Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File:                     CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier:          Kj87CiZ7N536wCPqkC5IEoUJEK4zN+tvg8GJAPnPFpk=
Subject key identifier:   73:EE:52:D2:9C:84:1E:2A:A5:70:5C:9E:15:11:93:0C:72:53:BF:7B
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer:       /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial:       01906E6236083769BCCA584BFC812DC91077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number:          0D0A
Signing time:             Mon 01 Jul 2024 13:00:48 +0000
Manifest this update:     Mon 01 Jul 2024 13:00:48 +0000
Manifest next update:     Tue 02 Jul 2024 13:00:48 +0000
Files and hashes:         1: 9U2MOV-5Swhh-VYOcj0DIzPKSmg.roa (hash: CWyBmZ9HlfW4AmKUF3ZPQ/I5papiTRt/mcQxLmS0oHU=)
                          2: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: Kc8fdmhBwj9fkrgxeGUan+7C3vRDpuDS2wpVkS53ijg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:62:36:08:37:69:bc:ca:58:4b:fc:81:2d:c9:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
        Validity
            Not Before: Jul  1 13:00:48 2024 GMT
            Not After : Jul  2 13:00:48 2024 GMT
        Subject: CN=73ee52d29c841e2aa5705c9e1511930c7253bf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:d7:0c:21:69:68:77:ed:a8:30:ef:07:61:
                    d9:9d:a2:91:94:42:6f:7d:f8:80:71:24:97:5d:94:
                    fd:fd:54:35:93:53:1a:5c:dd:65:a3:27:95:9a:e8:
                    d1:9e:5b:1a:7f:6d:32:cc:b1:3a:49:26:1c:af:10:
                    41:70:00:ff:8f:b0:16:a4:28:11:ea:42:0f:78:75:
                    72:6e:77:9e:b3:36:f4:0c:9d:11:07:6a:2d:7e:c9:
                    ff:69:47:cb:bf:9d:ba:ec:c2:85:2c:7d:c1:0f:cb:
                    46:87:30:2a:c3:10:bb:27:30:ef:f6:5b:9e:bc:cb:
                    9a:9d:9a:19:05:31:0a:c0:cb:d5:9b:c8:8f:99:ce:
                    19:ef:aa:0e:41:2d:c6:e9:7c:47:29:66:be:15:33:
                    c7:29:23:a1:0a:64:83:dc:b2:54:bb:c1:34:8c:58:
                    1e:9f:43:e0:92:40:02:1a:3d:9d:d2:97:87:a0:19:
                    ba:3e:6e:55:f6:2e:21:8f:bb:42:ea:fb:6c:a2:e5:
                    76:6a:ab:c6:28:c4:77:d7:33:c6:a3:25:26:83:54:
                    38:d9:6d:60:43:b3:2e:aa:32:40:4e:5f:54:84:c3:
                    6d:47:6a:8a:a1:66:ed:2b:38:92:3f:38:9c:40:66:
                    6c:0f:4e:20:04:d7:d7:d3:55:b5:2c:b4:a4:b7:f3:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:52:D2:9C:84:1E:2A:A5:70:5C:9E:15:11:93:0C:72:53:BF:7B
            X509v3 Authority Key Identifier:
                keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:5f:28:4c:1c:cc:9c:5b:2a:de:21:0e:89:38:56:f4:07:95:
         3a:ec:24:e1:84:b4:a9:dd:e6:ad:a1:c7:70:c2:f5:7b:a7:49:
         c4:e4:c4:c2:79:54:4b:58:05:5f:b4:d2:76:2f:e2:31:cd:6d:
         c9:ac:74:a4:e4:22:d5:a3:79:97:6b:7d:d2:34:5c:fb:e8:b1:
         af:ac:76:e9:31:5b:26:14:00:88:24:b8:bf:dc:cf:7b:79:b0:
         3b:f0:e9:d8:18:fd:ea:70:f7:0b:da:78:e2:4b:7c:93:85:fb:
         13:ce:22:04:c6:29:01:27:32:18:ff:ca:3b:86:dc:76:b8:fa:
         c5:36:db:5c:36:e1:a3:fd:3a:e4:e4:e7:be:d1:5f:9e:f2:d8:
         4e:91:77:eb:1f:ef:a3:90:e2:cf:cc:9d:ac:7d:7b:81:0b:d6:
         b9:f2:91:37:f7:e0:2c:26:5b:2b:45:38:b4:e1:f8:a3:a8:9e:
         eb:97:60:1a:9e:89:98:50:c1:26:d4:c7:c9:8b:a4:a5:3b:97:
         de:f8:da:21:23:b8:56:30:ef:2c:81:f3:44:8a:e5:70:b3:0a:
         4c:f5:90:67:e6:96:8d:80:4a:91:c3:70:de:43:3a:44:ec:97:
         2d:1b:7e:55:8d:6a:5f:5c:b2:0a:cc:69:00:cd:00:98:31:8d:
         6d:0b:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:18:39 2024 by rpki-client on console-fra.rpki-client.org