Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File:                     0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier:          uNWizhVnxuBheJQkw8sDWGhI6IhhnbICBSdXP+8ebGw=
Subject key identifier:   72:23:20:11:4F:DB:9F:3D:21:29:4E:00:79:3B:68:C0:37:68:5A:F5
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer:       /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial:       019351997DC3288A74EA544D71C9EB84BC41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number:          0FB5
Signing time:             Fri 22 Nov 2024 02:00:33 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:33 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:33 +0000
Files and hashes:         1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: e/yFmceoVUag8vchCxW1tgtVfuC1j3RjuqZ1TZ7PbmI=)
                          2: KSbfT1ONWW_HMUDTAX-obz0PFXI.roa (hash: VzleBWGAw+yd4HzAbG7MAE5SuTRuSnGo7F8GgskNvPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:7d:c3:28:8a:74:ea:54:4d:71:c9:eb:84:bc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
        Validity
            Not Before: Nov 22 02:00:33 2024 GMT
            Not After : Nov 23 02:00:33 2024 GMT
        Subject: CN=722320114fdb9f3d21294e00793b68c037685af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:46:4a:81:bb:35:21:9f:45:9f:f1:d5:de:
                    c8:5e:d7:ad:6b:9d:e2:bd:83:30:88:95:90:35:d1:
                    7b:b2:1d:fb:de:af:34:e7:6b:a0:11:ba:9e:cf:21:
                    83:18:16:4b:0f:b1:05:73:2a:a5:34:df:67:53:30:
                    89:03:40:98:f2:bc:bc:f2:d6:ea:48:a1:de:5e:35:
                    86:ff:64:98:a1:36:38:f5:eb:ec:ca:a6:e4:93:35:
                    fb:1a:20:cd:c1:9c:7e:41:e0:dc:0e:08:e6:be:45:
                    29:f4:d5:5c:f4:09:34:e9:de:7e:21:56:ad:6b:3e:
                    68:3c:5c:36:dd:d8:cf:94:fe:80:d9:1d:04:7c:c7:
                    f1:dd:eb:f0:d4:17:57:d2:4a:39:46:eb:a9:15:92:
                    85:f2:33:5d:43:ed:ce:33:f2:d2:44:bb:68:ad:6f:
                    81:29:af:bc:32:09:47:df:43:ef:77:5d:bd:44:27:
                    65:ce:27:f8:97:fb:11:bb:14:60:54:4b:da:55:f2:
                    12:17:3f:75:bb:55:47:84:06:23:82:80:a0:a8:14:
                    c1:81:97:00:88:d6:3d:5e:a0:12:8d:c0:34:a5:27:
                    a9:56:be:42:cd:f5:7b:f5:f4:20:ec:b9:de:ed:ac:
                    6c:53:d7:72:38:1f:8a:18:9b:6b:3e:d5:ee:ef:66:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:23:20:11:4F:DB:9F:3D:21:29:4E:00:79:3B:68:C0:37:68:5A:F5
            X509v3 Authority Key Identifier:
                keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:a8:07:a7:d2:e5:57:fe:05:07:2c:ea:3f:5c:dc:f9:10:
         06:2f:72:04:ce:e2:c8:8d:58:7c:3e:d0:d7:6a:77:92:8c:e6:
         0c:d7:83:bb:02:c1:86:56:9e:06:4c:eb:09:8c:d6:b0:00:50:
         f1:ea:bd:0f:30:a0:17:57:6a:e0:eb:a9:7d:99:78:84:a1:be:
         18:c8:72:f8:bf:52:7f:1b:df:c3:af:1f:16:25:11:67:23:41:
         f5:79:a4:86:8a:df:9e:85:26:81:48:0b:4c:c9:7e:78:c0:98:
         bd:1d:22:c5:ce:b6:f2:fb:a3:bf:d8:6c:10:9d:80:63:a2:21:
         8a:85:c4:5c:0c:5b:07:1f:c8:dd:4e:82:24:82:ee:67:a4:7d:
         22:5b:39:ec:8f:2e:2b:81:e6:9c:55:9b:09:86:8e:6f:e8:21:
         fd:55:a8:f6:4f:86:74:af:30:74:55:6f:2c:16:15:53:f5:9f:
         42:4e:fe:cc:ff:ac:c3:ff:94:10:92:73:7e:81:c3:86:f6:32:
         40:f0:71:9a:46:ac:fa:2b:6c:19:a1:45:df:8a:10:d2:2d:c6:
         a8:e8:06:dd:c1:f6:70:b1:cb:28:73:4b:fa:14:3b:57:4b:6a:
         91:6e:08:b6:38:85:40:80:b3:df:d3:a2:6b:0b:88:3f:08:0a:
         c0:fc:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:52:17 2024 by rpki-client on console-fra.rpki-client.org