Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File:                     yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier:          NPF184GL6OncjY3OckuTaN4VCRcZhEC0pRtEn7zInLM=
Subject key identifier:   F0:49:91:43:6A:F6:E4:09:2A:7E:11:07:F0:AA:8C:B0:DE:6E:A7:AF
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer:       /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial:       019040AE1D043B2D8161B3EFB30221C62628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number:          0283
Signing time:             Sat 22 Jun 2024 16:01:10 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:10 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:10 +0000
Files and hashes:         1: FfMwh2xFmiiv0urUpQ0cVoRxzzk.roa (hash: Jr2SQS/3b5s98FEmMpj0hY2KI/Lkqg1S+SiY86joDog=)
                          2: R1_1RcvMjRvAJ8ntCUj3VOAZIx4.roa (hash: FjckIStSOi9KX8+tjrjULqQ4sqV3V/tvo+JURvWdfYg=)
                          3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: tB25gVUne2CfGY8EcRROTXFkNux4aE7twWsDIYBhJlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:1d:04:3b:2d:81:61:b3:ef:b3:02:21:c6:26:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
        Validity
            Not Before: Jun 22 16:01:10 2024 GMT
            Not After : Jun 23 16:01:10 2024 GMT
        Subject: CN=f04991436af6e4092a7e1107f0aa8cb0de6ea7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:e1:5b:0a:1a:95:a2:e6:30:64:e5:3d:96:
                    e7:16:6a:80:00:52:1d:25:59:2c:37:22:e0:81:3b:
                    de:f9:97:30:22:f1:c4:7f:22:68:ec:49:53:14:cb:
                    79:6d:79:6b:f5:dc:8a:99:85:ad:e9:d8:43:11:86:
                    a1:22:14:ed:49:eb:67:a6:42:23:89:b9:45:85:cc:
                    87:08:cd:0a:dd:31:64:9c:92:ab:1e:0d:99:a3:0c:
                    b1:5b:d8:8f:eb:a0:dd:94:de:e5:50:54:68:27:b7:
                    04:3d:9b:d8:70:a7:5e:fe:ee:f3:3e:01:9c:26:93:
                    a9:45:4a:54:b5:03:d8:4e:2c:e8:25:ce:01:96:63:
                    e8:14:f1:44:59:34:30:e6:b4:5c:51:d3:32:6f:07:
                    1c:bc:31:99:5b:28:8b:7f:d6:92:10:16:c2:c7:8d:
                    fa:66:6b:8b:69:9c:3d:29:f5:6f:0b:2a:a8:70:54:
                    68:eb:9b:72:73:06:05:3d:20:32:d5:ef:1f:3f:f4:
                    a9:d3:bd:b3:31:75:07:7e:1e:7b:dc:8f:c9:1d:52:
                    3d:76:9c:c9:99:62:d6:6b:34:5d:ed:d5:3c:d9:aa:
                    62:34:76:b2:b1:ab:85:7e:cf:51:50:de:63:d9:2a:
                    64:fe:99:22:24:f8:49:2b:16:3a:a9:47:66:35:36:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:49:91:43:6A:F6:E4:09:2A:7E:11:07:F0:AA:8C:B0:DE:6E:A7:AF
            X509v3 Authority Key Identifier:
                keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:80:c0:1d:d1:a0:ca:75:93:98:da:2f:84:85:6a:d0:66:ec:
         b7:cd:1c:ba:b6:cb:9f:41:46:dd:bd:f6:18:bf:d8:2c:1f:bb:
         a3:ca:40:eb:4d:48:a9:e9:5d:9e:64:60:65:b1:02:63:bd:26:
         45:f9:31:9b:53:69:2a:83:b2:97:37:b6:ae:94:b5:16:57:f5:
         a7:18:32:eb:88:27:de:72:01:02:07:03:86:27:6d:af:f8:19:
         ac:8f:3a:02:38:f9:c5:ec:4b:9e:5e:29:73:dd:48:3e:14:97:
         56:1f:90:e1:86:2f:9b:d6:82:04:a3:1c:66:09:58:fc:7f:cf:
         f3:13:37:91:d6:ff:42:8c:3a:06:75:8c:a8:a1:da:67:f9:c1:
         fc:f2:03:80:8b:c5:6d:15:c2:06:0b:ce:2a:b2:1b:dc:a9:99:
         47:74:4d:9c:3c:47:51:1c:82:38:e1:38:b3:08:73:f7:19:40:
         30:8a:ed:59:ec:a6:e1:2d:39:8b:e1:dd:3d:fa:6a:06:e0:3f:
         00:65:29:02:a4:4c:d0:53:85:70:2e:6e:5d:bd:f5:c6:1b:71:
         5b:72:db:de:89:ed:eb:8f:7b:94:74:10:aa:e7:f9:d7:d7:f3:
         da:74:b6:97:21:ef:2f:17:0f:d8:0a:39:8a:d1:3e:71:c8:1e:
         d4:d2:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:37:24 2024 by rpki-client on console-ams.rpki-client.org