Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File:                     y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier:          TSGfR6xcqT1d266L1Meie2c8ioTgsOvoYG86NdPwAHU=
Subject key identifier:   61:EE:73:2E:83:CA:6F:C4:AD:1F:03:E4:C7:81:02:5D:8D:AE:55:D5
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer:       /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial:       019236CA359B18367AD2287D6F8CA2DA96BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number:          0F6E
Signing time:             Sat 28 Sep 2024 04:01:14 +0000
Manifest this update:     Sat 28 Sep 2024 04:01:14 +0000
Manifest next update:     Sun 29 Sep 2024 04:01:14 +0000
Files and hashes:         1: Ot6Ddinz17A9A6LDB5IfhXBhDWM.roa (hash: vzsfcZT+3idUgctwHZawHcja+i6c0wtAk1lzuk/uNN8=)
                          2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: 4uIei4TpoXTtgeg9EfSl8DfNWPa73ZOWEPunUdGdGm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:ca:35:9b:18:36:7a:d2:28:7d:6f:8c:a2:da:96:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
        Validity
            Not Before: Sep 28 04:01:14 2024 GMT
            Not After : Sep 29 04:01:14 2024 GMT
        Subject: CN=61ee732e83ca6fc4ad1f03e4c781025d8dae55d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:a0:3f:df:2e:20:99:1d:79:87:4d:e6:45:
                    5e:da:42:0e:01:a5:cf:b1:e5:4e:fc:33:c8:b1:58:
                    31:e2:02:d4:61:d1:10:1e:dc:66:b7:e5:33:80:1a:
                    35:25:29:f0:e8:f2:84:3a:54:7e:be:38:99:4b:d7:
                    ae:dc:06:df:8d:4c:ce:0b:3b:b9:c3:3f:f5:a8:2b:
                    84:e3:4d:17:67:44:ef:cb:49:b4:4c:03:49:03:d6:
                    0e:81:f3:60:ff:8c:2c:8d:1f:d2:05:8e:51:58:14:
                    6c:fe:36:51:1f:6f:22:66:fc:8d:fe:9a:e6:fd:26:
                    c6:f6:72:1d:51:df:f1:70:c0:ae:f5:91:9c:9f:5b:
                    02:b4:bb:40:16:a4:b2:34:36:96:25:d3:ed:f2:0b:
                    e9:4b:e0:5c:83:71:5f:57:49:7a:66:14:eb:c6:f3:
                    fe:bf:cb:83:34:02:c9:a8:c6:b7:04:24:49:9c:fa:
                    19:41:af:e4:31:84:95:06:06:83:7b:6c:8e:8e:51:
                    05:63:85:5b:a4:d6:ac:61:5a:21:c4:16:1c:4a:25:
                    fe:2e:31:00:7a:f4:e3:4a:6f:dc:87:24:d8:ea:bb:
                    01:0b:bb:a6:8e:aa:7c:26:19:b3:fe:14:fe:21:fe:
                    08:9d:e5:21:ed:ff:81:aa:4c:f2:f4:19:fc:54:de:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EE:73:2E:83:CA:6F:C4:AD:1F:03:E4:C7:81:02:5D:8D:AE:55:D5
            X509v3 Authority Key Identifier:
                keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:43:dc:de:42:c8:b1:c9:8e:d3:02:ee:f6:34:03:82:f5:40:
         91:8a:61:a9:36:87:b2:7c:e8:68:21:90:11:75:8f:77:7d:ae:
         cb:05:60:19:f6:16:3a:44:45:b1:81:fe:9d:b0:4f:e0:3d:1c:
         db:de:92:31:af:47:e1:80:49:f3:d3:01:c5:c2:b9:f2:30:8f:
         95:bd:9a:31:97:15:88:e5:09:35:d9:36:53:c1:ce:e6:0a:5d:
         61:93:d6:f2:9b:11:6a:00:45:29:b8:9b:fa:c7:73:bc:77:13:
         23:e3:62:c5:f9:05:f2:ab:0c:54:3f:06:52:80:d3:98:5a:42:
         9c:75:87:6c:57:d3:18:15:70:ed:9f:1a:cc:97:da:b1:ee:89:
         86:71:99:9f:fc:25:be:2e:c0:2e:f4:3b:07:2e:cc:f2:20:83:
         91:d9:40:87:31:6c:34:8b:60:90:1a:13:b7:b7:a1:0d:85:08:
         54:74:0e:7c:73:1a:c4:d5:98:a3:cc:01:1a:01:ec:10:3d:ad:
         5c:61:dc:d6:d7:28:8a:72:13:ea:c2:9d:cf:a9:4e:46:7f:db:
         f4:e8:fc:de:d7:9f:13:dd:ff:54:0c:95:ed:f8:c4:e1:b8:e6:
         ec:e7:b2:57:7e:18:32:c0:66:82:af:1d:80:1a:2d:b0:7a:8d:
         f0:05:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:49:57 2024 by rpki-client on console-fra.rpki-client.org