Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File:                     ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier:          xX1hTZtAdIpC1SiswDaCE/zS/lRUJ7XoIJCAhpRNsmk=
Subject key identifier:   A6:36:B8:1D:B3:F8:69:A0:4E:2D:AC:9A:03:2F:E1:D4:28:E3:91:14
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer:       /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial:       019040ADA8B7CD8889D35A0B350F75ED4885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number:          11D9
Signing time:             Sat 22 Jun 2024 16:00:41 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:41 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:41 +0000
Files and hashes:         1: HDiriWbUUICCN3bosu0VLxeBKy4.roa (hash: r0AO2sXEQkWwK679jfEp7AeV1pQPaI4LHcasTVuWJd4=)
                          2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: crl9DhR1Cwaeqx6wdlp7f3W8un4XFfSBnSSwTdOUqrY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:a8:b7:cd:88:89:d3:5a:0b:35:0f:75:ed:48:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
        Validity
            Not Before: Jun 22 16:00:41 2024 GMT
            Not After : Jun 23 16:00:41 2024 GMT
        Subject: CN=a636b81db3f869a04e2dac9a032fe1d428e39114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:7c:2f:85:d2:bd:7d:90:74:07:a2:d4:46:
                    71:c2:da:a0:3e:f8:cc:31:0f:95:df:89:d8:11:7e:
                    d7:44:52:45:ac:9e:69:df:c1:5b:5e:dc:ba:c7:c4:
                    f7:68:52:ec:d3:56:15:3b:7e:0e:52:e4:07:1f:58:
                    ba:ff:51:e8:43:5f:c6:b8:08:86:a5:28:ed:f1:f4:
                    c5:b5:8d:12:93:a8:c5:f9:00:5f:88:84:16:5b:18:
                    71:5f:d7:30:95:42:a3:e6:62:4e:7c:fb:65:f7:34:
                    96:9f:3d:db:1b:71:3e:23:8f:39:3f:ef:44:6d:67:
                    27:33:ce:21:48:82:bd:15:28:3d:56:5c:49:c9:0d:
                    94:d3:f7:56:3a:40:3c:fa:50:fd:fd:77:c2:e5:d1:
                    68:06:37:76:3b:b0:47:56:66:2f:5b:a0:23:12:55:
                    cb:ab:b3:c6:d1:dd:6a:01:18:06:32:aa:99:68:f3:
                    f1:59:45:f9:9b:79:56:cd:f2:55:27:ef:61:64:0f:
                    02:ca:7c:1d:8c:a2:70:9e:1c:b1:f4:70:ca:10:8b:
                    10:19:d0:6f:c8:54:33:98:64:26:e9:f5:0f:f8:e0:
                    bf:b8:61:9a:a3:ba:9e:6d:57:8a:c9:cc:d5:e5:4e:
                    c7:f8:c5:2d:5a:16:d2:4a:cc:1f:dd:90:4a:7f:a7:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:B8:1D:B3:F8:69:A0:4E:2D:AC:9A:03:2F:E1:D4:28:E3:91:14
            X509v3 Authority Key Identifier:
                keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:e2:f7:57:bf:7a:58:f2:fe:0c:fd:93:2d:ad:d8:01:da:
         6d:85:11:26:a9:5b:32:04:75:15:ae:73:3d:18:8c:83:77:a6:
         6e:ee:35:32:7e:d9:60:5e:22:bb:c5:61:39:c8:4c:9a:38:5e:
         84:fa:43:f0:3b:ec:73:32:46:0b:b4:0b:c1:71:38:cf:66:81:
         26:e0:de:0b:a8:bf:56:cf:3f:e2:f8:c1:50:22:c1:e8:e9:d1:
         16:43:b6:03:b4:57:8a:53:f0:7d:20:04:5f:9e:84:97:5e:13:
         f5:7a:15:f7:04:ac:12:98:ef:e5:e3:0d:5d:b2:02:bc:3e:36:
         4d:c7:bd:b9:ff:ac:a5:64:fe:ac:5a:35:2c:19:24:7b:d6:f2:
         51:10:0a:90:f7:19:23:3c:98:64:1e:39:44:93:24:f1:36:04:
         f6:2b:0b:41:c2:86:6e:7c:10:ad:0d:ab:00:06:8f:0c:e3:1c:
         0b:60:7e:b4:73:49:c7:83:6c:4a:26:3e:d4:37:aa:3d:ce:17:
         34:68:e6:8c:97:45:cf:5b:a2:fa:01:b9:e3:b7:92:ef:99:72:
         6e:0a:c1:2c:69:f2:e2:5f:d1:13:ed:9e:a1:5a:50:cd:ec:d9:
         8d:93:01:da:d2:f3:96:17:16:ea:6a:00:07:59:9c:eb:30:80:
         e9:0e:03:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:52 2024 by rpki-client on console-fra.rpki-client.org