Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File:                     YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier:          qiAQRevVo7/ikA5R3YpD+MfLz+VYPia5a6nMJvSNRkg=
Subject key identifier:   98:F5:07:27:8D:B4:25:75:77:9A:EE:D1:0E:DB:AA:3E:48:50:21:EC
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer:       /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial:       019369D9B98ACAFE3D4490BE52AC5859FAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number:          0B22
Signing time:             Tue 26 Nov 2024 19:01:36 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:36 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:36 +0000
Files and hashes:         1: EnVFaEsazyBHwo_7U-FST8HwJcA.roa (hash: Bye3jeZd8cq7ulyoW1k5vaKbuosqfkw5mGlWG2570NQ=)
                          2: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: KRNLYGck/ImXPbchpYMh6r6IukSeq8GZ41EmtA//WrQ=)
                          3: jTwTte7N4XE5ZIVAc-b0iOpIKNs.roa (hash: 3eO78fZqlwLEonYZ+lyZ2R0qxdEYpO56nVsVmEr3qzc=)
                          4: mQCshe8AYhY30ha3keRQ9ES4onM.roa (hash: 8KZDCctMgLcMm/fuIa3vC+WT92YZO6Z2C8ft5sDZMP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b9:8a:ca:fe:3d:44:90:be:52:ac:58:59:fa:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
        Validity
            Not Before: Nov 26 19:01:36 2024 GMT
            Not After : Nov 27 19:01:36 2024 GMT
        Subject: CN=98f507278db42575779aeed10edbaa3e485021ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:c2:a2:a9:51:52:3e:bc:11:c8:b2:c6:16:
                    80:a9:aa:27:ed:6d:cf:b3:fd:cf:99:f0:b1:4e:12:
                    25:08:3f:96:f8:de:a8:26:53:7f:70:10:fc:bf:3a:
                    0b:a7:6a:0b:fc:f5:49:1a:d5:f9:a0:73:4f:54:06:
                    a2:67:56:96:de:b1:aa:89:fe:ce:30:fd:37:54:76:
                    a0:c4:37:a2:08:c2:dc:4f:5d:cd:f5:e7:36:2c:23:
                    52:b4:49:bf:e8:da:00:07:ca:ac:4d:b6:48:b5:90:
                    97:6c:a6:4d:84:81:05:b4:3b:e7:f9:8a:f0:2e:c1:
                    db:47:34:79:45:40:17:58:ba:15:25:a5:c2:78:9f:
                    ff:79:2f:4b:7c:b5:e2:ec:ac:f0:ca:79:4f:60:a3:
                    38:59:e9:ca:84:62:6c:6d:4d:13:fb:62:2e:79:0b:
                    ec:a8:16:aa:3c:b0:32:77:f4:cf:89:0b:82:47:60:
                    eb:fb:39:b2:48:cd:a4:a0:d4:19:2f:88:1e:05:27:
                    93:09:68:95:a6:bf:38:80:5f:f5:7e:03:83:2a:ed:
                    08:be:ec:3a:cf:f2:6c:ee:27:90:31:e6:bd:8b:f3:
                    75:05:28:c1:09:e4:b6:81:9a:51:0b:3f:6c:f5:87:
                    fc:72:1d:37:dd:c2:76:c0:86:08:94:cf:48:00:fb:
                    3a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F5:07:27:8D:B4:25:75:77:9A:EE:D1:0E:DB:AA:3E:48:50:21:EC
            X509v3 Authority Key Identifier:
                keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:3c:3a:45:a6:46:ea:e6:58:20:17:4f:72:a9:50:4f:7c:
         eb:1c:c2:db:6b:5e:ea:da:1d:5e:9c:1a:61:3a:75:84:86:bb:
         4e:16:b6:85:74:10:39:d2:f4:78:4a:35:d5:bc:6f:b5:3c:ac:
         01:77:c7:b6:ae:5d:b7:4c:32:ae:88:d4:87:c1:67:cc:03:42:
         23:4f:87:74:4f:0b:c0:ea:b4:21:b5:84:bc:06:6e:9b:86:b4:
         52:1d:b7:77:85:5e:ae:44:0a:6c:30:28:16:a6:82:50:3a:24:
         44:c4:c5:6d:5c:4f:34:98:05:79:50:9a:33:b4:f5:ab:90:17:
         e1:ee:28:02:10:4f:fa:95:ad:8b:98:49:de:66:52:e1:db:eb:
         4c:07:8d:9c:eb:de:2b:0c:5a:5c:ad:b5:65:2d:7b:22:12:3d:
         d2:3c:5b:07:93:36:d4:43:94:5e:09:c6:f0:97:1f:61:61:11:
         ac:c9:1d:11:73:5b:6e:7f:86:57:35:dc:c2:8b:48:52:8f:ae:
         33:f8:f4:ca:d8:0d:58:95:bf:aa:41:6d:76:48:89:f9:36:0e:
         13:60:01:3c:00:8b:d4:02:d3:d6:d1:1c:af:14:c9:ab:c7:0e:
         c4:c4:a2:3e:23:78:32:52:14:cd:99:d8:a4:e3:2d:0b:f8:00:
         24:0d:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:26 2024 by rpki-client on console-fra.rpki-client.org