Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File:                     _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier:          HwyQCVuf9WBovXHyBDm6ZoueBbNMBBen4jyuZGWGWlA=
Subject key identifier:   32:3A:3B:84:6C:BF:D4:BC:79:78:20:6C:20:E7:82:CF:B0:B7:83:D6
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer:       /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial:       01901DEC9E2AC5EC1664D60D43634E3597D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number:          0985
Signing time:             Sat 15 Jun 2024 22:02:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:44 +0000
Files and hashes:         1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: cF3CqbX3Lr8cer69vYGUsEjx0RcSYG2Katzl/l6Y+9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:9e:2a:c5:ec:16:64:d6:0d:43:63:4e:35:97:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
        Validity
            Not Before: Jun 15 22:02:44 2024 GMT
            Not After : Jun 16 22:02:44 2024 GMT
        Subject: CN=323a3b846cbfd4bc7978206c20e782cfb0b783d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:00:4a:b6:07:7f:94:04:b0:de:f2:5a:69:
                    51:ea:49:62:c7:9b:05:09:b0:d8:41:3b:8d:a5:cc:
                    41:77:01:7a:b7:bb:e2:eb:73:9f:ef:db:eb:05:1b:
                    ab:62:21:1a:27:30:5a:09:14:b9:93:3e:ad:41:18:
                    2e:7e:f3:dd:0d:2c:2c:ad:db:3e:67:35:22:1c:93:
                    cf:9e:cc:23:15:5f:78:76:b5:b6:02:21:94:3c:a5:
                    94:60:dd:5f:83:b8:cf:b4:9a:9b:73:d7:7d:ae:a9:
                    08:5b:f7:c2:9e:55:97:b4:99:7a:16:41:14:cb:b4:
                    8f:a3:b5:fc:d4:a2:dc:16:60:95:64:ba:18:30:94:
                    f5:8f:be:07:6d:80:99:75:19:af:0a:bb:e8:57:5c:
                    cd:77:a3:34:05:0b:97:b7:ea:39:8b:22:3d:f0:63:
                    37:e0:68:3a:8d:d8:da:d3:9d:45:97:21:d7:ed:57:
                    5e:20:7f:15:af:d8:2b:f3:20:31:ab:9e:5e:86:9b:
                    3c:64:6d:89:e8:4d:a9:6a:8a:9b:35:30:2c:8c:bb:
                    38:13:5c:29:b6:bd:94:24:0a:d1:ad:f6:37:20:fc:
                    d8:4f:56:85:e5:29:b9:3e:cd:91:ab:49:d7:a3:38:
                    8f:42:3f:6d:f4:50:07:d3:4a:1b:48:b2:d1:a3:cf:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3A:3B:84:6C:BF:D4:BC:79:78:20:6C:20:E7:82:CF:B0:B7:83:D6
            X509v3 Authority Key Identifier:
                keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:13:f0:97:83:2c:c7:e5:26:e3:73:d2:9e:5a:7d:6a:6b:
         a8:81:fb:0e:5b:80:e6:66:75:9f:83:aa:e9:d5:35:26:7d:5f:
         1c:e4:ab:9d:ad:61:32:c4:20:55:50:3b:62:85:e6:8f:79:22:
         73:69:3c:6c:b8:6f:be:35:b5:04:76:f4:18:68:39:52:27:9b:
         63:0e:ae:9c:fc:17:80:80:65:18:f5:7b:4d:59:6a:e3:f8:bc:
         75:33:02:93:1c:3d:42:25:42:ea:7d:95:2f:d0:93:59:90:a6:
         ea:a7:b3:b6:bb:0d:7f:35:a5:67:74:42:0a:58:ca:65:55:c4:
         a9:79:31:a5:27:ae:98:04:f2:40:9c:fd:45:fd:83:aa:33:10:
         c6:20:14:85:46:73:1c:dc:28:56:a3:60:d8:5e:24:bc:96:9c:
         c7:bc:45:8a:13:8e:44:de:5a:02:ba:ba:45:bf:a8:3d:55:a4:
         53:f8:34:1e:9d:4c:cb:40:75:bb:54:84:f2:0d:30:ab:7d:63:
         a6:87:b7:7e:1d:d1:47:97:ff:75:fa:3d:41:16:fa:7c:a0:e0:
         cd:4a:67:f0:7e:f1:f3:dc:c3:4e:09:36:e3:15:bc:1d:4e:7e:
         7e:7d:d2:68:96:fb:68:52:9a:a9:54:0b:83:bb:8f:f4:bf:1e:
         c9:9f:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:56 2024 by rpki-client on console-fra.rpki-client.org