Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File:                     yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier:          pyesQj5IKcsc7vBetgW7wncEaG9Hju251SW51uRQJvg=
Subject key identifier:   C7:0B:43:3A:AA:0F:2D:88:FE:88:D9:76:05:95:DD:98:C5:C2:C1:9C
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer:       /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial:       019357D2C452C3F1365B15061779E3CCBDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 07:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:50 +0000
Files and hashes:         1: RGZgct0Ladq_YFiv2sFlJPWPyqU.roa (hash: gLejDXRbh6OaLJclayaJawT+V3u1tlnJLAC1w2ARWiw=)
                          2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: Ybnr8qHMIBQVWByixC3pAHc4KZDV6N4WwV1SkxCvc2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:c4:52:c3:f1:36:5b:15:06:17:79:e3:cc:bd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
        Validity
            Not Before: Nov 23 07:00:50 2024 GMT
            Not After : Nov 24 07:00:50 2024 GMT
        Subject: CN=c70b433aaa0f2d88fe88d9760595dd98c5c2c19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:08:6d:69:19:c3:a0:0a:87:af:ac:c1:34:
                    b5:dd:14:04:58:97:ba:07:06:20:f8:2c:a7:52:3d:
                    7a:b6:a3:44:09:69:4e:24:c6:1d:45:3f:5e:56:3c:
                    a9:f8:e7:e6:0d:aa:4a:da:95:7b:37:02:fb:b5:2d:
                    a7:5a:68:84:77:b7:2b:31:c4:f1:d3:15:92:cf:63:
                    69:8d:02:f3:0f:af:ad:95:08:67:35:a8:29:63:cb:
                    f8:4a:b8:75:9e:a4:0c:c8:9d:f8:fb:ca:0d:e5:b3:
                    dc:9f:38:76:09:5f:32:b8:c9:f3:7f:ac:f9:44:26:
                    12:8d:2c:48:7f:c1:28:ae:d2:0e:b0:ef:ea:a1:53:
                    42:05:8c:80:3d:25:49:ab:07:f0:34:d4:cc:b5:ec:
                    1e:0a:b6:27:b9:44:d2:5b:83:d3:01:47:77:45:eb:
                    68:6b:13:f6:c9:9b:e4:be:2b:61:62:18:34:10:4f:
                    fb:71:28:e3:3c:e3:b3:fb:be:b9:e7:55:19:20:ff:
                    ec:30:02:9a:30:aa:d8:bc:7d:d3:f3:1b:99:ba:14:
                    a5:78:91:80:59:2e:d3:ca:d0:2a:5d:b4:35:6f:f1:
                    81:8c:b4:a5:0a:44:13:85:db:4e:07:37:11:54:59:
                    14:5e:9a:c5:2c:b6:e5:8e:cc:2f:50:d2:e6:b9:f9:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0B:43:3A:AA:0F:2D:88:FE:88:D9:76:05:95:DD:98:C5:C2:C1:9C
            X509v3 Authority Key Identifier:
                keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:72:41:fd:b1:1e:59:19:bd:90:d6:76:14:b0:14:ac:be:
         50:2a:e7:23:93:cc:ab:ca:4e:28:46:a9:2e:08:22:12:3f:bf:
         cc:17:f8:b7:e4:e8:18:e0:48:b5:60:25:df:14:af:53:29:9c:
         63:5b:0f:b4:3e:32:7b:50:36:de:b9:6b:53:3f:fb:f0:65:59:
         67:ab:6e:59:2a:7e:55:95:c8:ca:c1:30:26:6a:ad:a9:16:75:
         64:b6:fd:fd:fc:cc:0c:fd:ed:9a:2a:58:e7:f4:be:f5:b5:f0:
         e6:a7:bf:16:d5:2f:b1:a3:c1:e6:a5:d0:89:35:88:a4:05:ce:
         19:48:cc:cb:f0:42:30:1d:7c:2a:a6:bd:b6:43:5c:6e:e3:e0:
         44:20:3a:1b:69:89:c1:f9:c6:4c:dc:44:5f:58:c9:5d:ac:26:
         62:20:12:29:73:a1:9c:3b:94:1d:2d:3f:2d:eb:0a:34:42:96:
         19:b9:cf:46:30:50:31:16:0b:a1:d2:37:77:e8:54:66:ff:95:
         08:d3:90:a9:f6:86:d2:57:de:91:c7:bb:1e:ee:6c:66:0c:0b:
         2c:0f:04:ce:1b:1f:ba:e8:af:52:a7:f9:40:4f:51:c1:25:05:
         e9:b6:e8:5d:f1:91:5d:fa:7c:74:4e:50:87:c5:1e:8b:51:c3:
         f3:7d:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:34 2024 by rpki-client on console-fra.rpki-client.org