Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          +DPR03nhotXFVjykS8Sg3q33Gd2zPc+qKBsL4eb6QjA=
Subject key identifier:   DF:13:BB:15:A6:F0:F5:44:71:F9:90:E2:BB:40:64:85:B4:25:02:84
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       01905022CB1F530C7D137CD665EE811B8AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          0A3B
Signing time:             Tue 25 Jun 2024 16:02:55 +0000
Manifest this update:     Tue 25 Jun 2024 16:02:55 +0000
Manifest next update:     Wed 26 Jun 2024 16:02:55 +0000
Files and hashes:         1: DkMjzsgbGc9TBwgywmte00zA4Q8.roa (hash: fj07cKqoA89KGvgOQ1DSlJnc63FRaJMdXaKLCd8KRLQ=)
                          2: uSBUU8DK2pEPgoZ0l2rx63Gv27I.roa (hash: xWb1lnA7C7aiwaylQadZfnz+5md5vRjwxbtupPIppl0=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: CHS4qMKKtqq7LUvpDQ/ivgO8/ogVhWTWATf8/JLb16U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:22:cb:1f:53:0c:7d:13:7c:d6:65:ee:81:1b:8a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Jun 25 16:02:55 2024 GMT
            Not After : Jun 26 16:02:55 2024 GMT
        Subject: CN=df13bb15a6f0f54471f990e2bb406485b4250284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:48:ba:1c:7f:84:1e:f3:ff:fc:da:fe:60:
                    45:3d:d0:5d:e6:72:d7:14:21:27:59:f5:00:85:5e:
                    67:c8:4b:ee:7c:15:48:23:63:cd:ca:6d:58:e4:9c:
                    2a:ed:dd:ed:60:64:95:dd:c9:83:e2:95:a0:b7:73:
                    1f:26:85:f2:a1:ac:6f:08:08:00:d0:27:4c:51:12:
                    85:91:a1:eb:ae:c8:c0:16:a2:3a:60:a3:ef:6d:08:
                    c5:f8:31:98:b1:b4:4c:d4:86:72:08:c1:a2:a0:21:
                    a6:39:a7:45:3b:26:51:17:b6:f7:58:fe:cd:70:f0:
                    06:28:ed:b1:4d:d8:18:f8:20:a5:32:e5:23:e3:11:
                    23:38:25:b0:93:ae:6a:d9:f8:33:08:22:c3:fe:41:
                    c3:d7:3a:67:95:4e:78:0e:75:cf:03:4a:c1:b9:79:
                    f8:74:86:09:a1:8f:85:6a:59:c4:a8:cd:be:d1:1e:
                    5d:80:f9:53:fa:8f:6d:7b:34:28:0d:90:38:b3:84:
                    6a:5b:9d:5c:c3:a9:87:75:37:2f:8d:6d:19:3a:d5:
                    7b:10:29:1e:3b:b9:9e:f3:73:96:8e:87:ea:01:8a:
                    03:32:e9:ec:df:6e:f5:42:93:44:22:f7:07:86:ef:
                    0a:ac:a3:92:3c:b8:cb:a0:27:42:f7:c1:a0:29:22:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:13:BB:15:A6:F0:F5:44:71:F9:90:E2:BB:40:64:85:B4:25:02:84
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:69:05:f2:d4:9b:9f:a0:72:68:7f:50:1e:62:8d:c2:4d:50:
         a3:bb:c1:e4:e3:28:3e:f9:02:98:75:8d:45:86:ba:de:b5:23:
         93:bc:87:07:dd:6b:3e:dd:e9:97:61:53:e9:61:21:da:e8:50:
         d5:0a:12:ef:4c:0d:40:1d:a6:d5:a9:51:64:79:d6:a7:fd:97:
         6d:54:ae:b1:29:26:ac:2e:30:05:e8:46:06:df:ee:18:14:e0:
         7a:c5:78:77:73:83:ed:6a:16:72:1f:51:6c:63:e6:4a:34:ea:
         c5:e8:49:1e:71:2e:92:20:0a:93:3d:7f:2a:a7:52:ef:4d:16:
         78:92:0b:d5:7d:86:8d:47:b6:11:11:5d:dd:6d:78:74:99:ad:
         34:0b:f9:a8:e1:ce:a0:05:8c:df:76:d6:9b:1e:b6:b3:34:ac:
         b5:af:d0:56:77:10:52:d8:7a:f9:1d:97:a1:6e:f3:74:90:24:
         13:b7:3c:c1:05:d8:d8:9a:cd:0f:c8:07:c6:a4:b0:a2:ac:0d:
         1d:92:c4:7b:20:6a:29:be:d8:a5:dd:e3:b4:73:78:d1:77:df:
         1f:08:42:c9:c3:92:51:fc:3f:33:89:36:f0:8c:f8:f1:0b:6e:
         ce:68:f3:8e:0f:68:4f:22:78:0d:14:37:69:55:d6:73:e6:33:
         f5:f8:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:55:34 2024 by rpki-client on console-fra.rpki-client.org