Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File:                     ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier:          nS09vf8fa3ouiPtyIQ9ZPtkeFTb/tgnQkw7/CzGF1JE=
Subject key identifier:   1A:0C:13:19:8E:9B:05:7B:C9:21:53:8C:66:E2:E5:EF:F1:0F:C6:0F
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer:       /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial:       01901DED2E5CD4A034D102FD3A81D7030396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:21 +0000
Files and hashes:         1: HDiriWbUUICCN3bosu0VLxeBKy4.roa (hash: r0AO2sXEQkWwK679jfEp7AeV1pQPaI4LHcasTVuWJd4=)
                          2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: LDmi7mCK3KzQYlyFLPnSEBFNVQGDCazIKpkcOvO6/kM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2e:5c:d4:a0:34:d1:02:fd:3a:81:d7:03:03:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
        Validity
            Not Before: Jun 15 22:03:21 2024 GMT
            Not After : Jun 16 22:03:21 2024 GMT
        Subject: CN=1a0c13198e9b057bc921538c66e2e5eff10fc60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:27:a5:10:40:58:af:fa:a8:48:a8:d1:3e:
                    9e:98:86:05:ae:f4:66:a2:f4:77:72:af:e9:70:00:
                    36:6a:83:fd:96:61:05:2d:d2:34:cb:0b:8d:3f:1b:
                    d7:2e:b3:12:79:65:01:7c:0b:28:e1:79:8d:22:93:
                    35:0c:43:78:e9:42:d6:c6:bf:a0:d8:bf:b5:57:53:
                    ed:7d:1c:05:c0:b2:db:74:18:2e:2f:fa:12:33:df:
                    17:ed:e7:c9:98:72:e2:56:ac:db:63:bd:ac:02:c7:
                    e5:70:68:9f:f3:2b:3d:4a:30:bb:93:a9:3e:42:2b:
                    95:b1:3b:85:fd:e0:c9:3f:84:ad:76:34:5a:f3:75:
                    28:85:fc:d9:e3:6c:13:42:3f:93:9b:48:3c:20:31:
                    6c:fa:14:10:e0:bf:01:25:a3:6d:c2:ff:b8:04:17:
                    c0:a7:f5:53:c1:63:73:44:ac:19:7c:05:3a:a9:43:
                    91:22:56:a3:9d:80:76:f6:74:b8:12:e4:ba:9f:9c:
                    8b:d6:a0:ab:fd:70:d8:2d:a8:0d:96:2c:43:e5:60:
                    35:78:62:88:02:4f:95:ca:c2:c4:7f:3f:93:7a:2e:
                    19:51:6d:0d:f3:6f:2b:7a:40:c5:2e:ae:46:f0:f1:
                    a8:8a:a2:bc:7b:d1:9f:93:a1:8d:77:a0:13:5d:0d:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0C:13:19:8E:9B:05:7B:C9:21:53:8C:66:E2:E5:EF:F1:0F:C6:0F
            X509v3 Authority Key Identifier:
                keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7c:a7:85:88:b4:63:71:75:e7:8b:9d:59:1e:e3:5c:f0:c8:
         ed:66:73:e1:42:e8:11:91:5c:77:3a:9d:b8:b9:1a:96:f9:55:
         47:9b:52:81:55:6e:04:ea:eb:aa:9e:9d:e1:d2:20:45:44:8f:
         79:8f:22:98:42:e9:cf:77:1a:14:96:3f:19:92:0d:1d:39:6d:
         ee:8e:7b:82:de:a6:bc:83:a9:d0:22:a7:56:4a:d6:da:36:5f:
         98:65:66:dd:5e:dc:8f:b8:10:c1:af:f0:2c:3b:f2:d2:fb:3f:
         b2:a0:46:dd:37:99:d4:6b:02:6d:df:2a:00:45:1b:fc:6a:a1:
         76:a3:3e:50:85:9f:5f:86:47:bb:64:5e:58:32:dd:6d:79:38:
         cd:4e:aa:2d:a2:18:ec:9f:b5:da:37:3f:6e:be:41:ce:f1:62:
         61:61:52:8c:38:3e:85:9f:d9:f1:98:ff:52:21:b4:f7:5a:42:
         6e:e2:6b:c3:07:38:36:78:4a:9c:41:6e:8f:af:96:73:5d:4d:
         a0:09:cc:bf:74:31:73:0d:58:29:27:51:04:fb:0c:97:be:cb:
         78:5b:59:a8:0a:f1:cc:6e:52:80:63:bf:b0:41:2d:de:b2:83:
         ac:6b:49:c0:88:e6:a5:e8:28:97:cf:4c:b3:7d:7d:2b:b5:f3:
         7e:1f:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:01 2024 by rpki-client on console-fra.rpki-client.org