Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File:                     1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier:          ifQGm5Ur4i7LmJBbXL8mS42YG959EatRMLVHKPnXce4=
Subject key identifier:   63:ED:91:66:5B:5A:A7:DA:71:E1:A3:FA:E3:42:5C:E5:31:B1:7D:C3
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer:       /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial:       0190625DB3E404F955EF2B68257778CF9DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number:          0282
Signing time:             Sat 29 Jun 2024 05:00:26 +0000
Manifest this update:     Sat 29 Jun 2024 05:00:26 +0000
Manifest next update:     Sun 30 Jun 2024 05:00:26 +0000
Files and hashes:         1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: 1nUNkS6nnBCgkVoVeUWICdsCadwB3X2TkNPrwSgieCw=)
                          2: 4OTV0cB36Ji69xRT4t2wFf-plQc.roa (hash: OC/gUVq4B0nzVGqUP3NQk/PNQSW9VCgDcC/oWt+JHNQ=)
                          3: Z84wjCG4uN9uclHFrFKwe4euU0A.roa (hash: wPl97ATSY771gCdeAQZXvjfoSexNRCpTXW1D18m7iCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:5d:b3:e4:04:f9:55:ef:2b:68:25:77:78:cf:9d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
        Validity
            Not Before: Jun 29 05:00:26 2024 GMT
            Not After : Jun 30 05:00:26 2024 GMT
        Subject: CN=63ed91665b5aa7da71e1a3fae3425ce531b17dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:d7:e6:ba:a5:01:a2:0b:38:74:9a:52:44:
                    51:83:a0:59:96:4b:34:19:d8:c0:5e:77:5a:52:ce:
                    ab:39:db:e1:fa:b5:be:52:ed:1b:f3:93:28:6a:34:
                    ae:a3:a1:a6:cd:e1:95:be:ed:39:6c:c9:43:7c:aa:
                    46:b2:d4:c6:c2:aa:6b:4f:a5:5f:0d:42:d3:94:cd:
                    0e:98:9c:ec:68:57:6b:e1:8c:3a:13:04:ac:59:e2:
                    5a:97:21:a0:b7:63:ae:d0:8f:3e:da:80:b1:09:6c:
                    1c:9b:e0:41:39:8c:34:b7:4b:56:c6:3e:09:69:9f:
                    fe:d8:d5:b1:e9:3e:fe:80:e2:db:b6:b5:4a:63:c2:
                    5f:60:e3:3e:f4:8c:b6:c2:26:33:39:82:7d:cb:f0:
                    ad:a3:50:94:38:f3:2f:30:aa:1c:ba:dc:81:3a:fe:
                    3a:3b:58:e6:2c:e7:33:ef:ad:28:97:1e:9c:4f:6a:
                    4f:17:25:ad:c8:f4:cf:9e:e7:c6:37:14:31:ef:4f:
                    a7:74:c9:52:66:01:92:cb:bb:9c:3e:12:49:0b:8b:
                    da:fd:7b:5f:c3:94:b6:04:a8:44:a6:81:d7:cd:5d:
                    d3:ec:49:0f:55:03:f5:eb:d8:b7:13:c4:d7:49:aa:
                    0a:a7:0b:99:d9:78:d4:90:4d:d9:40:33:4d:d9:f2:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:ED:91:66:5B:5A:A7:DA:71:E1:A3:FA:E3:42:5C:E5:31:B1:7D:C3
            X509v3 Authority Key Identifier:
                keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f1:eb:a5:9f:28:26:d8:5c:e3:1a:48:eb:52:69:30:e3:23:
         fd:b5:23:2c:a0:25:b3:8e:59:f8:b9:8f:3d:db:ca:ed:0f:ad:
         c2:c3:59:0f:77:ee:9c:59:f5:19:dc:2e:a4:e4:fb:5d:5a:cb:
         24:af:7d:c5:20:5a:68:86:ad:06:cb:9c:7c:52:f5:17:4a:9e:
         f3:b2:f0:91:6a:c6:b2:ea:a1:4c:f1:dd:c0:91:96:83:5d:71:
         f6:41:ca:4f:bf:fb:52:f4:be:f8:4e:6c:86:4e:a1:07:f0:da:
         28:52:6d:37:b6:25:af:3d:dc:13:fa:14:78:66:1f:53:c7:13:
         7e:6f:3d:a7:0f:4f:bb:8f:ba:62:e8:44:d4:fa:17:56:53:f3:
         c7:e8:ea:7f:ff:90:64:04:e8:e1:fb:5e:83:5e:e7:d0:c8:72:
         9a:84:2c:12:e1:d2:2d:d7:78:c5:7b:24:74:4b:33:fa:4b:a2:
         05:fd:74:65:6c:ad:17:6c:fd:54:2a:54:44:69:c6:5e:40:5e:
         fa:e8:c4:87:1c:32:7a:7b:0c:de:b1:eb:91:d4:92:df:ad:0c:
         3c:1b:ce:8c:b3:d5:5b:9d:84:c6:43:46:57:71:85:2e:0b:71:
         5b:61:22:4a:f5:77:a9:8b:9c:c5:29:6a:f1:43:c6:ee:a4:4b:
         86:e8:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 13:17:06 2024 by rpki-client on console-fra.rpki-client.org