Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File:                     y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier:          ymlJ94jFeleT4TLmNUWNPArhTTiLLrFJwGgUTder5fA=
Subject key identifier:   69:E4:9F:A1:E7:82:A7:14:8C:AB:85:B1:EA:4F:2F:D1:CC:83:69:B2
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer:       /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial:       01936BFDB994539066B461A64A69634AAFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number:          DB
Signing time:             Wed 27 Nov 2024 05:00:10 +0000
Manifest this update:     Wed 27 Nov 2024 05:00:10 +0000
Manifest next update:     Thu 28 Nov 2024 05:00:10 +0000
Files and hashes:         1: VDa42oHGcHPBJc9o7T6GHhRSveA.roa (hash: odedrCQf9Ksbw+d1gqW4TKC+htZIhLfzMCWweIqX+0E=)
                          2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: eiiqVfioVvbPSfDt4QYCvgLKoMyd6V1M2bBBM7wOuB4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:fd:b9:94:53:90:66:b4:61:a6:4a:69:63:4a:af:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
        Validity
            Not Before: Nov 27 05:00:10 2024 GMT
            Not After : Nov 28 05:00:10 2024 GMT
        Subject: CN=69e49fa1e782a7148cab85b1ea4f2fd1cc8369b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:8e:74:0b:b7:e1:5c:07:8b:1f:c2:50:cf:
                    f8:35:d1:10:3e:6a:0f:95:0b:17:c5:d0:a0:17:fa:
                    65:aa:61:43:7e:4f:b8:17:8f:3f:de:92:42:68:c4:
                    61:a2:93:39:18:3d:16:3c:4c:50:4b:fa:3a:51:a9:
                    47:22:a2:7b:79:3a:d9:11:12:56:01:28:16:46:ad:
                    99:f2:d9:1e:31:3a:f8:1e:26:33:33:46:70:34:d9:
                    aa:e9:11:02:4c:ce:c1:f5:1f:0a:dc:97:dd:61:14:
                    74:d0:68:7e:3a:5d:a6:bb:56:96:7c:68:88:25:3e:
                    af:cb:8e:f2:53:6f:af:55:59:54:71:a8:1d:c4:d9:
                    62:64:32:da:10:30:7a:c6:15:d3:3e:0d:b6:7a:f9:
                    f7:45:fd:7a:e8:e4:42:90:f0:f8:dc:57:bd:f2:26:
                    65:a2:ca:00:a1:84:b0:33:34:8b:bd:df:e2:08:dc:
                    13:df:bd:86:6a:7f:9f:08:a6:45:be:1b:22:ef:90:
                    23:4b:ee:73:49:e8:f4:ca:83:5e:5e:60:81:1c:cb:
                    10:02:75:4f:7b:09:69:bd:29:41:f8:20:0a:16:de:
                    89:4f:4c:f6:99:7f:b4:c1:e2:84:53:cb:6f:96:ba:
                    35:47:db:ac:8a:42:e9:11:b8:1e:f9:e4:ec:f2:24:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:9F:A1:E7:82:A7:14:8C:AB:85:B1:EA:4F:2F:D1:CC:83:69:B2
            X509v3 Authority Key Identifier:
                keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:16:35:fb:9f:8a:da:a2:12:c3:b1:ca:ed:e2:c1:db:40:
         b7:85:80:91:89:70:3f:a4:ad:57:92:3f:80:a7:21:97:c0:e1:
         9b:10:c9:47:2b:ed:26:e3:09:1a:8e:cc:c6:93:00:2f:f3:d6:
         a5:3e:14:8b:b0:41:2d:63:79:2e:ef:5d:4d:d7:91:57:0b:77:
         c3:27:31:02:22:86:d9:42:12:3b:d4:5b:9e:c2:b0:bf:f0:98:
         f4:55:4c:34:04:a6:09:b8:f7:68:64:b2:85:fb:aa:cc:2b:f7:
         67:4f:36:5b:cf:ee:e9:71:f2:af:a6:6a:38:76:e1:1e:ce:19:
         af:77:2f:d9:f0:3e:c2:50:e1:b0:c9:e6:11:a9:ec:d6:32:50:
         8b:3e:72:71:3e:fe:12:bd:30:94:16:39:18:a0:ae:c1:8e:6e:
         fd:d8:1b:ae:f9:c6:75:7b:81:1d:ac:7a:07:67:da:83:75:f0:
         47:48:35:21:80:2d:63:c1:d5:56:87:a1:e4:68:3a:b8:88:96:
         7d:06:69:9a:c0:68:d6:f2:b3:3d:8a:31:60:a4:77:dc:41:b5:
         55:8e:4a:3a:90:0c:30:b0:40:72:eb:d0:f6:83:d2:f7:6e:36:
         b2:16:34:b1:97:d2:b3:1d:d3:c8:8d:4b:0a:51:8d:02:0a:c9:
         e9:ca:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:17:13 2024 by rpki-client on console-ams.rpki-client.org