Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File:                     YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier:          ASsWA+oX81+28wv5Y29YeAuVZ5ks/dPju33LOBlLtPE=
Subject key identifier:   54:DA:F3:50:44:6D:E8:55:97:CD:BE:6E:A7:61:60:3B:90:B9:AB:05
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer:       /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial:       019356F6FE204FBF468480F5597906689255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number:          07FC
Signing time:             Sat 23 Nov 2024 03:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:47 +0000
Files and hashes:         1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: SiAQQZ5QH/y8WIsinIhKvx6JckaRZThhQSIA3+bHa4w=)
                          2: s2yvV0L1-C0qdehykuxT7RynUgs.roa (hash: zYdG8wdVzQBqz0rT+L34LqsRJfQjIi/nNASldi0D4bE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:fe:20:4f:bf:46:84:80:f5:59:79:06:68:92:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
        Validity
            Not Before: Nov 23 03:00:47 2024 GMT
            Not After : Nov 24 03:00:47 2024 GMT
        Subject: CN=54daf350446de85597cdbe6ea761603b90b9ab05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:65:13:8a:cb:b6:24:42:93:cf:f1:3e:0a:
                    a5:d0:ac:c4:eb:81:ae:5c:2b:62:0f:c8:2d:ac:68:
                    a4:ff:64:98:09:0b:ee:fd:bf:40:2c:c4:d9:5c:c0:
                    c7:ee:7c:f2:f4:20:35:22:2e:8d:a4:11:d5:0a:ae:
                    ad:6e:84:64:c4:a0:39:05:64:5b:41:fe:71:a8:ca:
                    90:0c:4b:3f:d5:a2:e5:af:ca:15:97:81:44:9a:cb:
                    08:eb:33:a2:a5:ab:57:fe:2c:e1:a1:58:62:02:bb:
                    08:05:38:6e:14:c2:64:21:52:08:b3:f5:54:59:2b:
                    2d:d9:ed:ef:4b:9e:29:ad:74:28:f8:95:53:c0:57:
                    f7:ad:57:36:ac:a4:45:87:fd:5f:f0:76:75:4c:8a:
                    6a:4b:7b:02:cc:92:ac:93:4d:e4:6a:e6:44:9e:d3:
                    69:eb:69:0e:42:ff:05:9e:97:af:19:08:10:97:a4:
                    36:35:95:d9:44:00:62:68:51:17:ec:f1:dd:d5:86:
                    0e:9f:ec:ad:d6:10:e9:3e:16:86:5b:83:f5:ec:bd:
                    29:4d:6d:1b:5b:c7:c5:3a:a2:ba:17:a6:33:89:62:
                    83:0d:1a:9f:83:8a:ea:bc:e3:3f:c7:07:3d:46:a0:
                    32:ed:18:ba:73:9c:6b:10:31:15:8f:51:0a:25:9c:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DA:F3:50:44:6D:E8:55:97:CD:BE:6E:A7:61:60:3B:90:B9:AB:05
            X509v3 Authority Key Identifier:
                keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:39:45:3b:d7:5b:7d:51:74:d2:3a:18:90:c7:bf:8d:cd:
         96:e0:8e:92:45:b4:45:29:c6:ad:51:90:2c:41:f5:23:2c:5c:
         4c:94:80:3b:ae:1d:39:ec:8d:0d:e5:1e:41:69:ab:57:92:7c:
         da:c6:eb:6c:65:d1:af:73:02:06:59:0a:86:95:4e:36:f3:c5:
         98:a3:ee:f3:fb:d9:0d:a5:90:d3:e2:aa:27:59:59:cc:3d:bc:
         10:16:2a:24:dc:00:b1:8e:86:7d:bb:3f:ab:3c:69:41:30:85:
         51:74:2d:19:85:59:c6:03:bd:83:a0:6c:49:7a:f5:c4:eb:6a:
         c9:0a:69:ef:d0:7d:44:ed:28:b1:d9:dd:8d:57:06:9d:6e:4e:
         5c:4c:6f:67:63:c2:c5:6e:7b:d2:4a:7a:38:67:ed:02:35:46:
         a9:75:df:d5:b8:25:da:96:e4:a2:f5:e3:b6:8d:48:1b:f1:11:
         47:b8:30:74:b8:6b:dc:68:04:78:22:9a:eb:db:f9:58:1f:6c:
         8a:ab:43:bd:21:08:9c:13:92:af:98:ae:07:55:b6:a9:4d:d2:
         63:d2:bb:22:97:56:04:1f:b1:ba:73:5a:8a:52:9e:43:ef:f1:
         fe:55:9f:54:0a:77:4c:68:2f:13:87:c9:3d:96:30:0b:9a:3d:
         e4:b9:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:04 2024 by rpki-client on console-ams.rpki-client.org