Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File:                     Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier:          BlbHBIDExGenub8yAGnRmHbf9xTTkbdOq8C31b8ZAMk=
Subject key identifier:   7D:6C:E1:7E:E9:DE:FB:B8:71:DF:C3:58:F4:A6:2B:3E:DE:DB:AF:6F
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer:       /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial:       018FB2D85F5BD27FC426E3C60CD8085F79F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number:          091D
Signing time:             Sun 26 May 2024 03:01:15 +0000
Manifest this update:     Sun 26 May 2024 03:01:15 +0000
Manifest next update:     Mon 27 May 2024 03:01:15 +0000
Files and hashes:         1: VKpU4nU9Pd-NUrj0VvwweaQESOo.roa (hash: DTUxgojm5lCM+/4GINS4pAhWDXtrX6CCF8xiVL8ppPg=)
                          2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: YLsmz/N7OABgr1e7FRhvRQCXMu9+LNIoYe5YpbLIK/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:5f:5b:d2:7f:c4:26:e3:c6:0c:d8:08:5f:79:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
        Validity
            Not Before: May 26 03:01:15 2024 GMT
            Not After : May 27 03:01:15 2024 GMT
        Subject: CN=7d6ce17ee9defbb871dfc358f4a62b3ededbaf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:71:c0:43:b9:86:cb:88:77:53:d2:5b:b8:5b:
                    0f:8e:fc:9d:ec:39:79:61:fc:65:3f:34:fe:72:4d:
                    c5:08:31:ef:61:01:46:b6:03:08:47:ef:b2:c2:b9:
                    92:fc:77:b7:e7:02:45:95:4d:41:e8:41:6e:e3:af:
                    7e:fa:41:46:1d:ed:59:30:a6:14:33:9f:85:1d:fc:
                    2b:df:43:04:4e:15:64:6f:9f:5e:3e:03:ab:2f:23:
                    1d:88:bc:dd:56:a2:34:c2:3c:8c:ba:3a:11:24:ec:
                    6a:f2:56:94:fe:23:76:5c:1d:c8:7d:70:b8:89:3a:
                    fa:3b:f3:f7:74:9c:b8:2f:74:df:ec:ff:e0:a8:a2:
                    c6:48:75:43:f5:38:2e:3e:02:b7:0a:b6:45:1c:d8:
                    ee:89:b6:9d:a6:ad:0c:93:f6:b8:d1:c4:d0:1e:eb:
                    d3:21:34:f4:ec:5a:c5:2e:89:85:0e:c7:ae:2a:d6:
                    1e:1e:d1:cd:c9:56:8d:52:b0:cc:68:c2:60:c4:cb:
                    9a:65:57:f7:1f:06:df:47:7d:f8:61:22:69:f0:4f:
                    35:c3:86:56:95:ca:68:43:53:e3:6f:32:c6:4a:b2:
                    87:6d:30:e6:dc:ed:62:51:9d:ae:5e:a9:30:7d:4b:
                    7b:d8:70:4b:57:85:fd:cc:65:a5:03:d3:d1:30:43:
                    35:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6C:E1:7E:E9:DE:FB:B8:71:DF:C3:58:F4:A6:2B:3E:DE:DB:AF:6F
            X509v3 Authority Key Identifier:
                keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:ed:d7:94:4f:2a:40:3a:0d:21:96:14:dd:c3:45:67:51:
         30:34:91:3c:c0:5e:ec:06:62:f4:99:d5:1d:91:1c:95:8b:26:
         0c:92:2c:f4:e0:21:3f:80:a7:66:25:92:46:a1:9c:e6:36:7c:
         08:9d:77:c5:30:73:fa:40:5c:ec:d5:2f:81:d2:cb:97:49:c1:
         99:98:62:44:ae:71:f4:a9:0a:55:d4:86:9f:e7:04:d9:62:c5:
         e7:08:cf:20:6b:98:1c:9a:5a:ff:68:bb:b2:98:8d:22:8a:dd:
         91:51:71:f0:09:8c:80:de:29:e7:20:49:bb:82:94:41:15:d2:
         01:04:74:87:c6:d7:a5:4e:90:bd:b2:46:b1:ec:55:4b:f4:e8:
         07:99:ae:50:29:82:e9:6a:f7:78:10:28:6a:07:fb:c0:6c:7c:
         f7:f0:c9:a1:2e:0a:2c:ec:ea:e7:96:d8:16:07:82:86:02:79:
         3b:27:83:7f:59:33:2e:62:28:87:05:18:3b:f1:21:12:89:45:
         f8:a6:1c:21:be:f8:09:28:55:a1:6a:cb:53:26:93:f3:6a:19:
         13:b4:22:9d:a9:d5:4d:1b:55:38:9e:e1:2a:70:25:ea:9e:cc:
         e3:e8:29:2d:97:b5:cf:24:ab:48:d9:49:5e:60:4b:d9:a3:45:
         70:1e:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 04:37:42 2024 by rpki-client on console-fra.rpki-client.org