Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File:                     _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier:          GnNLs8hedi3w3mfTB3HtxF0ZP1x46EjBLdCQ/QIdqPQ=
Subject key identifier:   C3:10:E2:3B:52:54:AE:5B:42:79:AF:9F:03:2B:72:3B:F9:B0:F0:23
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer:       /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial:       0193579BADD2B74C7A00A5178A71B0D3AB82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 06:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:40 +0000
Files and hashes:         1: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: +JyqTjN/0H1d5EPP8PFuAHP+gXhjrXLXwcXnxxGymXw=)
                          2: p2VzljyIf7LvNMX0sxnsxfW8r3g.roa (hash: u4zSF+HUGYwx5CX4seLQpFdH/lDcVRqW/fJnqV/Pr3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ad:d2:b7:4c:7a:00:a5:17:8a:71:b0:d3:ab:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
        Validity
            Not Before: Nov 23 06:00:40 2024 GMT
            Not After : Nov 24 06:00:40 2024 GMT
        Subject: CN=c310e23b5254ae5b4279af9f032b723bf9b0f023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:61:fe:4b:d9:fc:32:f2:9e:c8:c6:fe:e6:
                    61:6c:ee:b8:17:cd:49:5e:f9:7a:8a:78:94:21:a8:
                    e3:15:da:d6:99:4d:0d:0b:07:e7:f9:28:ae:1d:dd:
                    fb:2f:f3:75:0e:3d:cc:f2:74:96:4c:22:8d:f3:22:
                    af:60:be:b1:a6:3e:b9:87:54:8a:fb:59:16:7d:c4:
                    1a:a6:ce:ff:b9:69:84:c2:0b:92:f5:dc:d2:e1:c3:
                    74:ca:7f:21:37:91:9d:9f:81:74:2c:54:44:fd:9b:
                    23:6f:e5:c8:27:f1:78:65:4c:62:f8:a7:14:52:5e:
                    9b:04:7f:0b:27:87:d1:c2:2d:9a:8d:59:02:17:c1:
                    69:10:f1:ee:e8:d6:c6:d8:02:b0:7b:86:4d:56:ae:
                    89:66:b5:8b:57:89:6a:b6:f5:64:94:93:ed:38:d3:
                    17:b3:68:ff:6a:94:98:d1:b9:56:7c:27:6b:8e:bb:
                    51:94:28:35:fd:ad:8c:ea:cb:4a:72:51:d9:22:92:
                    9b:d7:0d:3a:5e:d1:e9:98:f6:b6:07:01:7b:81:e2:
                    50:0f:ca:e4:b4:21:55:3c:cb:fe:20:ea:6e:ac:5a:
                    39:b1:52:67:d1:8d:45:e7:60:78:d0:c6:d2:82:05:
                    b4:15:a5:55:76:22:74:56:c1:71:80:ce:de:a1:27:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:10:E2:3B:52:54:AE:5B:42:79:AF:9F:03:2B:72:3B:F9:B0:F0:23
            X509v3 Authority Key Identifier:
                keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:45:31:9f:ef:c1:ae:e4:a3:6c:dc:44:a1:ba:17:a4:2a:e4:
         26:ea:06:c1:91:d2:bb:4f:ad:dc:0f:ca:dc:a2:e8:48:0d:bb:
         d7:2d:d3:6a:08:f1:6f:48:52:f9:af:56:cc:5f:58:a7:fd:70:
         21:9e:72:9d:ef:b2:ac:5f:0b:0d:c7:f4:98:53:9e:c6:26:4d:
         77:67:ae:17:dc:89:95:dc:18:fb:ec:b4:a5:72:ac:8d:f1:c3:
         74:3c:b7:6d:6c:34:3b:c8:61:2d:9b:89:1e:8c:8f:21:e9:83:
         77:83:58:ce:f9:c0:62:65:18:84:55:22:4f:25:0e:cc:63:f7:
         f9:4e:21:76:3b:da:75:13:31:37:bb:f1:89:91:fa:b7:b2:34:
         1c:52:40:50:77:e3:38:dc:94:0c:92:eb:6b:dc:0d:21:08:77:
         91:fa:dc:79:6f:88:af:79:b6:69:cb:db:4c:11:49:95:0f:be:
         16:e0:d4:4b:ca:d8:4b:a1:05:b5:5d:21:eb:be:97:76:cb:c3:
         31:8d:90:54:10:51:ef:a3:4b:69:1b:0f:9a:dc:14:da:fa:cb:
         8f:0e:10:a4:2a:03:88:eb:eb:69:72:54:a6:b9:0d:c7:11:47:
         42:d1:41:f2:b1:fa:c2:5d:85:b8:c1:8c:6e:a7:69:cc:1f:ae:
         45:28:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:38 2024 by rpki-client on console-ams.rpki-client.org