Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File:                     YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier:          pqVSUYXmL8nGH9wyzlVmMMl+bTsm+pSavA6AAG1yXwo=
Subject key identifier:   50:DD:D6:A9:2F:0D:83:D8:A6:56:72:8A:CB:CA:96:ED:92:92:2B:95
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer:       /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial:       0193313331493E19729AA55ACCEC3BC1F50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number:          0959
Signing time:             Fri 15 Nov 2024 19:00:58 +0000
Manifest this update:     Fri 15 Nov 2024 19:00:58 +0000
Manifest next update:     Sat 16 Nov 2024 19:00:58 +0000
Files and hashes:         1: 6C4cGy_ItOeQ82_BFtVrNtB2FMk.roa (hash: zFW84UCq1i6Pbq4xXEsPbjhrXjjzFe2Dg1+TCYTEaQA=)
                          2: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: 011MhJRCCkxMCU0LRpsGrrwGgIfmTdnKt9Q5kv/TQnA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:31:33:31:49:3e:19:72:9a:a5:5a:cc:ec:3b:c1:f5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
        Validity
            Not Before: Nov 15 19:00:58 2024 GMT
            Not After : Nov 16 19:00:58 2024 GMT
        Subject: CN=50ddd6a92f0d83d8a656728acbca96ed92922b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:38:76:f8:63:c0:6a:06:7b:3c:ec:97:2c:
                    74:bb:e8:aa:60:f4:30:7c:1c:c4:a9:e3:9b:66:9b:
                    70:b9:c0:7c:41:77:78:e0:b0:b5:9d:c9:43:15:a5:
                    1e:5a:17:86:c4:58:d8:86:d3:0e:6d:00:16:8e:93:
                    9a:89:a4:8e:50:d3:50:ac:19:da:1f:45:c8:46:bc:
                    48:5f:8b:48:06:f9:69:5c:d8:03:d8:19:4d:28:a1:
                    0a:05:1e:b9:ff:8f:78:c1:1f:bc:b0:e9:e7:d9:86:
                    89:ea:18:31:4a:1c:1a:71:c4:36:9a:33:4c:8a:3f:
                    36:14:8f:78:af:21:82:2f:5a:93:91:77:81:b2:51:
                    e9:0d:55:cb:03:c4:11:10:24:5c:33:ed:3e:f5:be:
                    ac:01:2a:ef:3d:d6:2b:0b:8f:db:36:18:4d:a7:4a:
                    3f:45:34:08:b5:11:52:e2:09:c1:be:b3:52:8d:58:
                    a0:75:13:1f:8e:05:0b:70:5e:c6:94:26:6e:e9:b4:
                    01:30:14:33:fe:0c:e7:9f:21:b4:45:0a:0f:e3:e9:
                    a5:e7:4e:ff:a2:df:85:e1:02:4d:97:0a:29:43:ca:
                    29:13:b2:04:c6:e3:b7:cb:95:0d:c8:26:ca:23:98:
                    d3:35:02:d0:a4:44:e4:3f:65:3f:b8:6e:57:4d:32:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DD:D6:A9:2F:0D:83:D8:A6:56:72:8A:CB:CA:96:ED:92:92:2B:95
            X509v3 Authority Key Identifier:
                keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:84:52:b3:95:13:c7:4a:e9:ae:f0:d0:ff:2e:d9:e0:7a:ac:
         17:6b:ca:73:c2:88:56:23:46:f8:2f:40:48:90:b2:e7:06:c9:
         83:f6:b6:a7:e6:bf:10:b9:f7:50:aa:8b:b1:ab:dd:6c:d8:25:
         bc:70:dc:69:49:1c:f5:a1:e5:d1:e8:19:b6:4a:17:06:74:c7:
         74:2b:7c:f6:b6:3f:35:33:45:67:77:42:7b:00:1a:f5:27:4e:
         2d:84:a8:7c:11:11:ea:c3:e1:e7:6a:84:cc:c7:8a:b1:2a:04:
         be:a1:14:3c:c8:f2:ca:8b:b2:8a:de:11:df:33:f2:84:a7:35:
         03:7b:76:0d:39:70:93:95:91:30:17:e6:27:fc:08:51:75:53:
         61:0c:ec:0c:49:69:de:ac:8f:91:98:d6:c9:fd:cb:5a:88:6c:
         7b:19:9d:80:c4:0e:74:c3:ac:f9:3e:ef:93:a9:d5:52:f9:e5:
         b7:fd:b7:c7:a8:bf:a4:3f:8c:bc:05:9e:a0:4f:4b:89:40:ff:
         01:ce:ac:2a:ea:80:b9:b7:87:0a:00:3f:c2:52:41:66:2f:d3:
         47:75:09:cb:15:9f:d3:1e:a0:b4:5e:e3:dc:a4:55:50:41:7c:
         e7:43:ec:75:35:3e:8c:b8:77:bf:8f:a3:21:9c:90:bc:29:fc:
         07:ff:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 20:41:35 2024 by rpki-client on console-ams.rpki-client.org