Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          BFy4wCiOjFTlvAlBrmpExYk5xjqw0SHyzr79KLqydBM=
Subject key identifier:   A8:A7:3C:47:89:EF:F8:52:6A:12:B1:70:5D:17:BB:53:5E:D8:1E:E7
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       0193549A448534ACF871CCBF64DF1F24B6A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          C3
Signing time:             Fri 22 Nov 2024 16:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:16 +0000
Files and hashes:         1: X_bV88kKX2ur0Vxd43WOzt6ZW2c.roa (hash: UTizKIkg90FNWZlPXfaDP8HzVyEUCzaNBdzM3u5oKg4=)
                          2: i0G4p4b9JoKkUGIUsPqRT_e096A.roa (hash: IScU3yYe5R3vV9AOHHfDz0qlBBeF5a71RroHFlI9obE=)
                          3: obVirRyZrpdXA4HUF4olnpZtfUE.roa (hash: hlYaTsCwjkL4Zz/sgGEz6QU1pEFRvIX85PAPW2pB2Co=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: C+H6VdnUzB+11xXd7y7bQEuIMhXYLDxT9Q7ISH7qbAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:44:85:34:ac:f8:71:cc:bf:64:df:1f:24:b6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Nov 22 16:00:16 2024 GMT
            Not After : Nov 23 16:00:16 2024 GMT
        Subject: CN=a8a73c4789eff8526a12b1705d17bb535ed81ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:d8:d0:e7:36:a9:a4:9d:35:70:09:41:13:
                    54:c3:34:e7:6c:ed:d6:d2:8e:31:c7:9f:e2:fe:39:
                    73:af:36:82:d1:73:c1:c8:99:f8:9f:0f:d5:48:68:
                    e9:38:83:ef:f1:17:33:16:d3:02:b9:10:cb:30:37:
                    07:d9:36:43:bb:a5:e9:d2:0f:9c:d4:96:cb:5d:de:
                    7f:c7:37:47:75:c0:ff:e4:2b:01:3f:9b:4f:2c:1b:
                    e7:1a:dc:cf:b1:31:86:46:c4:b3:7c:0b:a3:5f:3a:
                    94:e3:4f:af:89:e5:f8:7f:2e:69:54:54:9e:e4:85:
                    23:3b:c3:01:4b:32:e9:be:e1:bb:0d:2d:b5:5e:cd:
                    3e:84:cd:f7:23:3e:2d:76:e8:66:b9:b2:ff:ed:a7:
                    6e:9e:db:2b:e1:b4:f1:2e:00:c4:ba:ab:4c:a4:ee:
                    30:62:5e:aa:5c:74:c2:f2:5a:ad:40:87:60:bd:fc:
                    d3:73:50:c8:b4:fd:c0:8a:b0:8a:ac:20:6f:34:ee:
                    ef:f7:d5:8b:33:a5:ac:7f:46:86:b5:41:97:e9:bb:
                    e2:b7:85:60:ff:af:74:be:58:94:8d:d7:1b:a2:04:
                    eb:b0:75:00:e7:20:ee:0d:49:c5:7d:48:ab:84:db:
                    93:e1:fc:2d:73:a7:fc:84:ab:fc:55:3d:ea:e2:87:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:3C:47:89:EF:F8:52:6A:12:B1:70:5D:17:BB:53:5E:D8:1E:E7
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:db:6a:93:c6:f6:68:42:c5:40:d2:1f:8e:da:c6:97:a0:
         14:33:b8:16:5b:c9:f7:5d:fa:60:88:4b:20:0b:cf:d9:24:ac:
         e0:9d:fc:df:a4:7c:38:8e:b1:52:1f:36:21:a0:08:44:00:59:
         24:50:bd:0c:2c:60:b0:77:d7:11:c3:ae:5f:f4:81:50:6c:92:
         2f:82:39:e5:8d:86:ac:25:07:74:7f:99:3f:f3:c9:5a:a5:89:
         c9:18:6d:28:9b:c6:a9:58:aa:90:74:88:d0:79:7e:17:17:f3:
         3a:67:f3:45:5d:ee:9c:01:ef:cc:ec:7a:ed:e1:94:b3:3c:69:
         10:55:44:35:6d:2e:90:39:43:e9:78:35:39:f4:0a:fa:44:03:
         ed:ea:81:dd:36:c9:ff:dd:ad:89:3f:26:73:b2:0a:99:78:77:
         87:91:89:f8:24:d0:23:96:9d:b1:75:98:97:fd:e0:67:70:f7:
         7b:24:dc:d2:fe:69:05:0b:46:62:66:d4:f9:8d:e0:04:61:2b:
         97:41:80:65:ea:b8:15:2c:fc:2c:ca:e0:49:30:5d:b3:3c:d8:
         65:dc:af:c3:09:ec:d3:0e:6d:8b:de:07:16:59:1a:18:6a:64:
         0e:eb:81:35:aa:04:fb:38:53:2d:62:a3:44:6e:06:e5:13:90:
         38:48:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:48 2024 by rpki-client on console-fra.rpki-client.org