Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File:                     y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier:          ZP6VjmzVZLM3qEuaK8JzgQwpgNRvXE8CvzTMi8gJxcU=
Subject key identifier:   B9:08:A5:C1:3D:17:F4:6F:21:72:69:A3:4E:A3:0F:1D:3F:83:F3:47
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer:       /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial:       01935689EFDF74624F23A818179B5900BEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number:          0D3D
Signing time:             Sat 23 Nov 2024 01:01:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:40 +0000
Files and hashes:         1: TpGytAzpqmvi6dFZqSeB0DjjCnc.roa (hash: PAp4Z2U55FR4Xt28UJJq1Gy2HlRQ16sQ60otXjxdibE=)
                          2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: VPlxX7q5sDJIPWnjQSoh5iC/YJYUkbPxsqlV3OyrcEw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ef:df:74:62:4f:23:a8:18:17:9b:59:00:be:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
        Validity
            Not Before: Nov 23 01:01:40 2024 GMT
            Not After : Nov 24 01:01:40 2024 GMT
        Subject: CN=b908a5c13d17f46f217269a34ea30f1d3f83f347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:47:e2:92:ff:f2:b8:ae:a5:be:af:9d:96:
                    00:8a:0e:24:57:12:7c:54:24:9b:84:5d:bc:77:fc:
                    75:38:6d:f9:12:55:71:4d:a9:1f:67:17:c1:50:41:
                    59:46:77:bf:5e:95:9b:9c:ed:98:d8:e1:c4:bd:3a:
                    51:af:9b:9c:61:6d:3c:98:20:36:69:b5:52:63:69:
                    9b:bb:f7:a8:c0:e4:d2:58:d1:5c:53:26:df:05:b9:
                    09:99:d6:7a:6d:62:0a:da:32:2b:c8:8c:48:a3:1a:
                    10:aa:aa:15:6e:ae:70:00:50:18:fb:20:c4:da:fb:
                    c9:6b:fb:da:31:8d:a0:1f:ec:95:0a:5f:c2:10:92:
                    71:34:b4:1f:5d:69:87:64:06:d9:72:4b:68:8e:97:
                    a0:3a:49:6c:bf:ca:2b:81:15:25:a9:ba:a2:69:fb:
                    3f:50:95:f1:cd:3f:ca:60:02:12:da:50:39:d4:93:
                    db:d7:3a:45:f6:f2:bf:a5:ad:47:bf:37:15:90:aa:
                    61:2c:17:90:04:c6:60:4b:dd:cb:46:54:b7:34:9f:
                    3a:48:ea:0e:81:9c:79:00:5f:36:d8:ca:32:3f:fb:
                    af:d2:5b:2c:86:c0:81:5c:c8:1d:f2:14:2a:a5:45:
                    95:18:a9:93:c5:32:47:50:96:76:69:c6:2c:b5:03:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:A5:C1:3D:17:F4:6F:21:72:69:A3:4E:A3:0F:1D:3F:83:F3:47
            X509v3 Authority Key Identifier:
                keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:db:6e:53:b4:53:f9:e6:cb:6c:07:6c:8f:0e:6c:3e:37:61:
         78:ed:e2:15:12:30:e1:59:20:df:52:10:68:d2:82:60:35:00:
         e6:a0:dd:e2:5d:5b:8d:7b:5b:ea:81:07:52:b4:ef:c9:77:06:
         c3:9f:bf:1e:06:08:a7:c2:73:f2:70:84:04:a5:c9:c1:2e:78:
         a5:a9:22:11:45:29:fe:11:18:9b:2f:88:6a:26:c7:fc:0b:34:
         ab:08:cc:05:9a:2b:25:c3:15:2d:29:80:6c:47:e1:fa:e8:c6:
         3d:47:bc:4d:08:60:b1:10:59:0b:05:45:b5:d9:d9:37:7e:ca:
         37:31:f9:eb:4b:10:90:92:14:ec:02:7d:cb:22:09:22:b6:40:
         c4:bf:6a:f1:61:16:20:a9:e8:dd:5a:b9:71:f0:be:b8:39:61:
         22:f0:7a:24:e9:c8:65:ac:9b:bb:34:6a:29:6a:87:c9:b4:5d:
         e6:19:56:bb:e0:d8:12:a2:ec:66:59:5e:31:66:bf:5a:f6:ac:
         6b:d1:5b:88:14:e6:84:76:73:16:02:84:97:e6:a8:8e:0d:3c:
         c3:50:c0:ee:1d:2b:3a:54:80:e3:3a:51:02:9e:4d:df:8a:ca:
         b9:8d:1a:7b:3c:34:9f:9a:35:7d:87:cb:fd:54:3f:98:0c:49:
         4a:27:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:52 2024 by rpki-client on console-ams.rpki-client.org