Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File:                     Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier:          aVXN4eSv4kL3DxgELbx0QjJjyvyLqfRpCc+qtZc/9WY=
Subject key identifier:   78:A2:1D:FD:3B:8E:05:F1:1E:8E:0F:DB:89:1B:62:A6:B0:82:54:B3
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       019356F6DC849D8C4C513B059DC239B70854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number:          0B3A
Signing time:             Sat 23 Nov 2024 03:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:39 +0000
Files and hashes:         1: 0tFeszzClTVrKtw1QNGR81ewwiA.roa (hash: ilOUScxICHdJ9j1UqTs9rFrwMtrCk7olMqEgWx9+OaY=)
                          2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: lV2ZtFEIO2TJGHtOOcBeSBTv3H3pZRqvV1d+goGOgOk=)
                          3: rQazSabJpfOzYJR3Eyfd-l3Qhsw.roa (hash: /RsJvbxEzpKVqgaoSerivbBNz00gKw0T9+DqcgmvkLk=)
                          4: veveTPZ0lvE313IInLmkTOC1Acs.roa (hash: SwWjCwp4JxCUqDhL1o0Fe/zVdnqbrAjYtGqroiZUDMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:dc:84:9d:8c:4c:51:3b:05:9d:c2:39:b7:08:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: Nov 23 03:00:39 2024 GMT
            Not After : Nov 24 03:00:39 2024 GMT
        Subject: CN=78a21dfd3b8e05f11e8e0fdb891b62a6b08254b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:73:71:db:7e:92:15:f7:45:1e:33:bc:11:6b:
                    7f:53:b8:43:b7:19:ee:77:82:db:f1:2f:df:c8:4d:
                    6e:74:6c:bf:6a:a5:c5:96:95:aa:6f:71:5e:ad:39:
                    92:32:7a:ad:12:cc:ef:09:dd:10:bc:61:ff:46:ae:
                    0e:de:16:eb:57:97:38:3f:fc:ae:7d:b8:bc:78:4a:
                    a0:6d:96:e9:49:c2:bd:5a:cb:37:27:8e:6b:42:8f:
                    fc:c2:9c:b1:53:87:64:03:27:09:da:3d:92:77:07:
                    3c:83:87:d6:e2:57:1a:1f:cf:f1:65:ce:03:54:8a:
                    55:90:4b:42:d3:0a:14:66:b0:b8:d1:1b:22:ab:fe:
                    9b:83:2f:ba:2d:c5:ed:0f:a5:ed:63:46:45:3a:47:
                    2c:32:91:24:0d:d4:37:58:0d:68:d4:a1:53:72:76:
                    52:db:ab:8e:9e:96:b0:a3:dc:4a:7d:e4:85:a8:a2:
                    3c:b0:4c:28:dc:9f:eb:c1:b0:dd:d6:cc:a0:f1:43:
                    2a:bb:c8:a4:7c:b4:c4:78:36:c6:86:44:2c:c7:78:
                    20:70:ba:46:dc:92:34:6c:d5:6f:65:21:b8:16:0c:
                    52:4f:54:07:36:50:81:bd:d2:a4:df:0c:7d:67:15:
                    03:57:20:99:4d:d4:24:fc:6c:51:58:d7:95:67:e8:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:1D:FD:3B:8E:05:F1:1E:8E:0F:DB:89:1B:62:A6:B0:82:54:B3
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:c7:01:ba:b0:61:7e:0e:21:62:70:75:44:ed:73:51:45:
         f4:ee:b1:a2:cf:31:17:95:dd:32:88:ca:be:ef:48:5f:9f:85:
         3b:28:de:6b:6f:0f:b4:16:1a:2b:2e:bc:3c:47:24:99:c9:f6:
         45:06:4b:a2:e6:71:a5:e5:62:eb:79:63:fd:a4:f2:5c:87:19:
         13:e1:5a:e4:45:3a:af:73:59:1a:ce:67:11:8f:28:85:10:05:
         1b:fb:ec:83:1d:aa:22:f2:57:6d:f1:76:6b:93:c5:fd:98:5d:
         4e:39:3b:ad:ec:53:9c:2e:3d:02:2c:5f:5a:75:66:53:dc:48:
         d7:3d:2c:8b:fd:7f:d7:77:34:cd:61:23:1f:76:c0:91:95:23:
         d8:39:8d:62:a2:a8:a6:3b:cd:17:69:e2:ff:a4:25:5f:50:a6:
         2b:85:bb:21:10:f3:06:f5:17:02:f0:9e:2e:b8:23:74:69:36:
         24:18:1e:5b:ad:4a:4c:16:6a:ea:5a:a3:be:71:9c:1d:1c:69:
         77:86:6d:a8:7e:1c:38:5d:b6:29:2e:64:43:a1:91:d7:97:d7:
         1d:45:7b:45:9e:c3:15:5d:d7:7e:6c:dd:a2:8f:1e:d4:61:b0:
         fc:f1:0b:d1:b4:2c:7c:65:93:91:4a:3a:c7:f4:d6:2a:13:7e:
         fd:f8:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:29 2024 by rpki-client on console-ams.rpki-client.org