:14:b1:e1:e2:
                    4c:94:83:83:be:a3:d0:26:d0:3b:71:17:d9:7c:4e:
                    6d:f9:93:9d:83:e2:a4:4a:bf:2c:cd:b9:43:ce:c8:
                    7a:a1:b4:87:ee:f3:57:8a:82:58:f9:d0:a2:f7:0b:
                    e2:8e:3d:4a:a3:29:92:95:c3:ab:e9:82:53:3e:fe:
                    56:ac:c9:c9:5b:ef:06:7f:a0:87:04:39:f5:a5:bb:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9E:FE:29:A5:1F:33:72:5B:81:5B:90:2E:A2:A7:BE:A4:10:73:FB
            X509v3 Authority Key Identifier:
                keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:94:9c:cd:5c:ae:39:4e:e0:cf:51:72:d9:39:ec:64:ca:
         32:d7:7e:48:aa:7a:2e:40:97:6c:c2:e5:b0:ec:07:99:80:65:
         9a:95:40:46:6a:7d:28:e4:fd:fa:a7:8a:8d:bf:eb:79:0b:a4:
         42:f1:9c:7a:9b:4d:90:0b:32:f2:de:08:00:61:24:a1:1f:01:
         d6:1f:64:0c:a8:a6:c0:94:6c:ea:94:7a:50:fb:ed:e8:80:9b:
         3c:45:7d:c9:4a:2c:6f:82:67:63:2f:5e:9c:f8:25:26:3d:a0:
         e5:ca:69:4b:94:a0:11:ac:9e:00:30:cc:87:86:75:6e:75:86:
         a3:26:ba:5a:42:e0:7e:58:71:48:ff:06:e1:77:43:b6:5c:1e:
         55:37:eb:d7:15:3e:8b:95:a5:77:bb:9b:40:90:6f:cd:85:37:
         f6:67:49:16:c6:ba:ed:11:73:52:6a:78:e6:21:8a:de:1c:ea:
         95:f3:28:cb:8f:71:c9:5f:94:86:0d:24:03:83:39:d4:e7:48:
         c3:79:41:79:ae:5a:70:7f:f2:b2:df:bc:34:8a:af:fd:12:ee:
         3e:a1:05:05:ac:49:f1:32:8a:e5:3c:42:1d:8d:21:3f:ad:82:
         d6:d7:ce:c0:d9:4f:e0:3b:bd:23:15:d2:c3:87:f4:e7:69:7a:
         8d:95:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:15:24 2024 by rpki-client on console-ams.rpki-client.org