Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File:                     zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier:          BgYUeL2TIuFcFbP8f09UYEH6UItV+mvuCk4cg2GLCSk=
Subject key identifier:   C8:ED:04:82:75:94:D3:B9:C9:92:83:3C:97:5A:50:69:BB:BC:33:58
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer:       /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial:       019047C2B1757E339A7E825F4EF9199ACFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number:          11DF
Signing time:             Mon 24 Jun 2024 01:00:59 +0000
Manifest this update:     Mon 24 Jun 2024 01:00:59 +0000
Manifest next update:     Tue 25 Jun 2024 01:00:59 +0000
Files and hashes:         1: MKK8n36m1oywESMa6bR5-_Fd6JY.roa (hash: ScwPVFHc9mteKST5jWWngkkiSueFxnEmbAW+yVaKLm4=)
                          2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: XDN/NfAvXfDJA5Mun6pV+5eMOD6bLZs/aC+d2nMrCFM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:c2:b1:75:7e:33:9a:7e:82:5f:4e:f9:19:9a:cf:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
        Validity
            Not Before: Jun 24 01:00:59 2024 GMT
            Not After : Jun 25 01:00:59 2024 GMT
        Subject: CN=c8ed04827594d3b9c992833c975a5069bbbc3358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:2a:a4:8f:9d:d1:08:70:bc:d8:cb:e9:d2:
                    49:29:40:93:c7:97:6c:9d:09:2f:71:09:2c:bf:07:
                    55:e4:91:95:f0:45:41:60:9e:79:61:da:7a:e9:ce:
                    e2:de:a9:20:56:4b:a8:d7:90:e5:f2:06:0d:50:ae:
                    d1:8b:45:08:d1:75:0d:58:c4:6e:2c:e6:df:11:cc:
                    c3:17:7e:bb:27:07:cc:36:87:f2:a5:89:42:e8:c5:
                    bd:7d:4b:f1:a7:4c:fc:b2:50:6a:82:a1:bf:35:4a:
                    8c:78:90:10:f3:f5:72:45:81:02:20:d5:19:27:d2:
                    ce:e8:50:f0:86:be:12:3d:f7:6c:ca:60:bd:b1:3f:
                    56:b8:e1:3e:cf:66:dd:03:4d:2d:11:f9:ba:7c:ea:
                    a6:2d:e0:33:96:2e:e3:7c:63:9d:a8:01:44:0f:7d:
                    cb:66:d3:db:09:97:17:9b:bb:b6:ef:0a:92:a1:99:
                    e3:f8:6b:2e:52:2d:30:ed:71:6e:48:96:76:41:84:
                    09:14:2f:33:5d:53:7a:2b:d7:21:99:e6:67:2d:37:
                    a8:18:d7:00:9f:01:ed:ca:43:a0:41:60:63:c1:c7:
                    2e:f4:30:a8:32:68:b5:93:d3:20:fb:59:36:fb:3f:
                    36:96:5e:46:4f:58:f5:a7:17:37:f6:34:a7:3e:4d:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:ED:04:82:75:94:D3:B9:C9:92:83:3C:97:5A:50:69:BB:BC:33:58
            X509v3 Authority Key Identifier:
                keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:32:bc:c3:c3:a4:e5:d3:3a:5c:36:ad:47:33:1f:34:89:
         aa:09:a5:5a:f9:3b:f0:b7:5f:85:6c:06:2a:24:9f:2c:7f:67:
         7f:e5:ac:89:e7:ab:84:c0:3b:e7:48:b1:d2:0e:03:72:67:3f:
         0a:f9:58:1c:b0:7f:9b:f5:8f:f3:c8:b0:03:dc:e6:56:c4:0f:
         4b:6e:53:a5:74:19:3a:06:31:62:ba:e9:8a:38:05:78:b5:d4:
         5e:91:7e:9b:e0:38:0b:a1:07:7d:b2:54:2a:5d:fd:5f:58:2d:
         f4:51:35:8f:40:de:80:0d:47:10:5e:24:72:ee:86:17:52:cc:
         5d:9f:a1:24:32:19:88:92:47:98:27:c6:62:db:cd:14:d2:18:
         9c:bb:0d:3e:95:88:4d:63:6e:7c:3f:d3:c7:d5:35:91:67:d3:
         8b:d7:4f:c7:64:8e:9c:9b:c5:35:af:87:3a:1b:9f:be:d5:2b:
         d8:ec:77:18:c0:e4:b3:f1:0f:3f:e3:df:e9:0c:df:25:97:d8:
         43:d3:dc:c1:0a:57:80:39:43:35:9c:bd:a3:f1:f7:44:ff:1f:
         8d:31:b0:17:b0:ef:14:e1:ff:8f:cc:65:98:5d:10:55:61:70:
         01:7f:84:0d:97:a8:7f:9c:87:be:1e:de:87:08:90:12:52:20:
         d3:3e:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:27:53 2024 by rpki-client on console-fra.rpki-client.org