Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File:                     Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier:          V/j1x5q5m5I1GITy5b+c6z8BxGgIbo1JjLfsKfFKizs=
Subject key identifier:   B4:92:A1:B2:A8:C1:3A:8C:2B:A8:D9:F1:EF:CB:C9:1A:88:B6:08:B5
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer:       /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial:       01935199A178B4363E0E59C0961D0CF8639D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number:          059B
Signing time:             Fri 22 Nov 2024 02:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:42 +0000
Files and hashes:         1: VQZ2QoUYDZY7ZrwA2Enl7zuT6D4.roa (hash: XgR+S4w9OkHvt1seA+1bi1q3B3hYJtmohi1Tsw5YLuU=)
                          2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: GxmtdKzAVJFCrHwTkI9TmJodbLPYV6PBTQtwkOQXBMY=)
                          3: y7jOkakHfGqqeTYARetje6Xf3OU.roa (hash: 33G/TpnfK77/+s2lBvfACpadcLoXU/qWN60db4CAOoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:a1:78:b4:36:3e:0e:59:c0:96:1d:0c:f8:63:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
        Validity
            Not Before: Nov 22 02:00:42 2024 GMT
            Not After : Nov 23 02:00:42 2024 GMT
        Subject: CN=b492a1b2a8c13a8c2ba8d9f1efcbc91a88b608b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:6b:26:52:8c:96:5c:73:bc:76:1a:0e:7a:
                    40:eb:b0:07:3a:b7:12:b2:7e:71:40:1f:cb:63:45:
                    9b:04:1c:94:69:13:8c:ad:3b:c3:af:68:38:d3:5f:
                    c0:66:73:e5:2c:d8:32:7e:99:77:25:c3:2d:37:81:
                    8a:8e:6b:d0:34:fc:e9:69:84:db:5b:74:2e:84:37:
                    48:a0:2c:31:66:5e:c4:6a:cb:ad:fa:24:81:a9:c9:
                    5b:f8:a0:3e:c0:e9:6e:63:42:62:1d:3d:bb:8b:42:
                    c6:0a:f9:39:1e:e3:c6:d2:b6:f5:88:89:ab:04:dc:
                    d1:de:5e:a4:81:0d:be:80:1d:fa:25:da:87:8c:98:
                    a8:33:f7:81:f0:27:27:dd:89:56:cd:75:f0:3d:0d:
                    78:ff:85:ca:e5:04:83:a4:e3:10:ea:5b:92:ec:c6:
                    65:32:2c:e0:6a:f0:59:b4:ef:9f:78:e6:4a:c9:11:
                    99:c5:85:30:3f:86:61:13:96:da:bc:8c:66:83:95:
                    02:66:0b:ef:37:e4:31:3a:b6:6a:67:19:26:41:ad:
                    e3:f6:f9:cc:ed:09:e7:e3:83:a5:7e:33:3f:e6:f9:
                    fd:ad:e5:bc:ff:b5:b6:94:eb:d8:ce:13:8a:d3:15:
                    fc:e0:35:d2:b6:18:e6:33:3e:3b:d3:73:20:7c:10:
                    9c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:92:A1:B2:A8:C1:3A:8C:2B:A8:D9:F1:EF:CB:C9:1A:88:B6:08:B5
            X509v3 Authority Key Identifier:
                keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:02:2d:db:94:19:65:31:38:07:eb:41:32:d6:6d:e4:e8:
         d8:a4:87:05:57:14:7a:21:18:64:85:40:5d:0e:f8:55:b5:57:
         c9:f5:6e:29:49:d4:9d:b7:f6:00:4a:8d:7b:a4:83:6c:69:e8:
         18:f4:e8:68:9c:c0:eb:93:a8:1a:66:bb:99:06:a8:89:2d:b1:
         61:0f:09:f5:4a:2a:a1:02:2e:45:db:d1:d1:8f:06:17:d7:c4:
         df:37:22:91:de:99:7d:0f:50:e1:41:88:5a:b0:cc:18:87:23:
         8b:dd:d8:45:12:c1:c8:5e:34:98:a3:56:9d:76:1d:ec:62:2e:
         ca:13:70:df:d8:83:60:b3:66:d3:0a:d6:93:1c:f3:c0:ce:12:
         9e:76:cf:0d:84:05:2a:d5:8d:f9:9f:d3:1b:54:ad:7b:ee:2b:
         03:d2:ce:c4:d4:1b:39:34:34:4f:41:16:b9:a3:26:89:4f:f1:
         04:10:3d:04:72:13:35:cf:29:da:60:bb:f6:d8:a0:e8:56:4a:
         ca:b7:f4:a4:a5:8d:43:64:ad:ec:e7:4f:61:65:55:74:a9:02:
         60:40:07:55:6c:a1:b9:ad:b8:67:93:ef:05:79:68:64:95:41:
         61:24:28:ad:6d:53:16:9d:34:8e:f9:0b:d2:0c:ac:6e:7c:99:
         92:c4:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:33 2024 by rpki-client on console-ams.rpki-client.org