Manifest

$ rpki-client -vvf rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
File:                     7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft (raw, json)
Hash identifier:          Iw4VGzYvSVXKBvemC6w2WlxXHhcMQvF6wNsfPJm8Xxk=
Subject key identifier:   80:CE:15:46:BA:F3:77:D1:44:F7:C4:4A:92:29:00:AE:1C:CB:B3:C2
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Certificate issuer:       /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial:       625EB90191FB17FDB0561F92CD15E12066C5A90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access:      rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
Manifest number:          021B
Signing time:             Sun 26 May 2024 09:29:58 +0000
Manifest this update:     Sun 26 May 2024 09:24:58 +0000
Manifest next update:     Mon 27 May 2024 10:36:58 +0000
Files and hashes:         1: AS7480.asa (hash: u66VbTtGwi8f3Ww7mEFxHDyPuh5CKEuYH2iR/m9bZMU=)
                          2: AS60614.asa (hash: EXDWC1bEGxxr8g+h1hYm1rpMUeKOzfvRb6iH5QnqwWw=)
                          3: 7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl (hash: Et4hP1EryYTlI/aVY2FKK27aanGWrG0RXhWYpQn+FH8=)
                          4: AS209557.asa (hash: G4JztwvtApI4XJoDUN8pC9UctK5+XCbDNWxHv0AF5qc=)
                          5: AS212666.asa (hash: sWLA0PbVZoxyluc8kD/nY4qfHc9Xtk58G3QVlLOo/hg=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
                          rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5e:b9:01:91:fb:17:fd:b0:56:1f:92:cd:15:e1:20:66:c5:a9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
        Validity
            Not Before: May 26 09:24:58 2024 GMT
            Not After : May 27 10:36:58 2024 GMT
        Subject: CN=80CE1546BAF377D144F7C44A922900AE1CCBB3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:56:38:2e:e2:ea:fb:cb:d5:6d:f5:0c:e6:
                    ae:59:d4:c1:af:6b:f1:e3:57:fd:d3:46:f8:b1:63:
                    33:63:f0:ed:c0:ae:fb:fa:59:d5:1b:f7:3e:ed:67:
                    b6:4a:12:f6:d6:f5:34:58:07:45:b2:5d:74:a7:76:
                    1e:b8:69:15:87:b2:76:fa:1f:f4:ba:c0:e9:fa:df:
                    2c:92:7d:2a:ec:9a:db:d2:07:ed:fa:d9:43:00:0a:
                    79:77:d7:48:6b:bc:db:2b:20:2e:6a:82:8c:51:30:
                    f3:1c:21:51:fe:06:72:3a:f0:cc:65:c8:07:2c:86:
                    2b:07:b0:1c:1c:f8:f1:ce:11:86:6d:58:5e:43:2c:
                    b6:ea:e2:46:47:9a:c8:d8:f8:9f:33:32:29:46:d4:
                    7e:16:78:8c:6c:57:9e:9b:30:88:b1:47:a0:68:f2:
                    33:d6:61:78:0b:73:70:97:eb:64:74:0e:47:e6:f3:
                    74:0b:4d:89:0d:9e:c9:38:f4:70:35:d6:ed:4e:aa:
                    35:28:63:bc:e8:f3:83:91:5b:1e:e9:27:e6:8d:4a:
                    db:6d:3a:3c:79:78:70:de:60:af:28:d2:fd:40:a7:
                    b9:e7:5a:67:a6:67:af:44:da:d0:ba:88:ff:47:17:
                    f5:9b:36:8a:d4:61:9f:a5:a8:62:5a:5f:c5:bf:84:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:15:46:BA:F3:77:D1:44:F7:C4:4A:92:29:00:AE:1C:CB:B3:C2
            X509v3 Authority Key Identifier:
                keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:62:4f:0b:c9:76:3f:61:c6:a8:9c:9f:cf:83:aa:36:79:b4:
         18:a3:cc:5b:79:30:d4:c9:6a:ec:3e:15:8e:dc:8b:1a:d7:cd:
         08:f6:09:6d:ba:21:54:b8:26:37:3d:87:11:f6:96:35:87:53:
         ac:06:5b:a3:86:3f:4a:51:66:a4:b4:dd:28:a2:2a:25:18:4a:
         74:7a:88:8c:50:0e:58:cd:13:75:34:ff:ea:f7:f7:ba:48:12:
         d7:d4:9a:10:29:aa:41:95:da:fa:d9:e7:2f:a4:e1:69:1c:4e:
         a2:94:7d:db:dc:2f:91:33:7a:7c:b3:81:a6:7d:a1:f2:51:2e:
         a1:23:ce:0c:9d:9b:03:c8:9a:76:6e:8d:71:85:a4:5a:30:69:
         20:f5:0a:fa:b1:03:84:72:37:f1:04:78:20:61:cd:14:81:3a:
         ce:52:12:9d:80:a0:e9:f8:80:de:a7:f2:86:70:81:0c:5a:fc:
         46:c2:c5:45:83:80:16:8c:3d:f6:f1:d4:92:e2:d7:22:08:dd:
         b2:c6:d9:73:ee:cc:de:84:4e:bb:89:34:d6:5a:99:9c:a2:1b:
         1a:a1:58:0d:10:5b:05:d2:5b:74:ed:67:1a:25:38:54:c9:91:
         33:e2:36:0f:a5:b4:d4:5b:3f:43:95:fd:52:8c:17:a7:39:a7:
         d6:2b:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 10:02:56 2024 by rpki-client on console-fra.rpki-client.org