Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft
File:                     Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft (raw, json)
Hash identifier:          A+5YtBrzJRPSsi9/m9wvN4mBqM1N4Iau+YbJD87h1mQ=
Subject key identifier:   87:EE:77:37:42:B3:B2:9F:05:45:AD:DD:BF:21:2E:4B:AD:BF:5D:D2
Authority key identifier: 63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7
Certificate issuer:       /CN=6386dde35c148f897e9c275d80627e092ea3c0c7
Certificate serial:       01935877BD4C17EEE7ABC7DC777F633175EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 10:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:02 +0000
Files and hashes:         1: Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl (hash: DG4QJ/r3e3L3Qy7ox2vAOFxnjKf6tgaMgORgkF2QYO4=)
                          2: qEt2NasBEmy5I3_U0Tqhyp_GRi0.roa (hash: 5tJo6wx0v1zsGQqNeVwXYRKbBk9j6lgU2vmvS3QlzFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:bd:4c:17:ee:e7:ab:c7:dc:77:7f:63:31:75:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6386dde35c148f897e9c275d80627e092ea3c0c7
        Validity
            Not Before: Nov 23 10:01:02 2024 GMT
            Not After : Nov 24 10:01:02 2024 GMT
        Subject: CN=87ee773742b3b29f0545adddbf212e4badbf5dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:ad:33:f9:7e:69:5e:bb:f9:c4:76:31:53:
                    74:ef:b1:fc:28:c3:4f:a7:28:9b:c6:9f:67:c9:68:
                    97:3d:94:82:32:b6:8b:f4:e4:fb:00:b5:fe:0b:c4:
                    4f:7d:cb:ef:9f:3c:98:a8:fc:b2:e4:2e:51:9a:67:
                    7c:2c:42:3d:ed:2f:79:89:af:7f:b6:81:02:a3:b8:
                    8d:f1:05:43:de:60:11:6a:cb:70:53:86:a3:15:1f:
                    c7:bc:93:59:08:45:fd:7e:56:d9:81:b8:21:5c:9a:
                    57:08:d8:93:70:3d:ac:e0:81:49:bc:83:07:28:17:
                    76:98:8b:96:00:b8:d6:40:a2:13:44:f3:93:ea:b1:
                    82:f0:49:ac:eb:53:b1:f8:5b:a1:5a:f2:61:63:3e:
                    b4:f2:a9:67:66:4f:8a:31:73:1a:77:74:8d:1c:21:
                    4f:d3:6c:8d:70:b8:06:6e:d8:9c:b0:75:81:95:58:
                    54:33:05:4d:b4:21:75:02:2a:90:80:15:25:68:04:
                    b6:52:b8:8f:ad:52:54:ef:5a:b1:c1:07:60:92:6a:
                    d7:6a:16:1f:3d:0b:80:05:82:b1:af:4a:c2:62:ea:
                    21:3a:0b:8b:df:71:75:48:90:bf:e3:5a:ee:59:3b:
                    f0:a1:32:7f:73:69:63:fd:4f:1d:f7:13:1a:e2:b3:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EE:77:37:42:B3:B2:9F:05:45:AD:DD:BF:21:2E:4B:AD:BF:5D:D2
            X509v3 Authority Key Identifier:
                keyid:63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:55:06:92:15:63:9d:d0:42:37:55:9e:e6:f4:a7:3d:af:5c:
         66:63:e9:51:d5:1e:d0:5f:28:98:da:7c:06:8b:86:aa:08:77:
         af:7a:d0:d2:8e:c7:6f:10:9b:db:71:39:5f:2f:72:14:6d:99:
         28:86:97:12:2f:cf:fa:de:a9:af:8c:5a:7e:3e:b3:97:42:68:
         65:66:79:21:40:2f:24:43:d9:60:74:ad:85:ae:cc:7b:40:66:
         e8:5f:c7:d4:34:ce:00:a1:4d:75:38:b4:af:77:8b:0e:c3:cd:
         25:3a:62:05:61:eb:5d:3f:0f:2e:b4:fc:c8:18:33:ce:01:e3:
         dc:b3:ce:fc:25:a2:b3:f9:d8:2b:19:63:8d:18:c8:7b:e6:a4:
         78:e6:27:e5:fb:ba:09:e9:d1:fa:96:1d:a8:ed:19:00:0b:b5:
         ac:f1:65:e1:ca:ed:c7:ea:e9:3a:8b:9e:6f:f5:f8:3c:ea:86:
         8f:66:51:58:e5:1b:14:84:63:1c:8b:5f:ba:0f:8b:d3:94:d9:
         a8:76:1e:88:f2:d1:9b:7b:ae:f7:ff:71:9c:66:26:51:75:39:
         9f:8d:00:e5:5e:83:f0:92:8d:75:ef:4f:ab:4d:89:59:a9:10:
         c5:98:64:78:32:07:6e:88:43:d3:e8:0a:fa:c8:a3:14:61:dc:
         a1:15:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:00:14 2024 by rpki-client on console-fra.rpki-client.org