Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File:                     yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier:          Fxvrml94MvHgqUPIuV+Adyyep3vHixklaZGFVhAuQfg=
Subject key identifier:   EC:CB:00:CD:B7:5F:1D:1C:D9:FE:1E:19:1E:92:92:77:39:A6:76:D0
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer:       /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial:       01902ACB4AAD3016479CE316AF4DE65EF239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number:          064D
Signing time:             Tue 18 Jun 2024 10:01:24 +0000
Manifest this update:     Tue 18 Jun 2024 10:01:24 +0000
Manifest next update:     Wed 19 Jun 2024 10:01:24 +0000
Files and hashes:         1: vZ34TokIZhUtfkCiy8q1r7BLpGM.roa (hash: Mx6EElDlWV0XJffXXemD5LigiH8e0AzqM3ih25rDArk=)
                          2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: 1S9pA2U0llFPW+bmwdW8pCdtEtQc2sBQ6Fr4p9fQzbM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:cb:4a:ad:30:16:47:9c:e3:16:af:4d:e6:5e:f2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
        Validity
            Not Before: Jun 18 10:01:24 2024 GMT
            Not After : Jun 19 10:01:24 2024 GMT
        Subject: CN=eccb00cdb75f1d1cd9fe1e191e92927739a676d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:64:46:c0:e9:4b:b4:3c:a1:49:63:b8:80:
                    cd:b2:9b:f0:5c:1d:a7:b7:cf:da:c9:fa:31:77:c0:
                    ab:3c:2b:13:0f:31:a0:40:7b:37:47:05:c4:4d:5b:
                    8b:63:da:8c:d3:10:49:9e:11:c2:81:fc:8f:0f:bf:
                    8b:0a:af:67:63:80:39:11:7e:5f:59:12:1c:7a:b0:
                    a7:5a:ad:0f:9b:d5:e6:01:0b:89:a8:ef:84:72:ba:
                    5f:cd:16:45:d6:26:f4:47:47:66:d7:a5:58:e9:c2:
                    f9:1c:a3:4f:0a:1b:29:bc:a3:64:28:7f:4d:cf:04:
                    59:82:6d:64:0b:ff:4e:49:02:b2:45:5f:1d:2d:bc:
                    8b:31:59:6a:1c:be:46:76:07:77:a1:82:6d:0e:b0:
                    21:78:9d:5e:47:c1:35:98:cb:db:10:4d:ad:ac:f1:
                    71:57:af:8d:32:44:52:b8:20:66:c4:90:95:ba:87:
                    3a:95:5f:fa:24:67:85:aa:08:d4:80:b2:31:80:86:
                    d8:2c:24:82:69:6b:38:eb:d0:d4:81:26:dd:c9:64:
                    cd:5d:7d:1a:0e:72:7d:7c:79:ea:19:87:a0:17:61:
                    ac:35:86:26:d7:a4:cc:6d:e9:29:3e:93:7e:2f:e0:
                    26:80:39:56:d6:fe:d4:81:ab:08:2e:0f:68:84:22:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:00:CD:B7:5F:1D:1C:D9:FE:1E:19:1E:92:92:77:39:A6:76:D0
            X509v3 Authority Key Identifier:
                keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:cb:51:32:84:33:a3:b5:97:b2:7a:c0:28:ba:fe:2b:3d:e8:
         7b:c1:98:d4:e3:28:b8:3d:03:bd:b3:b5:d0:61:b4:66:c0:ee:
         5f:e3:5f:4e:55:0d:09:80:ff:98:13:8e:62:36:68:99:44:6d:
         a5:87:65:88:5b:61:22:1a:8f:9f:f4:2e:4d:86:6d:ff:88:b0:
         11:7b:09:4b:37:d9:52:e6:4e:2a:26:fd:93:90:17:c3:da:88:
         7f:cd:08:a9:70:9c:2d:54:88:02:98:01:97:92:33:4f:d7:25:
         d0:c9:d6:70:84:31:4c:0c:4a:1c:4e:dd:8c:a8:30:7d:a2:a4:
         22:4c:f9:9b:f2:c6:b9:2b:26:53:3b:aa:e6:53:d4:31:44:a4:
         fd:e8:73:c1:00:92:52:90:fc:e5:df:d9:be:60:13:79:2f:0b:
         31:bd:c9:1f:3f:f4:38:44:d8:a2:6b:9c:24:7f:25:6d:eb:0b:
         be:35:39:58:b4:ff:89:46:0f:91:e7:7d:7a:c6:15:ca:53:67:
         af:58:82:2e:15:7a:78:fb:84:4b:8e:b6:67:bf:81:66:42:3e:
         6e:ca:d3:b6:47:ea:14:09:d3:bb:53:bd:17:da:36:33:32:e7:
         ad:61:b0:c6:13:ab:19:c7:8d:bb:ba:a6:e8:6c:96:ff:9f:3d:
         66:1a:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:22:39 2024 by rpki-client on console-ams.rpki-client.org