Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File:                     Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier:          pkz3qZ7BdRTElhfr6SY1LXbTidrV+PUPsEg/fKPCKt0=
Subject key identifier:   CD:4E:13:AB:86:E6:69:49:7A:9E:81:75:7C:B3:A3:9E:1B:A4:4A:EC
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer:       /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial:       01935508BC8D8C66DC5D4A73F7ADA0C6974F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number:          033B
Signing time:             Fri 22 Nov 2024 18:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:56 +0000
Files and hashes:         1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: DmdYGJBR/Z4YKsRFGnPojNOJ1P8erIMUdSC0TVwbqig=)
                          2: qZ_vHsaf7XImMaocegl_tf2ymoo.roa (hash: 6VsCS3AYr3AciBU2TOap7HoIXkcRPXKVEFKyknqrUso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:bc:8d:8c:66:dc:5d:4a:73:f7:ad:a0:c6:97:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637115f728f97d16e0d124963764088120205ae0
        Validity
            Not Before: Nov 22 18:00:56 2024 GMT
            Not After : Nov 23 18:00:56 2024 GMT
        Subject: CN=cd4e13ab86e669497a9e81757cb3a39e1ba44aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:bf:e6:3c:40:e1:18:3b:7e:05:6a:db:bb:
                    55:48:de:52:0d:6e:5f:d0:c6:12:59:e5:49:58:81:
                    58:19:0a:dd:24:b0:8c:ea:60:ee:20:78:69:a5:1a:
                    d3:74:4f:3b:37:e0:b6:45:4a:3b:a6:99:e0:4d:2d:
                    b7:cd:1e:d0:b2:32:4f:05:55:42:f4:d6:90:1e:08:
                    63:ad:b3:f4:5a:cd:d6:7c:7f:43:a7:f1:cf:97:bd:
                    db:c0:e5:8d:e1:80:82:48:a5:fb:b9:23:67:12:5d:
                    0d:2f:56:86:8e:8c:74:be:58:26:85:e8:3d:73:ee:
                    c1:f4:b0:2c:04:31:5d:8b:9c:ae:e6:f0:62:84:c5:
                    13:99:cf:ba:bf:25:b7:26:41:78:25:96:5a:3a:16:
                    95:9c:66:54:11:02:37:13:59:29:a9:d6:50:20:84:
                    ed:99:e8:6b:41:93:4c:29:1d:00:ef:27:5d:06:03:
                    ef:1a:ad:53:0e:52:88:a7:6b:d7:c6:2f:eb:e7:f9:
                    23:14:c0:df:fd:25:53:d6:27:49:61:c2:f9:f8:c9:
                    16:b2:fd:00:fa:67:c4:01:e8:5b:2b:89:13:b6:fc:
                    72:1a:3b:03:5c:fc:fd:1e:fe:8d:14:36:d6:82:8c:
                    9f:b1:88:00:60:36:6d:73:79:d7:d8:52:27:f4:ab:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:13:AB:86:E6:69:49:7A:9E:81:75:7C:B3:A3:9E:1B:A4:4A:EC
            X509v3 Authority Key Identifier:
                keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:73:03:d8:9c:a6:00:18:21:ed:e7:26:5e:61:e5:05:6b:
         1a:eb:8e:e1:4b:ff:a3:a3:6a:c0:c4:05:9a:4d:93:09:4f:60:
         c8:41:b8:22:d1:36:6d:5d:55:90:34:c8:11:8d:76:d9:50:95:
         88:35:50:7a:de:31:02:95:c5:e0:11:6e:09:5f:e0:eb:21:e8:
         41:03:13:e2:18:d2:8d:e5:25:8f:50:a1:2c:05:fa:a9:25:4f:
         b1:32:f8:f5:0b:b2:3b:fd:9a:ce:61:58:8b:f9:68:65:b0:23:
         2e:bf:18:bc:ee:6a:18:50:82:0e:2c:fd:e0:aa:86:c2:c9:f4:
         61:50:7f:aa:b8:bb:e1:7e:22:3f:aa:a2:49:3b:34:97:ab:47:
         8d:f0:6b:10:56:d2:84:61:01:70:60:21:7b:95:74:9f:40:e4:
         4a:5a:7c:48:82:7b:97:cb:8d:94:7a:4a:69:04:27:d2:85:1b:
         99:6c:63:24:2f:e1:ab:af:66:bd:88:1e:aa:07:3e:1c:03:10:
         fc:1f:8d:1c:eb:2c:64:7e:e0:88:78:19:60:9d:4f:26:ab:3d:
         e7:7a:d0:b6:9a:e6:55:c3:86:8e:6a:0c:8e:10:13:5f:85:a8:
         e7:2a:90:5b:71:17:5a:32:2c:17:6e:56:ff:76:e8:cc:0d:b8:
         75:fc:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:16 2024 by rpki-client on console-ams.rpki-client.org