Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File:                     yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier:          D/JrdgcHAVJZ4PRM0wTIasTcIsdMzrm8PUZL78OTxrg=
Subject key identifier:   05:E0:B4:7A:57:31:A0:0F:DA:53:AC:A6:61:78:AA:AC:97:6D:72:0D
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer:       /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial:       0193579B74451FFA4AEAE1B70FF291BBDCD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 06:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:25 +0000
Files and hashes:         1: mPu8paiLKcJR1E7QWfaXZ9WufK8.roa (hash: KfJSG1tj/Qb3yTVeeYawck7EtkKHqcjK+GsS8sV/MJ4=)
                          2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: a29500cJAkSVybw/ardhWh5uVdt0DDjJ0YE4rG2eMBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:74:45:1f:fa:4a:ea:e1:b7:0f:f2:91:bb:dc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
        Validity
            Not Before: Nov 23 06:00:25 2024 GMT
            Not After : Nov 24 06:00:25 2024 GMT
        Subject: CN=05e0b47a5731a00fda53aca66178aaac976d720d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7b:c9:d8:82:cc:9c:25:01:1d:de:4e:0d:ad:
                    cb:ae:35:2f:02:3f:39:33:00:5a:f6:0a:27:c4:21:
                    f1:8c:88:f2:1f:a2:12:a9:17:07:32:c6:c3:7e:be:
                    01:01:b1:f7:d4:0f:ab:a7:29:ee:ca:d5:e8:43:8a:
                    4c:63:25:57:e0:4a:92:32:10:96:a7:7c:49:30:cb:
                    db:66:04:2c:ff:31:07:3a:29:e5:5a:13:d1:be:63:
                    d2:bd:11:5b:fd:4a:46:d6:93:85:ea:e4:c1:3b:53:
                    5d:01:01:3f:86:13:c9:a1:5a:c0:47:79:13:68:88:
                    40:8c:89:48:af:b2:f5:4c:79:e4:c5:db:fc:b6:c7:
                    a9:5f:61:e9:a8:43:e6:e7:26:3a:8c:02:46:e5:4c:
                    f7:a8:7b:c5:17:6a:9e:25:56:10:b6:c9:23:4f:26:
                    8d:e3:7d:6a:aa:73:09:3f:2b:98:9b:bc:85:a0:0f:
                    db:ef:19:db:db:35:32:7b:c3:de:65:cc:d1:7a:9c:
                    4d:1b:9a:68:16:0a:e5:b8:c9:db:c7:a5:44:d5:5b:
                    35:dc:5b:4a:e3:eb:8d:12:0a:dd:33:31:77:20:35:
                    c9:98:f2:a5:7c:3c:dd:26:e3:e3:4d:b7:45:b9:3c:
                    f8:1f:2b:a0:59:5b:f4:f3:fc:91:13:ee:60:7c:ea:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E0:B4:7A:57:31:A0:0F:DA:53:AC:A6:61:78:AA:AC:97:6D:72:0D
            X509v3 Authority Key Identifier:
                keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:e0:a6:92:aa:56:72:36:36:ed:45:d6:82:68:a4:b9:c8:
         60:4d:71:23:e9:86:f3:f5:10:5a:9c:c8:3f:ca:39:d3:b2:71:
         63:f5:ac:b6:75:87:28:f3:f8:3f:cb:8a:c4:a2:c4:fa:cc:8a:
         57:8c:34:03:dc:7b:39:c3:4b:07:19:49:87:6f:40:93:92:e6:
         a4:83:95:92:c5:cd:22:ca:e6:60:2c:bc:12:4d:50:0d:97:d9:
         a6:e5:be:22:c2:de:d5:41:cf:46:1d:52:bf:4a:5e:2d:8a:a4:
         ae:83:57:c8:a2:3c:50:a4:77:26:80:96:b3:e0:97:94:af:47:
         02:29:1b:d2:0d:2f:bd:9d:5c:21:2a:0b:ac:bc:a5:0a:91:8b:
         b5:1f:f9:d1:4c:4e:63:8d:e4:a9:a1:1b:b5:07:9b:4a:7b:c4:
         07:14:40:0f:47:0a:9d:78:07:d9:68:3f:e5:2a:c2:f1:d3:30:
         20:6a:1e:16:bf:fe:66:67:5c:5d:cb:dc:2a:29:66:58:40:9a:
         ab:84:77:90:82:cc:a1:99:f2:a1:0f:6c:4d:46:73:1a:1d:f5:
         5c:9f:95:88:2b:e0:50:c5:c0:3f:20:11:53:6f:5b:69:b1:84:
         7b:c6:4e:04:53:b5:68:f3:e2:d6:26:fb:44:52:cd:81:31:56:
         8f:1a:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:49 2024 by rpki-client on console-fra.rpki-client.org