Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File:                     2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier:          WRPZtiFrG66ETvVWD3QeZBUs+IC4eWKZOquag6jOjI8=
Subject key identifier:   CB:20:A0:3B:85:1C:60:C7:0D:DF:6A:43:54:A9:35:0D:B6:DD:11:17
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       018E88950460D28EB7D0A647773A8B3D24BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number:          0E59
Signing time:             Fri 29 Mar 2024 05:00:51 +0000
Manifest this update:     Fri 29 Mar 2024 05:00:51 +0000
Manifest next update:     Sat 30 Mar 2024 05:00:51 +0000
Files and hashes:         1: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: 91UpbbKsb8tb3mSRb7x7OrC2pWVmA0bfwUjtr7hw+j0=)
                          2: 2hJVu5JAVbDhm_RCPllyw5HkY4o.roa (hash: 5e5OYdtPrkHUIVZTAtKqlzWnBJ024I2wiNlit2+8Ucw=)
                          3: Ev0lZxjzoLTaIgaIq0Zf2x8zSeQ.roa (hash: phEOGGu+FsrPkqnmtMgIczxj5MKmAFT93IOVkDrzfF4=)
                          4: R5wIRbpGNFv54-DW13yuONk94gg.roa (hash: sDbAa6B0pbvoURWuBA2M4O1o2u/VQuaukoG6po9ysz8=)
                          5: XMLjUh121fXQv3Ydx8ZPBt93TIk.roa (hash: ERkNHgvidT+UW+LtMgAxn5wo6tsnNQG3OWmWIrjB+yY=)
                          6: nQ1HC-e9g9F6AGc0XdansnFPUB0.roa (hash: 2/JL18cW5Xhifnpa2xtlHbHpkpydchKqLgS25akgTBU=)
                          7: v19uETpHy4E6UZYYOvBx-uy-CIw.roa (hash: ao6wBROGV9MyFpNvfagVu7bf95oaWD824ibMC+fZn+E=)
                          8: w4AVYBGR4pPB7nRzkHD5qDXAJ2w.roa (hash: nNah6v0gbGgj8O43FShOP7STTI6Ix2Pk/iZB5WIiaKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:88:95:04:60:d2:8e:b7:d0:a6:47:77:3a:8b:3d:24:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Mar 29 05:00:51 2024 GMT
            Not After : Mar 30 05:00:51 2024 GMT
        Subject: CN=cb20a03b851c60c70ddf6a4354a9350db6dd1117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:8c:fa:ec:27:2d:af:72:d7:cf:70:1c:fe:
                    86:ac:25:67:15:26:06:cd:51:0e:2a:93:76:b1:30:
                    72:87:dd:4c:38:63:d8:a8:63:ee:42:9c:74:31:b9:
                    8d:aa:0f:eb:d4:c4:77:6a:60:7f:6f:23:39:b0:52:
                    11:b7:5d:56:89:ff:54:c6:77:ec:e6:50:f3:e2:1b:
                    d0:8d:f8:1b:ba:2d:0a:96:5a:1e:f4:92:7c:62:48:
                    87:58:7f:ab:0f:4c:0f:3f:b2:2f:0a:cd:56:96:64:
                    a7:85:7a:33:40:f2:0e:f0:51:c3:d8:b9:af:39:50:
                    07:cd:a1:69:36:ca:fe:da:f4:31:4e:26:bd:32:0a:
                    85:8c:0e:4e:67:ba:04:99:39:db:03:84:91:70:95:
                    c3:c3:1e:ef:09:47:1d:d1:9a:ef:eb:41:51:43:d3:
                    ee:13:a5:ae:07:14:45:7f:f4:77:4e:2e:e9:26:73:
                    ad:76:ee:6e:39:c8:58:d1:14:9a:8c:36:3f:5f:a7:
                    51:34:f4:66:2b:dc:cb:5e:c2:ec:3a:d0:c2:f2:f0:
                    66:c0:bc:e7:f9:b6:7f:0e:d2:fb:45:98:4e:3a:97:
                    b1:06:bd:21:34:32:9b:bf:c2:8a:c9:40:9e:7a:3d:
                    c1:fd:33:c4:fa:a9:46:f0:30:9a:0c:b1:25:9d:cd:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:20:A0:3B:85:1C:60:C7:0D:DF:6A:43:54:A9:35:0D:B6:DD:11:17
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:17:9f:ad:e2:38:12:ab:ae:8c:0a:50:0c:a0:af:d4:78:33:
         26:57:25:d0:bd:48:71:ac:7c:e4:5e:c6:47:cd:56:f5:63:2a:
         6d:2c:a5:1c:96:07:d1:ee:3a:d4:1a:30:92:d6:69:05:60:ab:
         37:ee:01:dd:29:e7:df:d9:78:3c:15:03:fd:7a:b3:cb:b5:64:
         92:4f:3e:c3:6b:b9:84:7a:6d:07:03:28:c9:03:87:57:8c:0d:
         28:90:d5:5b:c8:a5:12:f9:12:1e:97:d5:46:3c:b0:dc:5f:6b:
         50:14:23:45:cd:7e:96:35:e1:73:52:eb:76:eb:f7:e9:f5:d4:
         f6:33:88:44:30:a3:87:97:f4:f3:4c:69:be:d6:52:b5:9f:26:
         3e:a6:a2:47:5e:91:5b:a6:3d:7d:20:96:e5:af:22:59:9f:62:
         3d:65:71:10:54:bf:8d:5b:20:0e:f6:4c:5a:68:19:7d:5b:36:
         0b:96:68:d5:92:3b:b1:a4:dc:7d:dc:cb:8c:65:29:4d:09:20:
         af:fa:46:6b:c0:85:21:90:d5:ca:50:fd:5e:fd:38:b7:bc:d2:
         42:54:a4:31:d4:f6:d8:c2:4f:ba:94:e4:15:f9:b4:03:8b:9a:
         f6:78:52:25:80:2e:26:02:9c:76:bb:cb:b5:76:59:3f:9d:20:
         6e:d6:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:03:12 2024 by rpki-client on console-fra.rpki-client.org