Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File:                     jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier:          jjpAPlPliVycMojfDpUKZ40FU7BKbEB441MUGXLiIk4=
Subject key identifier:   C2:B9:53:66:42:9F:BF:64:25:A6:BC:DB:3C:B0:54:6B:29:5D:5F:66
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer:       /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial:       019358784F36A5D8E48CB2E3809021142478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number:          0495
Signing time:             Sat 23 Nov 2024 10:01:39 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:39 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:39 +0000
Files and hashes:         1: _934LnWWrOTBgpiMvRjJadlxsbc.roa (hash: ey8VLZLs7sJTDr8SOj7eT3aWsNRJL5GDygBTGBYQdfo=)
                          2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: 8USMIcIvESIiD45WZLrn7OASTwC4QblQmUv6mCmiEW0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:4f:36:a5:d8:e4:8c:b2:e3:80:90:21:14:24:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
        Validity
            Not Before: Nov 23 10:01:39 2024 GMT
            Not After : Nov 24 10:01:39 2024 GMT
        Subject: CN=c2b95366429fbf6425a6bcdb3cb0546b295d5f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:0b:29:71:2a:8e:d2:bb:c6:f2:e0:43:79:
                    48:1e:ea:b3:e7:a8:9a:95:20:2e:d7:56:b6:9a:d1:
                    e7:46:10:69:f4:11:c4:d2:bd:ef:a3:25:f1:f4:ce:
                    1c:c6:df:a7:72:e1:92:72:8b:68:90:57:7b:86:db:
                    93:0c:a9:1e:cd:6b:81:07:d0:e7:5a:fd:5a:d0:0e:
                    90:aa:13:48:e6:d9:13:0e:c2:e1:cb:33:81:5d:8f:
                    6c:0c:79:40:2e:f1:d6:76:ba:de:5f:a3:b8:ef:3e:
                    e2:dd:e8:f4:68:6b:ac:27:28:59:2a:62:0a:77:ea:
                    1e:80:83:4b:06:d2:ed:e4:da:25:d9:eb:b9:b6:f4:
                    c0:ef:d9:d9:9b:a5:96:00:a2:cd:4f:f0:2d:28:63:
                    c8:90:be:43:74:2e:b6:47:0a:03:08:60:58:78:4d:
                    ca:e0:6e:9e:7e:e9:66:1a:6e:d0:47:5a:90:7f:16:
                    d4:52:8a:bc:03:fa:28:09:25:bf:82:c7:9b:03:6f:
                    39:b5:1d:a3:68:94:d1:3b:c0:b2:5b:61:e3:ec:98:
                    53:ba:b1:05:41:fd:9d:e2:bc:48:9b:66:a9:a6:75:
                    1d:7d:cc:85:f9:b3:85:81:d3:99:77:2b:57:63:ab:
                    a7:45:6c:0a:8c:73:f5:d3:1b:eb:58:12:03:d7:99:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B9:53:66:42:9F:BF:64:25:A6:BC:DB:3C:B0:54:6B:29:5D:5F:66
            X509v3 Authority Key Identifier:
                keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:29:c6:47:52:67:b2:6f:63:78:4a:2d:d5:57:20:4b:d5:59:
         d6:13:fe:fa:25:44:75:ce:8f:7b:d4:d9:a2:c0:cf:9a:00:38:
         2b:39:4c:67:27:4a:23:cb:f7:5e:de:1d:41:90:d2:2d:a9:3a:
         b1:d5:0c:bc:87:51:ff:de:c7:9d:6a:a0:c9:8d:75:f0:59:23:
         41:9b:fb:d6:6e:02:08:3a:e2:e2:f6:c5:e9:0b:d8:20:24:76:
         91:48:11:d3:80:b9:d7:1b:05:7b:bb:d3:24:f4:1f:40:f1:c6:
         b6:2a:ba:03:4c:58:2b:e3:29:d6:22:58:f9:44:b2:0a:b5:ad:
         8f:c8:0e:fc:e3:85:0b:11:aa:28:ce:7e:68:a2:6d:2b:2b:61:
         c0:be:6f:78:4f:8a:e8:32:31:15:9d:d3:94:e8:ea:8b:75:55:
         f8:fe:a1:6e:f8:95:19:5c:59:e9:44:b7:b6:ee:d4:6d:1e:d1:
         29:20:9c:61:49:56:4b:4d:99:2f:74:68:99:bd:a5:ab:fd:4e:
         85:d4:df:1a:3f:8a:5d:e0:a4:02:25:94:4a:6d:13:97:d2:02:
         da:6b:4d:7b:82:c0:2c:cb:c0:e9:15:77:94:b9:23:ee:6c:53:
         3a:ef:92:46:dd:c6:ce:38:6e:68:f2:63:fc:19:c8:16:8f:fe:
         a4:9e:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:45 2024 by rpki-client on console-fra.rpki-client.org