Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File:                     yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier:          FnfVf0d3qVLIajLvK7Hn5WuxnQvjDyUaNQP/8CWzyEg=
Subject key identifier:   E4:6C:7A:83:BD:B1:FE:87:1E:07:B4:09:4E:88:4A:62:04:E1:2B:F6
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer:       /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial:       01936B221377E1443FB558A14CDC80F64C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number:          0597
Signing time:             Wed 27 Nov 2024 01:00:15 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:15 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:15 +0000
Files and hashes:         1: QoxLHq3N58WlOor_4rlrpQeILbw.roa (hash: b6gaRakpomgv9rsfqYSOB1ICjUtYykXMBbXPdp0mdEg=)
                          2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: Fgq2Uc8vO7gD3iToEauXYxGKwSGe2c6S6dr10Ph639U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:13:77:e1:44:3f:b5:58:a1:4c:dc:80:f6:4c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
        Validity
            Not Before: Nov 27 01:00:15 2024 GMT
            Not After : Nov 28 01:00:15 2024 GMT
        Subject: CN=e46c7a83bdb1fe871e07b4094e884a6204e12bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:6f:d3:a9:34:38:78:62:13:12:9e:4b:9f:
                    d3:85:24:aa:5e:72:6d:76:17:27:08:2a:6f:27:d0:
                    51:05:86:9a:a4:a7:4c:b9:fe:49:50:56:20:d1:17:
                    c7:f1:ba:5c:13:90:5c:fe:91:21:4f:69:bd:81:82:
                    77:b2:eb:d1:fd:68:a9:73:89:55:03:a9:31:d8:a3:
                    db:09:26:93:2a:56:51:1a:97:26:fc:c3:67:88:cd:
                    d7:d0:5b:c0:6b:61:dd:94:70:73:7d:33:38:a6:51:
                    35:60:fe:fd:83:e8:dd:d5:fa:54:e7:12:1a:cc:ad:
                    e6:52:fd:a5:e5:4a:33:5b:76:16:e8:63:eb:38:71:
                    98:29:17:89:75:df:0d:0b:60:2c:97:5b:a1:e5:5b:
                    54:bc:ee:9b:8e:d7:0c:20:f9:c8:de:dc:2d:08:cb:
                    8e:60:53:90:2a:50:3f:5d:37:07:a9:00:95:9f:9e:
                    9c:83:e9:94:8e:d8:4e:dd:f1:4c:f9:0b:c7:6e:32:
                    37:b8:ac:08:d9:9c:cb:55:73:d5:4b:7f:8e:81:98:
                    ac:af:16:46:f4:be:2c:8f:05:0f:bd:5f:56:4a:6a:
                    bf:3f:89:46:7c:d6:75:86:18:f5:32:a9:d2:92:63:
                    8f:19:34:a5:e0:bd:a9:74:b0:d3:95:aa:aa:f3:40:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6C:7A:83:BD:B1:FE:87:1E:07:B4:09:4E:88:4A:62:04:E1:2B:F6
            X509v3 Authority Key Identifier:
                keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:de:f1:21:9f:42:a9:60:c0:f4:69:d6:24:be:a5:d5:ab:28:
         b6:5a:c6:fb:2c:d1:3f:ed:2b:4f:07:90:ad:d8:a5:77:b6:f4:
         86:4f:ee:ed:d0:af:e2:b6:1e:23:dd:7a:6b:c0:40:69:5e:b6:
         78:ea:e8:aa:b6:ce:e9:a7:50:a3:fe:46:2e:36:40:25:d4:62:
         27:b2:cb:70:85:e7:dd:65:a1:c9:09:61:88:72:7a:72:36:98:
         ee:76:64:0f:c4:47:ff:26:6e:d2:28:8a:1a:a6:a9:1d:8e:15:
         a9:e4:af:4a:1d:10:29:93:6a:c9:3e:88:41:87:17:e4:f4:96:
         c6:4c:36:6e:ce:28:48:8d:67:a1:6a:75:69:95:a2:10:8d:33:
         be:bf:f0:6a:43:f0:69:cc:6d:a0:8e:bf:52:56:3e:4e:a4:e7:
         1a:33:83:8e:f9:0d:42:a8:0b:71:ac:6d:5f:39:d4:88:e3:24:
         20:04:00:25:37:90:57:5b:9b:12:35:fa:d8:85:fe:8c:12:04:
         65:f8:ad:52:7f:56:cd:c8:6b:e3:c6:c2:17:4f:e7:d8:81:49:
         16:f3:b0:f9:46:f7:a5:26:41:e8:6c:f6:9e:5e:17:28:86:00:
         52:c8:9d:2b:7f:31:76:89:a9:08:12:2f:10:ac:00:d6:f9:bc:
         f0:7b:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:43 2024 by rpki-client on console-fra.rpki-client.org