Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File:                     yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier:          Lc1J0Ge2gDD1TAf+9br6+zroSSNf3cd8gr+LDtWuHAs=
Subject key identifier:   F5:2D:12:26:97:3B:B6:82:1D:87:05:2E:40:76:F5:B3:9D:C9:BA:2C
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer:       /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial:       019354D1436E85096C17996B2FE4E1BF5779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number:          0B35
Signing time:             Fri 22 Nov 2024 17:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:20 +0000
Files and hashes:         1: QMG_1qznitDdCrUKHWUaYymDwd4.roa (hash: YpWrEA/DI6MK6bIOwCqbCskZTmz6UyP0aLWQFOBcO2o=)
                          2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: f4tsVJ8Rr8YmnWy2joPHYJG1cjs78s66GOvi0ZQavTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:43:6e:85:09:6c:17:99:6b:2f:e4:e1:bf:57:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
        Validity
            Not Before: Nov 22 17:00:20 2024 GMT
            Not After : Nov 23 17:00:20 2024 GMT
        Subject: CN=f52d1226973bb6821d87052e4076f5b39dc9ba2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:cb:3d:34:49:5e:63:94:6a:7e:15:91:fe:
                    16:60:52:fd:40:3a:fa:91:b0:f9:08:ce:41:24:c6:
                    71:33:63:5f:4a:71:e6:2d:3f:01:2e:dc:64:10:48:
                    b7:30:9a:9a:2a:2b:a4:ed:c8:11:f9:1a:49:fd:a8:
                    66:30:fe:c5:a0:78:89:87:1d:0e:94:a0:fc:14:0f:
                    55:94:10:90:b9:bc:21:25:89:7a:24:fb:72:29:27:
                    e8:72:9b:3a:15:c5:a4:2c:2a:e7:ee:4c:96:2f:a1:
                    43:a0:c2:18:9e:11:6b:97:37:b6:06:5f:54:74:58:
                    8a:90:fd:f0:14:07:42:d2:fd:f4:c5:ed:7b:a4:f8:
                    1e:29:9b:5a:81:8b:6c:f0:51:da:fc:dc:8f:dd:41:
                    87:f7:94:8c:16:4c:f9:9f:5b:d1:99:8b:d2:3c:74:
                    5d:75:ae:a2:74:ec:61:80:17:b7:16:0a:39:a7:3d:
                    e3:2b:d7:7f:e6:81:ba:b8:9c:0f:77:b9:0e:28:6d:
                    df:1b:98:63:6e:d1:d5:13:00:f8:54:cc:5a:f3:78:
                    45:63:30:3a:c7:fe:8e:10:64:28:45:fd:4a:65:c9:
                    9e:5a:ad:e4:14:1c:40:dc:9c:02:e7:55:d0:cb:c1:
                    13:33:1a:bc:03:d2:46:37:2e:04:16:3f:83:ce:71:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2D:12:26:97:3B:B6:82:1D:87:05:2E:40:76:F5:B3:9D:C9:BA:2C
            X509v3 Authority Key Identifier:
                keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:ff:6c:7c:db:84:af:43:f2:f8:05:08:b0:93:12:ae:75:
         b1:2d:03:e3:22:8d:7b:fc:39:d1:28:9b:5a:62:d8:25:21:70:
         26:df:4f:37:1a:98:65:b1:52:4a:e8:47:ea:84:34:8d:69:b4:
         3a:1c:f7:39:c1:75:38:46:a5:25:6c:01:f5:1c:24:96:67:df:
         c2:eb:5e:b8:86:05:3c:57:9a:7e:98:01:ba:c4:40:27:a8:e4:
         88:08:7f:72:89:94:02:23:12:bd:d8:f1:80:ac:b2:33:c5:09:
         15:6c:c3:2a:22:c0:a6:51:96:2f:c5:ea:8c:39:1f:b2:53:da:
         c2:ba:6c:ed:ac:b9:92:78:8d:9f:fc:b8:b0:01:51:03:66:9d:
         5e:49:b6:68:35:46:ff:8a:ff:15:33:b5:11:cb:d7:33:b0:e2:
         02:15:8d:67:7d:d2:b9:92:24:32:fb:79:6d:fb:0b:25:85:dd:
         07:8a:43:e2:a6:d5:4e:5d:c4:94:d6:26:70:be:d7:ca:4f:b0:
         cf:96:fc:a7:60:31:a4:82:1d:26:0b:2b:42:04:31:af:b4:fc:
         01:4d:f2:cd:7c:c9:e7:2f:a9:d0:62:2d:69:fc:23:6c:91:b6:
         58:ae:a4:b9:a6:b4:a6:89:1f:4f:5b:0e:02:1d:71:6d:f8:ee:
         95:0a:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:19 2024 by rpki-client on console-fra.rpki-client.org