Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File:                     yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier:          j+vBIpAXOUhsn2KxzQB+s+dv0A7RAgjG/6uuUXRqNO0=
Subject key identifier:   74:B6:27:04:09:C2:A1:16:F7:57:89:7F:33:38:F7:3E:CD:FF:3A:56
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer:       /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial:       01936A4658CACD55076E2A033AF6D2F4545E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number:          0396
Signing time:             Tue 26 Nov 2024 21:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:15 +0000
Files and hashes:         1: M23sJP-0XNq_aSYS_dCyaD4ZOu0.roa (hash: l6f//cq27N6Ee3rYT+ohAIt0v9ySzaAV1N7l3FRQHNw=)
                          2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: +hraxijt2eCXeF/z7QvVl/6YvbIT2ltOfCBQFElgWow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:58:ca:cd:55:07:6e:2a:03:3a:f6:d2:f4:54:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
        Validity
            Not Before: Nov 26 21:00:15 2024 GMT
            Not After : Nov 27 21:00:15 2024 GMT
        Subject: CN=74b6270409c2a116f757897f3338f73ecdff3a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:f4:8c:c4:a6:c8:52:74:1b:bc:10:9e:7a:
                    67:78:16:d3:1c:f0:a5:20:c4:a8:e1:f6:b6:33:9c:
                    a3:e7:73:7f:45:00:6f:65:ea:8c:5c:7d:4a:de:f8:
                    2e:10:f9:19:e8:c8:35:1f:02:91:27:dd:d0:12:38:
                    19:29:5a:a1:83:09:64:67:9d:0e:92:51:bc:ea:b4:
                    ee:95:c0:e3:53:4d:25:04:dd:47:90:e1:ec:b0:db:
                    8e:85:5b:33:ac:97:9f:6b:63:32:ca:e2:7d:38:bf:
                    7e:2d:20:66:56:a1:6d:7c:5e:cf:99:12:e1:df:fe:
                    3c:b9:a0:8a:c2:be:6c:3e:2f:73:47:e5:cd:37:dd:
                    2d:c9:1c:95:5f:43:a4:5e:3a:6a:b8:3d:eb:f1:c4:
                    f3:0c:c9:c6:2a:f6:86:25:ef:94:12:13:ff:54:ef:
                    fe:a0:e5:59:11:87:45:40:1f:46:c4:1a:04:04:a2:
                    4f:da:ce:51:c4:9f:5c:90:f6:29:2c:69:d9:fc:3b:
                    cb:71:c2:4d:98:c9:0c:4d:f6:46:e7:88:74:47:cf:
                    68:ea:d4:ca:96:68:4d:cb:b9:6c:d6:26:f1:10:98:
                    3f:27:aa:5c:99:7e:42:45:af:f8:cd:e3:30:d6:51:
                    3d:11:6d:e7:27:75:73:39:c0:9d:51:54:8b:a8:58:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:27:04:09:C2:A1:16:F7:57:89:7F:33:38:F7:3E:CD:FF:3A:56
            X509v3 Authority Key Identifier:
                keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:33:96:01:2a:30:a1:ec:f8:37:f9:10:00:18:15:a5:fc:
         67:06:dc:db:cf:14:9f:c6:31:9a:c1:10:53:b8:43:ce:8f:93:
         53:b7:ab:15:95:c5:db:82:76:62:52:a4:f8:fd:6d:f4:a9:27:
         76:3e:ff:eb:bd:fb:4a:97:2b:48:b9:4c:eb:60:e1:5c:66:52:
         cb:92:3f:08:16:82:45:ca:c0:e3:9c:f1:f3:10:92:66:ae:ff:
         6e:5a:ed:c3:6e:5c:15:d7:70:ad:b3:d7:fb:0a:cb:45:60:82:
         dc:2f:16:53:67:14:43:28:6b:58:c3:f4:92:2d:6a:b5:23:0e:
         f2:0a:ab:40:dd:92:70:fe:51:68:6e:0f:73:35:e2:ab:6b:d4:
         9f:12:20:89:1b:5e:28:a7:45:75:dc:78:3b:e6:0a:a9:65:9a:
         1d:99:f5:20:7d:c8:d1:f9:f7:4f:f1:cd:ff:87:16:83:40:15:
         75:6e:62:63:74:3b:09:09:4d:ae:00:5e:5e:21:d2:eb:60:40:
         27:dd:d1:ef:54:39:9e:f3:70:61:2b:b4:c9:a0:5b:7e:48:c7:
         3b:ec:cd:2a:fe:52:dc:56:db:f3:a2:e2:0e:b9:f5:7a:99:40:
         dd:68:d9:77:e1:b1:e6:ba:b5:51:71:76:5c:8b:2e:9d:38:58:
         9b:7a:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:24 2024 by rpki-client on console-ams.rpki-client.org