Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File:                     yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier:          558x6UmMitLeNNH0C5vfscdJey5/n7u+pcavFlQK1Vk=
Subject key identifier:   D1:50:08:1C:33:6D:D1:A3:06:A4:DE:D7:25:ED:D9:78:04:FA:F1:D3
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer:       /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial:       01901BFDA289B0C058A3849304DCC26E8DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number:          0EAC
Signing time:             Sat 15 Jun 2024 13:02:05 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:05 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:05 +0000
Files and hashes:         1: xxz1MkH3XZ0uIivPJ0EB3CoBEWc.roa (hash: h5XFQ2o+cG2FHlKr+1lhu9nNY/VMXwyKvTp3a8X1JHE=)
                          2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: /xSvydo+Sn1PctXxeo68M5WCQITNnxHaP0JjbsJc7rQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:a2:89:b0:c0:58:a3:84:93:04:dc:c2:6e:8d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
        Validity
            Not Before: Jun 15 13:02:05 2024 GMT
            Not After : Jun 16 13:02:05 2024 GMT
        Subject: CN=d150081c336dd1a306a4ded725edd97804faf1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:2e:0b:ad:54:23:b1:f1:8d:21:72:38:bc:
                    eb:43:69:73:25:23:d1:d9:ef:e4:45:d1:fd:00:13:
                    1e:1a:b1:ed:f3:0d:68:83:9d:e8:10:7e:9e:da:f9:
                    ea:a0:72:fe:33:9c:39:d6:6a:31:1d:c7:fd:dc:3a:
                    11:bc:06:b1:2d:61:dc:a0:b1:d1:2b:fd:1e:c8:8a:
                    71:2f:ef:a9:9b:c6:02:8c:1f:43:d2:06:ed:9f:09:
                    0b:43:d4:c6:fe:21:6d:1b:19:83:be:29:90:1e:90:
                    10:ab:13:02:92:d7:7b:c3:5d:59:cd:06:19:a4:54:
                    d6:9a:c3:2a:0c:39:05:db:fb:07:4f:3f:d6:81:88:
                    11:2d:15:aa:e8:e8:54:7c:54:4a:da:71:45:5b:e6:
                    c4:11:7b:2f:e8:fa:32:eb:0e:bd:ef:ac:0b:12:1b:
                    fd:99:eb:28:29:5e:12:a9:6d:91:74:43:14:2f:6a:
                    78:e5:fe:04:e5:66:17:69:ae:35:9c:66:ae:68:6b:
                    62:a1:84:4e:a2:ee:8e:6e:dc:90:60:20:22:a9:88:
                    d1:29:41:07:a7:10:9a:19:21:3d:30:6d:d8:07:76:
                    be:47:8b:4e:1f:12:58:63:a3:ea:9a:c1:73:c1:a3:
                    f9:60:25:3f:be:af:01:be:06:cf:c0:6f:ae:0c:05:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:50:08:1C:33:6D:D1:A3:06:A4:DE:D7:25:ED:D9:78:04:FA:F1:D3
            X509v3 Authority Key Identifier:
                keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:ab:b9:ab:e8:53:34:c8:e0:f8:a9:74:4d:8a:cc:9a:27:
         f6:2d:24:6a:de:4b:81:b3:9f:f4:7a:53:d0:63:64:91:5d:46:
         a5:0d:cd:0e:e5:4a:3b:51:07:b9:57:98:0e:e6:46:60:3a:70:
         3c:ff:46:8f:41:55:0c:f9:62:dd:d0:c3:17:9f:06:c2:f9:a4:
         02:73:1a:4f:33:ce:06:35:6f:95:be:a8:81:3b:68:ec:69:6b:
         f5:94:36:15:f4:ca:d1:91:76:e7:61:a0:83:4a:b8:3b:df:7f:
         dd:3f:ff:6c:ef:72:44:bf:4b:78:cf:70:24:a4:5f:f7:8c:40:
         68:7d:ab:1e:ba:20:2c:60:82:ae:23:d2:9a:df:c8:83:c8:aa:
         04:3c:49:06:b8:f2:04:4b:a8:87:4d:e4:dc:13:9c:0b:cc:26:
         51:4d:5a:cd:d8:75:cf:21:19:03:f0:77:31:71:fc:08:ba:80:
         40:e0:fe:1e:1e:e7:60:9d:42:97:f6:fe:b3:87:16:83:db:13:
         b6:6f:89:2d:a5:57:c0:bf:55:46:dc:c8:b9:38:d7:ec:5a:fb:
         be:32:4b:1b:89:c8:42:2b:1b:f4:ff:1f:2c:90:f1:27:fb:14:
         8f:76:18:e3:6b:65:4e:04:77:c2:7a:0a:98:d8:2d:b5:0a:06:
         c1:10:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:57:34 2024 by rpki-client on console-ams.rpki-client.org