Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
File:                     hYYCc-snGSK59-yPSlkQFjVtcys.mft (raw, json)
Hash identifier:          QM4epU+XU8BwkT/bb1ShUsVpmCm0Mj9biactepUoBCk=
Subject key identifier:   5B:5C:72:A0:46:30:C0:99:50:18:6D:D6:FC:E7:87:9A:F2:F0:04:E7
Authority key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
Certificate issuer:       /CN=85860273eb271922b9f7ec8f4a591016356d732b
Certificate serial:       019364B267387BBA05C021A328BBCE703ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
Manifest number:          0897
Signing time:             Mon 25 Nov 2024 19:00:33 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:33 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:33 +0000
Files and hashes:         1: TAiV4HRSbX6Td08KR8YBWiSR88k.roa (hash: UcIjV88/i/TPp8EcSf/UKuGEWlQfN9coItc/DpDHkxY=)
                          2: hYYCc-snGSK59-yPSlkQFjVtcys.crl (hash: Oud7DKzeTpXUm6/2nO2BxfluNZEqxU75H68UBAh98/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:67:38:7b:ba:05:c0:21:a3:28:bb:ce:70:3a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85860273eb271922b9f7ec8f4a591016356d732b
        Validity
            Not Before: Nov 25 19:00:33 2024 GMT
            Not After : Nov 26 19:00:33 2024 GMT
        Subject: CN=5b5c72a04630c09950186dd6fce7879af2f004e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:fc:ec:23:a4:aa:f4:20:37:ac:a2:cb:bb:
                    69:8e:8b:df:87:07:9c:59:5a:b4:a0:d6:28:c1:fc:
                    a7:cb:87:ec:e5:9f:67:f1:83:27:44:72:d4:a0:d6:
                    40:af:f0:4e:d0:ed:dd:4e:ad:97:27:19:59:bf:c6:
                    d0:41:51:fd:a8:06:30:62:02:54:93:1c:82:ed:d4:
                    bc:64:17:cf:ab:83:ec:37:12:d3:bd:3b:ea:f3:8f:
                    21:e7:7a:0c:56:d7:99:19:0b:cb:f8:cc:b1:7a:4f:
                    5b:e7:e0:f8:81:92:5a:13:70:b1:89:34:20:66:f1:
                    67:0e:57:fc:37:14:8f:bc:14:4e:c7:5b:d8:61:05:
                    04:8c:03:89:a1:c5:dd:2e:76:fa:46:9e:51:3c:8d:
                    e8:32:2d:4a:6c:c6:a9:fd:c1:b1:8c:64:73:bb:32:
                    47:c3:12:5c:76:24:5a:85:c2:fb:aa:61:21:c3:cd:
                    17:a8:76:b8:5c:97:8f:87:38:00:cf:a3:a8:11:9d:
                    30:47:dd:b7:c2:c3:6a:96:89:f7:ee:bd:d6:9b:be:
                    6a:5d:f8:32:e9:bc:f3:5d:80:61:89:3c:ba:c6:d0:
                    fe:ca:ee:3d:b5:b3:8e:b8:06:dc:8d:23:15:11:a7:
                    df:15:dd:bf:b1:0d:39:57:b9:83:df:29:d8:5b:d2:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:72:A0:46:30:C0:99:50:18:6D:D6:FC:E7:87:9A:F2:F0:04:E7
            X509v3 Authority Key Identifier:
                keyid:85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:f3:13:fe:2e:5f:5b:dc:0f:d1:b2:21:29:46:91:d3:f1:
         4c:41:4f:e4:07:41:b5:4e:e3:f6:c3:9d:b6:93:45:79:0b:01:
         ef:4c:eb:31:56:67:d9:2e:79:40:c3:18:3a:3c:86:de:54:08:
         2d:8e:34:dc:05:f6:a5:db:13:3c:94:8a:1d:01:6f:4e:26:93:
         dc:12:59:b1:b8:e9:58:de:c8:22:63:83:93:0c:73:d7:81:3b:
         80:00:20:ac:7d:93:6c:6f:3b:43:0e:53:09:c3:17:04:2d:bc:
         18:17:76:13:24:ba:90:f5:07:11:be:0d:ed:a1:66:76:1b:18:
         77:4b:c5:e5:96:26:63:29:5e:64:a2:eb:8c:f2:bf:73:3b:42:
         95:f0:a1:db:38:c1:77:5a:4f:22:44:11:21:f7:94:a7:5e:32:
         19:a2:0c:16:11:73:dd:f9:6d:3a:3e:9e:e4:73:ae:12:6b:3c:
         5d:1e:11:94:8e:3a:1a:65:47:fd:46:69:00:9e:98:0a:df:cd:
         61:55:09:54:97:be:ec:e1:e2:b0:fd:cd:13:7e:40:2d:21:e6:
         55:1d:bb:1d:9f:e8:26:7f:91:be:26:6f:61:bc:c0:9c:d2:97:
         3a:fa:1c:bc:9e:83:87:84:95:13:01:b3:59:c9:9a:3a:ad:79:
         3f:da:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:40 2024 by rpki-client on console-fra.rpki-client.org