Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
File:                     YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json)
Hash identifier:          PCK6IC66P93gB/rssM8cXYS6v41NdYh9aXbLes+x+RU=
Subject key identifier:   42:7C:D3:F4:47:75:B9:7C:A3:F2:53:76:31:16:75:D2:48:FB:46:15
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Certificate issuer:       /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial:       019073F609E4BBF73B9DAC3E9F978582AB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
Manifest number:          03BB
Signing time:             Tue 02 Jul 2024 15:00:22 +0000
Manifest this update:     Tue 02 Jul 2024 15:00:22 +0000
Manifest next update:     Wed 03 Jul 2024 15:00:22 +0000
Files and hashes:         1: 5ACTa3VCPpAAB44Mv6bUYi_m8jM.roa (hash: zv1/NjG2bJvUO5uL/lJU8wEMfOwBOPlfQSAMQ+zO+qU=)
                          2: 6_Icq3jnD-Ksf8im4nkFzCmgX94.roa (hash: gt4Vwe48pGfXsJE4GLb0Gl/Q7Y3QCSLtijot8wZgmjI=)
                          3: ELFSPrGJOIn41OSIKTaUx-HfV5Q.roa (hash: 51fQXM/reMvQXjjNCesidJmvG/OkKLsPgIgsl4cfejo=)
                          4: FQYvWiLU_AvmQNrORxPb8jy0k9U.roa (hash: lHwZYAZrMPfFFWkhNHs5/JtGcZhfSxWQTX6VZc0Hfmw=)
                          5: LQa43l2kUXysY3Zwt4uUmUyqvww.roa (hash: 2J/pUA7BpGSM4LyNPg8apfc6ospFCy7Zw4Ns+dyOe0A=)
                          6: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: hHk6oXisU/4Yhb4TWP9EIrcsO45b6U4i4KFkPqa13S0=)
                          7: d1v2CHvikDBvxn31lDoRmZs4I5M.roa (hash: DsAOAaY3CgouWSAGRmU67v2O3BPsxSVq8H3Z9iqaIjs=)
                          8: mkC55OjwZP0iJgcXE1PmR18r_8g.roa (hash: 7UqjvP5PMCwX7Kv7mUMUow/IROep4T56Dun9kDBHE0c=)
                          9: n2r-48DMeKezkw67Y6Ew2Xg6cjQ.roa (hash: UkOW4f5iINI7pzVoANWQcJbTgm5DNvh69+doEwsn+ns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:f6:09:e4:bb:f7:3b:9d:ac:3e:9f:97:85:82:ab:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
        Validity
            Not Before: Jul  2 15:00:22 2024 GMT
            Not After : Jul  3 15:00:22 2024 GMT
        Subject: CN=427cd3f44775b97ca3f25376311675d248fb4615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:7b:7f:ea:6e:02:ba:19:21:ae:8e:d9:e6:
                    7a:d0:19:10:28:05:f1:53:20:92:38:ea:a5:79:b9:
                    52:81:f6:3b:7c:65:3b:07:d6:1e:68:f7:f5:a6:1c:
                    ed:ca:e6:98:1b:e0:81:3e:96:bd:44:d4:57:c8:36:
                    c1:d3:8d:16:cf:64:d9:61:8e:b5:96:bc:cd:87:fd:
                    82:c9:15:4c:e5:5c:85:81:ab:42:7d:c5:24:9c:bf:
                    60:b0:23:82:e2:5b:27:93:73:5d:bb:c8:45:90:b7:
                    4e:d2:4a:4c:e1:0e:15:6f:56:de:82:c3:0e:4f:c8:
                    a8:7c:e3:ba:d6:df:f5:50:99:bd:f1:54:2b:62:c0:
                    06:02:ec:bc:a7:4b:a5:26:a7:e6:1c:96:1e:e9:9f:
                    bc:a1:1f:b3:af:09:82:a3:d3:de:5f:48:6c:dd:d5:
                    e9:e0:d2:0b:00:ed:d4:d9:e7:5b:53:b8:c2:a3:22:
                    f6:27:99:77:a5:30:ca:63:97:7f:97:30:3e:cb:a3:
                    ff:c0:bd:7b:a4:4c:5e:96:f2:54:0f:9a:5f:d9:59:
                    81:a3:7d:52:68:13:ef:21:70:d6:2c:e9:c7:e1:7f:
                    46:29:a4:34:b9:a7:24:38:7e:de:e1:0f:55:b0:8f:
                    df:ff:7e:3a:8a:56:35:a6:6b:e9:73:f3:75:9f:e2:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:D3:F4:47:75:B9:7C:A3:F2:53:76:31:16:75:D2:48:FB:46:15
            X509v3 Authority Key Identifier:
                keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:76:de:6e:d0:6a:58:7b:24:90:e4:b7:95:d5:90:4f:19:84:
         e5:27:6f:d9:84:a9:90:ec:c6:a8:2a:e7:81:5c:b7:4b:9f:fc:
         8a:28:6e:d8:32:83:77:70:48:42:34:13:b2:a6:3c:31:76:23:
         38:ea:df:7c:1a:09:73:fc:1d:f6:2a:eb:d4:7e:ce:03:43:c9:
         94:61:90:a7:2b:f7:ae:9a:e3:c2:ec:f4:ff:84:c5:cc:d6:7e:
         04:e7:ae:96:6e:55:99:1c:fe:5a:bd:12:b5:85:e9:87:6d:d8:
         85:81:8d:41:e4:ec:ef:03:ad:4f:0f:2f:cd:4a:a9:e1:1f:f5:
         0a:99:df:2a:28:88:c4:0a:cc:7a:99:b8:0b:b1:8d:4b:19:dd:
         36:0d:03:1f:ea:68:b2:d4:27:47:c7:9b:95:7f:e0:ec:45:49:
         e1:58:47:09:b1:e7:8a:66:5e:0f:61:ce:cc:eb:8f:39:05:67:
         e9:bf:d2:74:b1:c8:8b:f5:f6:b8:95:00:24:d6:16:47:a8:3f:
         29:ad:29:dd:30:30:4b:f5:6c:19:01:7c:8c:ce:05:39:5d:e3:
         e4:2b:7a:d3:48:98:11:0c:6e:e4:59:ad:a7:54:64:5f:3f:d8:
         0f:b8:48:78:33:53:a5:cb:6f:a8:31:f2:be:3a:7d:cd:75:f2:
         40:ed:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:50:44 2024 by rpki-client on console-fra.rpki-client.org