Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File:                     CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier:          mxyf2TWQdKWSQQetZt58NLh1nsbDHAvMbpAJcK3o9LU=
Subject key identifier:   B9:C1:A7:BC:E0:C4:4B:05:E6:BE:6E:19:12:7F:0F:B0:CA:68:B8:C9
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer:       /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial:       019405A159B677F3E0877A9938ACEC12D013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number:          0EE6
Signing time:             Fri 27 Dec 2024 01:00:47 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:47 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:47 +0000
Files and hashes:         1: 9U2MOV-5Swhh-VYOcj0DIzPKSmg.roa (hash: CWyBmZ9HlfW4AmKUF3ZPQ/I5papiTRt/mcQxLmS0oHU=)
                          2: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: 9EX35k3OesRKXLKi227zf11HHnstbWpIpHSCXTb1RXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:59:b6:77:f3:e0:87:7a:99:38:ac:ec:12:d0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
        Validity
            Not Before: Dec 27 01:00:47 2024 GMT
            Not After : Dec 28 01:00:47 2024 GMT
        Subject: CN=b9c1a7bce0c44b05e6be6e19127f0fb0ca68b8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:7e:43:9f:04:6d:61:7c:c1:55:62:e5:dd:
                    79:7b:09:7c:51:94:03:8c:02:44:cd:c9:63:54:b3:
                    f6:67:6b:0d:b8:fc:d1:61:55:16:db:13:c1:85:de:
                    f7:95:57:3d:c0:65:ab:ce:9f:3c:0d:de:6c:d1:08:
                    c8:f3:eb:95:83:60:f7:78:a1:25:54:fa:b6:71:ab:
                    01:13:e6:0c:a8:de:42:36:f6:55:7b:f8:fc:1b:e4:
                    e3:93:d0:48:7a:91:10:88:a2:d0:5e:23:50:b6:1c:
                    ba:80:10:d0:52:b0:de:ba:a2:7b:5b:78:64:c0:6f:
                    24:2d:74:6a:b4:d8:ad:22:26:d1:0f:73:27:77:78:
                    51:95:69:52:0a:56:b2:65:96:a6:dc:98:db:ba:eb:
                    b5:4b:c6:93:6a:25:a1:f6:da:08:d5:00:c0:81:73:
                    16:8c:32:d8:ce:20:56:8d:f0:b5:90:fe:99:67:d3:
                    e7:8b:53:4f:a6:91:53:75:a7:30:cd:32:ed:73:e9:
                    89:0a:28:e4:22:34:fe:04:86:91:3a:29:da:4c:91:
                    82:bd:b0:e8:05:25:d3:ac:b4:23:24:68:98:9f:ef:
                    55:d3:55:ee:ca:53:7b:94:df:db:f0:71:c9:de:27:
                    70:eb:ca:e5:d2:88:6b:ff:e0:e3:aa:18:a4:67:89:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:A7:BC:E0:C4:4B:05:E6:BE:6E:19:12:7F:0F:B0:CA:68:B8:C9
            X509v3 Authority Key Identifier:
                keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c1:e3:e5:dd:97:58:37:80:17:e8:1b:68:28:24:dc:b8:68:
         a3:0e:a5:cd:ca:ed:9f:cc:61:2a:c5:6d:74:39:a6:a5:81:8d:
         74:5f:e7:be:f3:40:dc:ce:96:91:20:a3:e1:a7:9c:e5:e5:9c:
         f3:7c:d5:11:19:fa:0b:9e:59:42:a4:af:05:73:48:98:8d:be:
         5f:93:1a:21:8b:1c:75:ae:3e:82:3e:99:08:b7:bc:b4:34:24:
         f8:db:6b:8f:0c:ef:8a:72:4b:74:14:d0:3e:ce:b1:07:7e:df:
         be:e2:49:5b:88:c7:82:a4:dc:7f:7f:06:af:a3:6d:49:38:a7:
         5d:d1:74:98:ac:54:16:35:d0:3a:1d:10:a0:b9:b4:6f:20:59:
         e3:0f:c1:9d:bc:70:cd:00:6c:cf:76:49:33:e5:0d:f1:ae:f1:
         01:d6:37:36:3f:92:4a:30:c7:c9:7d:e3:de:55:a4:53:66:3d:
         bd:d1:b3:02:85:b6:0e:99:33:ad:40:c1:4b:34:27:0b:7d:d2:
         a3:fe:43:61:ce:29:3a:3c:73:ab:81:54:33:d2:30:c9:97:34:
         ec:ee:85:ac:a2:15:85:19:fe:7f:c3:ae:a4:b8:ff:1d:a0:e0:
         04:cd:af:15:9e:fb:7b:e6:cf:39:c8:74:26:f2:db:af:19:63:
         c3:95:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:45:54 2024 by rpki-client on console-ams.rpki-client.org