Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File:                     ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier:          mERQ1JVMYx3A1Cu08o1JYqN8sf0TZoXjZlLX1tplgBo=
Subject key identifier:   D2:46:82:CC:0F:15:16:8B:EC:4D:D5:B4:CB:97:7A:8D:4A:FB:A6:81
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer:       /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial:       019352E2CF3804523DB759A29663AE9A7265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number:          0ADC
Signing time:             Fri 22 Nov 2024 08:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:16 +0000
Files and hashes:         1: EkaEyXozgiekll2E79hO4CO1uqA.roa (hash: wP1NSmnrNLxRRtg48uADNbI9NtddzaJ1aUWyXkJo9AA=)
                          2: H1WuWQeLl9ErvZ0win9a8eSENkA.roa (hash: XGE6yMNw/+tuLyRhdHwuYoZRYUtP4YGvMePTY9yGJ3U=)
                          3: kv2ROCi_Jmbv6oEE8RVKcv23P-o.roa (hash: I5qhyisj2Udn8Rd/Xn7lVupQUcJAUikn6tBNe0b6srw=)
                          4: scZfU-W7CZYppchBjf5IbgNi6Zc.roa (hash: VmA+v53hiM9sB9DT7zV4Yuy9JaQcE7lKYq1QCn+xarY=)
                          5: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: 6lGjxXYbhZh26+bFzKI2U2lEt13wyH6yipgJQ7O7gWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:cf:38:04:52:3d:b7:59:a2:96:63:ae:9a:72:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
        Validity
            Not Before: Nov 22 08:00:16 2024 GMT
            Not After : Nov 23 08:00:16 2024 GMT
        Subject: CN=d24682cc0f15168bec4dd5b4cb977a8d4afba681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:5e:2d:46:d8:f5:98:ea:d6:63:d6:97:b5:
                    7e:e6:b4:c0:1e:88:31:e6:ec:bd:7d:4c:1b:64:43:
                    77:a7:64:11:6a:48:9c:14:0e:34:40:7a:90:8e:e7:
                    d1:37:05:2e:95:19:0a:5e:4c:d4:b4:1a:d6:50:ec:
                    7e:45:a7:4b:e1:aa:39:2a:8d:6b:b5:04:19:cc:c0:
                    25:e2:db:b5:f0:83:0f:31:33:4b:df:b5:d8:10:9e:
                    eb:bf:60:ee:67:bc:41:88:d2:43:12:b5:6f:d2:03:
                    22:20:9f:33:6c:f4:79:aa:d9:39:2c:fb:e8:e7:de:
                    84:34:95:cb:1f:58:0d:ee:85:bc:16:f2:57:80:39:
                    be:3e:da:bc:ae:ed:3a:81:97:65:33:47:29:08:82:
                    e0:8d:f7:35:42:51:59:46:23:81:89:4e:63:16:6a:
                    cc:fb:16:c0:d7:1c:f3:66:3c:41:74:f9:d6:bf:38:
                    f6:2f:7b:1c:3b:72:b2:d8:71:5a:37:ff:18:98:a8:
                    46:ed:13:a0:a6:e6:3a:c0:2f:85:44:3b:c4:82:28:
                    1a:45:42:cb:24:9a:af:a4:44:ff:b1:77:88:8a:fb:
                    b0:9a:52:a1:3f:81:7d:46:6f:97:24:66:d5:be:e1:
                    8d:c1:3b:4e:08:5a:14:b2:c8:cf:0e:8b:c0:3b:82:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:82:CC:0F:15:16:8B:EC:4D:D5:B4:CB:97:7A:8D:4A:FB:A6:81
            X509v3 Authority Key Identifier:
                keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:24:45:9a:0a:75:04:7e:95:6e:0d:6e:33:82:08:2a:10:2b:
         2e:d9:13:cd:3c:d8:a9:ed:45:52:5f:08:51:2b:9c:55:b2:2f:
         83:bf:8d:66:48:c5:b1:c4:28:c6:93:2d:73:89:15:ae:02:ad:
         fe:f0:df:7a:0a:93:d0:5e:27:5a:3e:a0:88:97:c9:83:7a:cb:
         fa:81:de:7b:1d:22:75:a4:ea:38:bd:3b:1d:f6:31:a4:7f:ab:
         2b:11:fd:72:42:75:96:0d:6c:12:9d:9d:8a:6e:b5:fd:2d:7b:
         53:2c:90:3e:6d:13:5b:9e:eb:fe:b3:9d:6b:a4:3e:ff:81:6a:
         cb:18:14:32:80:6d:93:c3:f7:3a:99:2a:63:70:77:dc:a6:dd:
         d9:cb:0d:09:6e:53:d7:fd:78:1b:0b:a3:d9:69:02:c9:9b:74:
         16:31:69:24:49:3f:f2:1d:79:4b:f1:15:75:57:a9:08:23:ed:
         69:1b:6a:87:36:8c:1f:a9:2b:c6:d0:20:cf:98:cb:ba:a2:18:
         6e:3a:69:a7:3c:bf:06:6f:e7:5e:55:5e:94:a9:5a:02:a0:42:
         1b:40:e9:92:6a:2b:82:ca:b4:db:e1:4f:38:7c:dd:ab:38:be:
         3f:95:2e:d2:87:de:36:ba:c0:ca:6d:fc:50:9c:28:ca:33:2d:
         4b:ec:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:23:06 2024 by rpki-client on console-ams.rpki-client.org