Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          ydXC8Tjy1UFr2Aw0NRXDDY+ryXOahMsmRorJpl0P31g=
Subject key identifier:   1D:8C:4F:2C:CF:0C:9F:20:1D:AA:F4:C7:1C:35:03:19:C1:6D:50:C4
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       01936A7DCC60F471AEC9B1E7E77FB81923B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1385
Signing time:             Tue 26 Nov 2024 22:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:49 +0000
Files and hashes:         1: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: 2A5Ud/RM/vVEm9cGAlKhLmtuR7U11jDGHCOxyyzXsIA=)
                          2: VZ1EmHpMRykG2CAcPno6z_Pi1WA.roa (hash: fL4BPgV5or86FuXLf5eNB03WKF2n3hDhar3zEsJo/A4=)
                          3: Y_00Beq_4wq6RhG4-hsQw96CNZ8.roa (hash: bgzEJUuAK8mubC3sMBWiD/KxqrjKA5FqZsxOZokeNYA=)
                          4: emSvs4QRj-sN-b-8X2DIKgG_GrU.roa (hash: cNV1Rb0HYwVa0/dFgx6OqEXgMxtczg2pxUhRRGMUxfE=)
                          5: nnUWvm9cQMvXD7pESz1sW4UmKys.roa (hash: pKt246Kab1RESzYVmzQgj0DJrS7KI+bpJjWKqysbBF8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:cc:60:f4:71:ae:c9:b1:e7:e7:7f:b8:19:23:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Nov 26 22:00:49 2024 GMT
            Not After : Nov 27 22:00:49 2024 GMT
        Subject: CN=1d8c4f2ccf0c9f201daaf4c71c350319c16d50c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:4a:1d:e1:8a:64:37:91:e6:e2:0a:f2:b9:
                    92:9e:2e:54:1f:47:66:a8:ef:ba:f2:8e:70:80:08:
                    92:8c:be:ca:3a:2a:6b:c7:93:e4:46:60:f7:e7:f1:
                    fb:5f:4e:46:6d:c0:b9:0c:4b:48:23:98:27:86:8a:
                    be:c3:66:cd:52:56:f4:f9:12:63:3a:ba:41:69:c1:
                    e2:71:54:a0:4d:0f:7a:9d:07:d5:11:35:da:08:59:
                    fb:ff:e5:47:fa:5d:ca:87:52:71:09:d1:cc:b3:35:
                    31:d1:a6:77:3a:0f:a2:d2:c3:2a:59:e5:41:af:5a:
                    00:0f:77:68:b8:40:41:ea:3e:b5:5d:ff:44:f0:4c:
                    23:fa:0e:e0:a9:a9:9e:71:67:76:b9:94:62:7c:ba:
                    6d:0f:26:61:36:60:b5:e9:e5:0e:ad:47:f4:d6:17:
                    5a:1f:98:6e:00:81:18:27:24:7f:f9:14:bc:9c:49:
                    93:4f:6f:27:f7:82:06:31:6a:f9:9a:aa:b7:68:b2:
                    0e:26:c6:ea:0a:6b:8d:b9:e9:e4:49:b1:2d:c8:84:
                    11:f5:a7:ad:4e:88:06:6b:ab:13:98:b3:72:c1:76:
                    75:89:cf:28:c5:f1:a0:72:2f:f7:b2:91:9a:22:59:
                    1b:2d:00:42:9a:27:37:72:65:b0:7a:41:39:3b:f7:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8C:4F:2C:CF:0C:9F:20:1D:AA:F4:C7:1C:35:03:19:C1:6D:50:C4
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ce:92:fc:f9:2d:96:80:f2:18:f2:e2:a0:50:1c:a9:14:f3:
         af:75:e5:01:3a:cf:9b:1f:76:6c:e7:10:92:c6:c7:30:51:78:
         88:47:a5:50:7a:59:d2:e2:8d:35:14:80:b0:3a:f2:b1:f7:4c:
         79:b7:80:bd:94:65:b2:3c:b9:5f:8d:d0:67:04:35:cc:8a:a5:
         a3:28:54:e7:ee:49:5c:18:ce:02:44:df:33:48:08:11:11:11:
         b8:e5:4d:32:a5:af:73:af:b4:ad:61:5e:15:2d:b3:a5:04:64:
         f1:28:33:1e:3a:13:f4:f5:b0:97:90:e6:e4:b4:ce:d0:9e:19:
         bd:b9:9e:16:c2:47:88:a3:b8:f9:46:bc:a9:26:91:97:1f:b4:
         bf:3b:58:03:e9:74:fd:29:c3:d8:59:9c:e0:ff:f5:8a:2c:b6:
         ea:04:ea:e2:b7:bf:02:1b:25:5a:16:31:78:92:21:03:5a:6c:
         cf:e1:ea:48:63:41:20:e8:89:50:dd:e2:94:20:c7:ca:3b:a8:
         fb:4d:8e:66:af:31:6f:84:21:33:4a:e7:60:27:31:b7:ba:27:
         0c:c8:78:5b:8d:71:4a:2c:28:ae:0d:9b:4b:7a:52:1a:ba:e4:
         c7:9a:a0:60:01:bb:c3:2d:4d:fc:3e:c2:af:fc:0f:e6:14:ad:
         07:84:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:45 2024 by rpki-client on console-fra.rpki-client.org