Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File:                     2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier:          FVWJ/sTcqIEG0Tw/Q5jfdHcYHPO8QHwK18QWE6W89FI=
Subject key identifier:   68:52:FC:49:A4:03:39:B0:79:51:EB:82:7E:24:97:2A:7E:05:48:5C
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer:       /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial:       019040AFB9CE7B57B67D91F68DBBF57F497D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number:          0ABB
Signing time:             Sat 22 Jun 2024 16:02:56 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:56 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:56 +0000
Files and hashes:         1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: crk7kU3Mozxr/uCm1clokP/v2SU/m6nnqbJOhq48xjk=)
                          2: 9WPViYLmxngK4PtReNx3CJ--9IA.roa (hash: Ar15Y1TY5gUVu7HKSy3rHb2jNHFtEW6gx+xnw41Hsgo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:b9:ce:7b:57:b6:7d:91:f6:8d:bb:f5:7f:49:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
        Validity
            Not Before: Jun 22 16:02:56 2024 GMT
            Not After : Jun 23 16:02:56 2024 GMT
        Subject: CN=6852fc49a40339b07951eb827e24972a7e05485c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:d9:c7:43:bc:7c:d9:af:b5:24:3f:f6:ef:
                    77:da:71:f3:2d:42:ef:d5:5c:fc:f6:0d:0a:8c:ca:
                    74:3f:0c:e6:21:a4:22:81:19:b0:a5:6b:96:c9:69:
                    8c:f1:a2:29:97:be:90:4d:b1:2e:3b:ff:7d:6e:d1:
                    29:0a:de:ac:58:dc:92:3c:88:c6:0b:e2:97:91:ad:
                    ef:a5:7a:4e:36:1a:59:83:78:7e:77:39:ee:eb:23:
                    14:90:23:55:f2:8f:63:fc:e5:ff:6c:09:0c:32:b1:
                    c2:28:ae:d4:b0:7e:21:1b:c3:bd:7a:0c:b6:cf:d0:
                    ca:8b:c6:0e:f4:ad:cc:43:23:93:a9:99:7e:a9:a5:
                    02:02:70:96:37:97:b2:36:fe:da:e4:a0:2a:7d:6d:
                    04:28:a2:1d:be:8d:50:4f:08:a0:08:b5:f8:8e:75:
                    b2:f7:28:12:66:4f:ba:60:d6:39:30:ac:fd:ce:64:
                    0a:ca:d4:8b:fc:3d:ea:ec:d1:be:6b:fb:f8:0b:23:
                    89:2e:a7:9e:e6:97:55:12:fc:2d:d1:b0:69:80:f1:
                    c5:19:06:2a:6a:b3:67:e5:da:72:5d:7a:aa:2b:6a:
                    2c:6d:57:ad:a4:e1:d9:ef:b9:a3:6a:84:05:21:8a:
                    a5:62:b1:0c:a6:3a:4f:3e:ac:53:1c:de:8a:fa:7e:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:52:FC:49:A4:03:39:B0:79:51:EB:82:7E:24:97:2A:7E:05:48:5C
            X509v3 Authority Key Identifier:
                keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:3f:bc:3e:71:5b:e5:54:18:ba:92:02:aa:66:2c:ab:ee:
         9c:45:29:58:b8:af:a7:0e:5d:76:2c:00:ad:1b:c6:27:0f:0b:
         23:20:98:d6:76:48:64:39:51:6e:af:d1:9f:47:9e:67:e3:c6:
         01:7e:9c:83:a7:e3:01:ce:0e:76:2a:45:34:32:e0:e7:57:08:
         7f:de:8a:ef:07:b2:4c:13:01:d8:a4:23:c3:a4:70:f9:41:d8:
         1f:d9:45:c6:44:75:23:de:0b:3f:e8:01:42:b7:25:79:82:42:
         2a:6b:b1:11:ab:e5:e5:73:0a:09:33:27:c3:d5:69:7f:2b:be:
         40:34:8d:ed:47:41:b7:61:99:2c:63:dd:ab:10:a3:72:68:55:
         c7:b9:f7:0e:7b:fb:9d:6a:78:a5:4c:76:d6:33:c8:51:74:8d:
         13:ae:13:b5:4c:11:ad:62:25:e0:00:82:a9:a0:04:08:f3:e3:
         bf:d4:49:48:34:f3:80:49:b9:73:57:2e:ed:38:5a:20:d2:a4:
         e6:d3:ef:56:18:76:c5:2c:12:9d:04:a0:1c:69:ed:a7:ad:a6:
         93:17:82:1f:9d:13:69:0a:d2:84:f9:03:cd:ae:e8:5f:ac:6e:
         fe:1a:88:e1:f8:8f:18:9f:12:9c:23:ca:fe:0a:8e:cc:38:3d:
         93:c6:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:39:58 2024 by rpki-client on console-ams.rpki-client.org