Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
File:                     yplJKRZrvXRBZftk9Iw1-bRDanc.mft (raw, json)
Hash identifier:          f7mAIa4aurOdQt88Y8m/vlZHN6RBhAREsZnBF9hqtwo=
Subject key identifier:   D5:54:73:53:06:80:77:47:4C:77:66:5F:C0:5A:AF:8D:15:03:AD:20
Authority key identifier: CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77
Certificate issuer:       /CN=ca994929166bbd744165fb64f48c35f9b4436a77
Certificate serial:       019236251DBF9A3E4796F4E94AC9C28EB3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
Manifest number:          0E1F
Signing time:             Sat 28 Sep 2024 01:00:54 +0000
Manifest this update:     Sat 28 Sep 2024 01:00:54 +0000
Manifest next update:     Sun 29 Sep 2024 01:00:54 +0000
Files and hashes:         1: Dh4nvoZ7csFVaLY4VR-zktPx1_A.roa (hash: 4dG9zaKaxiw4+oaN+ILmhCjupeFAr1W+JKV7ay5HWAs=)
                          2: yplJKRZrvXRBZftk9Iw1-bRDanc.crl (hash: Vlp7tn+7V79drxAxKjbC3H4F9gZRZzTiX7gzmBfweC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:25:1d:bf:9a:3e:47:96:f4:e9:4a:c9:c2:8e:b3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca994929166bbd744165fb64f48c35f9b4436a77
        Validity
            Not Before: Sep 28 01:00:54 2024 GMT
            Not After : Sep 29 01:00:54 2024 GMT
        Subject: CN=d5547353068077474c77665fc05aaf8d1503ad20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:94:6f:94:5a:7e:b9:85:ef:8a:29:2b:4f:
                    c7:7a:82:33:3c:13:29:bb:24:df:da:1d:7b:ea:7e:
                    87:f6:f9:3a:02:40:93:ab:ee:e5:c9:c9:67:99:ae:
                    1f:1c:0c:a3:79:76:9e:12:0f:28:58:bd:93:95:5b:
                    db:2c:b1:7b:63:3d:b9:bb:05:f1:a1:d5:a2:f9:93:
                    3a:4e:7d:dc:fa:ec:5b:d0:2e:f9:83:c0:c5:c2:0b:
                    6d:82:12:0d:33:73:36:e7:85:40:6b:0a:99:a5:a5:
                    a7:7a:d6:59:e4:81:e4:1c:54:a7:71:81:b7:ba:a1:
                    da:cd:0c:69:c0:bf:e3:30:47:46:71:7b:69:8c:44:
                    00:66:ef:6a:47:5a:30:e6:46:e6:71:aa:c8:4e:56:
                    e5:97:f9:ed:4a:c8:a9:38:fc:f9:c0:46:f7:e4:24:
                    49:73:b9:ec:1e:e7:50:7b:4d:d9:b6:e4:ad:36:05:
                    c0:89:75:91:fa:f3:60:47:de:15:7f:65:0d:61:63:
                    91:d1:82:85:18:f6:d6:c0:5a:7b:77:65:34:66:84:
                    a6:eb:34:21:aa:d5:d2:92:cc:d6:4c:87:64:69:8a:
                    1d:74:e6:a2:98:aa:ba:9b:97:bf:87:b0:0b:cf:42:
                    3c:4a:94:ca:7f:94:f9:1c:3a:ee:03:a2:dd:4e:56:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:73:53:06:80:77:47:4C:77:66:5F:C0:5A:AF:8D:15:03:AD:20
            X509v3 Authority Key Identifier:
                keyid:CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:f9:2d:99:a1:40:37:d4:22:85:2e:db:d7:03:0f:d1:9b:
         31:db:32:67:98:3e:1a:38:02:39:35:5c:79:93:2c:5f:d1:a5:
         ad:02:fd:24:58:3c:20:00:1f:16:86:3d:3e:92:c0:66:a5:24:
         8d:ee:3a:5e:55:82:fc:2a:4b:ae:66:ad:f7:4b:78:4e:30:75:
         e7:83:96:31:84:63:18:f5:d9:81:b5:e3:07:ef:0f:bb:6f:1b:
         47:38:bd:a4:68:65:f9:40:b8:f8:a4:e3:49:28:25:eb:8e:18:
         d5:24:fc:b8:68:1f:26:e4:03:3d:8a:50:a4:5a:b8:86:f8:44:
         14:13:25:f2:75:19:5b:b2:88:a9:72:9f:48:48:b2:bd:b9:cd:
         f5:e8:10:5d:bf:3d:c4:e9:d7:c0:98:be:ce:82:a2:12:d1:b7:
         cc:4d:9e:3c:8e:f9:d4:18:49:80:24:bc:00:c8:31:ab:5b:49:
         86:ce:6d:f1:a2:fd:f4:2e:06:1f:f6:2d:93:e0:fd:b7:ff:9d:
         aa:a4:2b:24:42:73:33:22:a5:29:69:26:37:61:91:86:d1:df:
         a3:d0:97:bc:17:e5:c5:53:d0:bc:37:57:62:41:83:8a:4c:8e:
         81:ec:82:05:31:57:cf:af:c8:45:fe:d0:81:b4:1d:d0:11:81:
         f8:02:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:27:34 2024 by rpki-client on console-fra.rpki-client.org