Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File:                     yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier:          jTTGHddWiFrmTl934eQ9R9w+mjCyNalv+k+Yx0e7XqE=
Subject key identifier:   13:F4:D8:6F:D9:C1:E9:44:A7:FF:52:E9:55:25:FE:D6:C9:9F:D8:CE
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer:       /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial:       0193549CAF25531476111EDADF73984FDF69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number:          12B4
Signing time:             Fri 22 Nov 2024 16:02:54 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:54 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:54 +0000
Files and hashes:         1: vMRCb0xi2nAEG3XGA9HF_XE5tQs.roa (hash: 1d+9iAvjXwnGurURC8874eDjJUjebc7Bt7cJ6SRxuF4=)
                          2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: om7wnBwlMbDR41DkoWVLKqcnVvALThikPLAZ+JTFhwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:af:25:53:14:76:11:1e:da:df:73:98:4f:df:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
        Validity
            Not Before: Nov 22 16:02:54 2024 GMT
            Not After : Nov 23 16:02:54 2024 GMT
        Subject: CN=13f4d86fd9c1e944a7ff52e95525fed6c99fd8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:ca:a7:c3:6f:96:5f:7f:a1:4d:47:8f:95:
                    d6:57:a2:bf:05:6a:2d:b1:31:4d:1a:7f:b2:f7:ef:
                    10:5e:6d:44:c4:40:06:ad:4c:5e:1d:f1:7f:03:35:
                    02:e8:e2:47:37:9d:07:b7:06:6c:c1:a6:aa:97:a3:
                    25:5e:e9:e7:d6:ff:2e:30:c2:f4:f2:49:1a:01:22:
                    bc:d2:f9:34:78:49:b8:44:c4:72:5a:f0:5c:c7:9b:
                    cd:71:87:9a:fe:f2:68:cd:07:7b:ac:2b:66:2a:a0:
                    e7:86:fb:ea:8d:65:92:95:35:89:a4:af:b4:4a:15:
                    cf:6d:eb:f7:1b:53:e1:65:37:4c:2e:bb:7e:3c:bd:
                    6e:37:70:b9:8f:97:0f:9b:0b:b3:9c:74:50:a2:f0:
                    b9:40:33:82:1b:10:19:3c:9f:bf:b8:0d:84:d8:95:
                    db:9e:1c:fa:26:76:7b:47:b7:35:d1:8d:b2:2c:89:
                    08:39:e1:d6:3a:03:2a:d8:ba:c8:44:b0:68:98:b4:
                    54:26:27:58:2e:f8:c0:24:f1:cf:0e:4a:63:80:f8:
                    20:d2:d4:1e:50:f8:90:70:36:d4:a3:cb:7a:85:68:
                    f7:8a:c1:7b:cd:aa:7f:a3:82:d7:9f:4f:36:6c:47:
                    9c:dc:fe:cb:c0:c5:c2:3f:9e:53:d4:68:3b:fd:6a:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:D8:6F:D9:C1:E9:44:A7:FF:52:E9:55:25:FE:D6:C9:9F:D8:CE
            X509v3 Authority Key Identifier:
                keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:04:46:00:e6:14:a3:73:6f:3c:8b:62:dc:f1:10:6a:89:17:
         ae:cb:14:af:93:ee:98:c0:48:55:7f:64:36:80:5b:eb:9a:7e:
         16:23:20:e0:32:0c:84:aa:7f:0b:d5:9a:c6:c1:fe:bf:0e:95:
         33:79:b2:a0:f0:6e:e5:a6:7c:1e:5b:a3:86:ab:b6:f6:42:bc:
         13:f4:92:41:18:24:d8:d5:c6:2b:d8:95:de:84:c7:3a:2c:38:
         2a:5b:c7:40:e9:74:48:bd:20:fc:c4:c0:5f:37:c8:13:2a:73:
         e1:85:9f:56:62:4d:10:77:4b:6d:b3:b9:43:e8:b4:ad:d9:a5:
         1d:8c:ac:c9:be:6e:73:96:0d:64:41:01:c1:35:c0:14:33:1a:
         2e:2d:fd:7c:51:ff:85:09:53:2a:fb:24:fa:9f:4b:28:ae:9a:
         2d:ee:05:76:94:88:7d:58:9f:04:b4:7e:5c:8e:13:8c:87:fb:
         4f:ed:cf:c3:cc:e1:8e:a4:4a:b0:46:cc:f2:b2:9e:29:37:c9:
         c7:13:d7:24:ff:e1:79:c8:09:02:27:73:7f:07:e8:5f:46:11:
         56:d9:d3:76:43:2c:f5:ea:2f:60:cc:5b:10:2e:e7:82:04:04:
         75:00:04:94:93:a3:c2:93:0b:c5:8d:79:84:02:1a:c8:68:4f:
         40:b3:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:34 2024 by rpki-client on console-ams.rpki-client.org