Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File:                     yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier:          lqeNT2J9xPVI9orB4Q7DQ6J+eYiL0v00k72g7VktSDQ=
Subject key identifier:   1B:F9:C1:77:3E:ED:43:9C:FE:22:8D:37:DE:72:8D:72:B4:BF:C3:C5
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer:       /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial:       019064156F08F1CA444954384AD3C6D5CA84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number:          0D2D
Signing time:             Sat 29 Jun 2024 13:00:44 +0000
Manifest this update:     Sat 29 Jun 2024 13:00:44 +0000
Manifest next update:     Sun 30 Jun 2024 13:00:44 +0000
Files and hashes:         1: TKUx3ck-jbYSHkfPUbYBK3bIAdY.roa (hash: t8cP98W+6+ckvmM8oqXe1Ecihg2imP/NY9xFY6BguF8=)
                          2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: cfbkZhH3f6kFmsBtaGjtddtqYCgW1SAgRg8/iBHtv64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:64:15:6f:08:f1:ca:44:49:54:38:4a:d3:c6:d5:ca:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
        Validity
            Not Before: Jun 29 13:00:44 2024 GMT
            Not After : Jun 30 13:00:44 2024 GMT
        Subject: CN=1bf9c1773eed439cfe228d37de728d72b4bfc3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:55:d0:65:e4:10:5c:bc:23:51:56:d4:27:
                    5a:d8:45:64:f5:75:ec:87:91:81:50:ea:df:f0:ec:
                    4f:14:a6:8c:04:ba:e0:a2:99:f8:72:a7:f1:bb:e2:
                    06:e3:9d:40:6d:2e:4f:34:04:dc:22:43:97:a1:48:
                    6c:f9:eb:7f:de:75:bc:de:61:c6:55:5e:ad:15:73:
                    d0:f8:80:58:29:4e:76:0e:16:26:d2:2f:a2:15:2a:
                    9c:87:b6:a6:47:43:6b:49:7b:b5:d1:06:58:9b:c3:
                    c8:73:8f:26:c9:e0:95:fa:a6:6f:b1:3c:1f:dc:ab:
                    f4:f1:ce:67:3d:cc:0f:56:ec:1f:7a:b9:d6:4b:63:
                    1d:25:ce:11:57:25:99:33:12:d7:a8:84:03:de:fb:
                    3a:da:2e:da:c3:32:f0:57:1e:bd:bb:2f:fd:28:82:
                    1e:3b:dd:27:52:ba:a4:b2:b5:5b:fc:20:24:96:b2:
                    8e:43:38:fd:79:cc:40:ea:99:32:dd:76:1f:91:45:
                    67:59:c0:aa:1c:68:a3:0f:4b:13:c1:f5:3f:6b:d3:
                    5e:04:d1:cc:8b:c4:69:a0:97:3e:50:f6:7c:46:78:
                    b9:e8:68:e4:34:6e:0b:e0:b4:04:c4:7b:d8:42:0d:
                    17:b6:fb:b5:0e:b5:18:23:3b:a8:2b:76:c5:cf:f7:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F9:C1:77:3E:ED:43:9C:FE:22:8D:37:DE:72:8D:72:B4:BF:C3:C5
            X509v3 Authority Key Identifier:
                keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:b9:bd:20:b1:56:2d:e6:4d:99:79:1e:65:55:06:ed:a5:
         35:a8:7a:61:77:bc:8a:42:85:c9:c2:96:e0:d3:63:bb:28:c4:
         ef:a1:4d:07:57:69:84:50:60:4a:ba:1d:cb:4d:30:92:e4:84:
         0d:cf:a0:f2:df:00:c9:1b:e1:93:9d:bb:f9:dd:4b:3e:a2:3a:
         a7:25:62:ab:0e:45:82:41:74:61:34:4e:da:d7:7f:1e:82:58:
         e2:94:9f:15:2e:fb:9d:87:3c:47:56:ad:59:1c:ab:b6:07:84:
         0b:bc:4c:29:0c:15:06:0b:7f:94:7d:7c:c4:30:c2:3e:f4:85:
         bb:96:79:6e:15:2b:21:34:69:b7:2f:ef:1b:5b:35:de:5e:dc:
         e7:88:ca:a1:85:ae:5f:4d:29:82:ff:ff:78:6f:f4:b8:52:15:
         ab:d2:67:45:fd:90:d2:a6:7b:3c:6e:2f:9c:51:0a:5c:ea:99:
         b8:88:99:9c:1d:b1:16:ad:f7:a1:df:43:8d:b6:22:fe:e8:13:
         40:6a:0a:a7:5c:be:d5:be:8e:65:ab:75:3f:50:07:dd:21:66:
         8c:35:d6:ef:89:eb:6a:9c:af:5b:4e:33:11:b8:bb:1f:3a:88:
         a9:3d:bf:cd:e9:33:56:4d:c9:7d:e5:e5:32:c2:40:34:8c:d7:
         b7:e0:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 18:01:30 2024 by rpki-client on console-fra.rpki-client.org