Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File:                     ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier:          xBcDAHgtoRGk4UeZubAB/OP2xfNzZNDbIJ1tA2BxLuM=
Subject key identifier:   85:4F:FB:87:25:0A:8E:8D:60:FB:0A:AF:9C:AD:F5:68:F6:3D:51:CC
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer:       /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial:       01901BFD242D67C1026F10FEF80C349B342F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number:          0D33
Signing time:             Sat 15 Jun 2024 13:01:33 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:33 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:33 +0000
Files and hashes:         1: ESDvjqPqoqrR9OTsed-1z_PLfZA.roa (hash: 8y9pgql6xPiAVL9qxpBjAmd7iwa3BJAkcjXrj7H4p68=)
                          2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: dPXE8omcL9f2aS+ejA1/GzdUvg7gAcNHA4/jrv400fg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:24:2d:67:c1:02:6f:10:fe:f8:0c:34:9b:34:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
        Validity
            Not Before: Jun 15 13:01:33 2024 GMT
            Not After : Jun 16 13:01:33 2024 GMT
        Subject: CN=854ffb87250a8e8d60fb0aaf9cadf568f63d51cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:b7:f5:24:2d:cc:6e:e5:ea:64:23:e2:4c:
                    88:e2:d4:ac:8f:a2:bc:57:4e:7b:74:57:e5:33:91:
                    c2:52:75:06:87:69:90:7c:95:96:2f:ae:19:56:82:
                    d4:d0:55:a5:f4:43:1c:b0:70:92:df:e2:2f:4d:2e:
                    ec:5b:18:ce:a6:93:65:c1:f1:e8:50:57:be:6c:87:
                    18:3e:fa:ff:e0:7c:bc:59:b1:c6:e4:6e:90:2c:ca:
                    70:41:9e:3e:e9:81:f9:45:3f:14:7d:1b:9b:b0:ba:
                    d7:0a:58:16:41:0c:43:e0:7c:1d:2b:95:00:29:b2:
                    bd:10:c2:a8:c5:4f:55:bb:7b:d2:9a:6f:ce:04:42:
                    79:00:66:56:8b:c0:5a:10:12:e5:2c:86:3e:a2:c8:
                    7e:79:e4:0e:36:2c:d0:18:3c:05:d4:b0:c1:40:30:
                    10:a0:df:dc:89:4e:92:b8:2a:fb:1b:fa:b1:14:5d:
                    fb:07:f6:44:3c:f0:05:39:21:60:30:be:2d:16:7a:
                    56:c7:c9:04:96:f8:9c:08:d8:5c:f6:f3:40:a3:48:
                    ee:25:5e:0d:12:eb:2d:d0:da:4d:ff:94:a5:ce:48:
                    6a:82:ba:37:e8:c2:b9:f1:8f:d5:54:b2:b6:38:84:
                    0a:20:d1:b7:72:eb:2c:40:e5:55:04:6c:04:95:79:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4F:FB:87:25:0A:8E:8D:60:FB:0A:AF:9C:AD:F5:68:F6:3D:51:CC
            X509v3 Authority Key Identifier:
                keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:44:ff:ef:e1:a5:15:7f:1d:fc:aa:67:bd:3a:94:05:4c:e7:
         c6:a2:74:a9:26:c5:7d:65:a1:a4:30:97:47:2a:42:74:13:00:
         ff:96:de:ff:de:45:e8:82:95:be:6b:53:c5:37:68:d6:1d:75:
         ca:97:a4:da:49:81:6f:be:e4:3f:d5:ac:1b:df:7a:45:2f:32:
         61:0c:e0:b2:45:ab:3b:a6:8f:df:70:cb:72:46:79:f8:53:16:
         e1:8c:f9:dd:79:ec:03:70:26:6d:e6:6f:a3:5e:f3:b0:90:09:
         e4:44:a1:27:19:a5:e7:d6:8b:da:bd:bd:5b:7c:89:6c:91:5b:
         dc:b7:bd:a2:76:e5:03:5c:ce:1f:d2:bc:83:2d:36:33:e4:8b:
         98:c2:3d:5b:bf:64:bd:a5:86:dc:50:27:a2:d8:3a:7d:8b:c1:
         05:4f:11:47:7f:89:6c:11:16:17:f6:98:25:ad:a5:3d:68:37:
         f8:c4:0c:26:07:31:d3:66:14:58:95:d0:c0:ff:7d:25:66:6e:
         8a:b9:af:44:1e:89:04:4f:53:49:e6:aa:14:b0:6e:79:b1:ed:
         7f:e2:db:8e:d5:45:6a:38:ea:e1:ee:82:77:dd:b1:ef:12:89:
         2c:58:fe:7a:5a:f4:b1:09:56:1f:ea:7a:85:a7:af:86:fb:a6:
         7a:2a:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:56:10 2024 by rpki-client on console-ams.rpki-client.org