Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File:                     YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier:          3hWyN/kbIDUz2almv+lgo1bnOGlx0dAgBTeXGDJAAb4=
Subject key identifier:   82:DE:3E:85:2F:5D:72:25:0A:97:A3:41:4F:95:50:11:0D:55:FF:63
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer:       /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial:       019352AC7E99050736BF16AF821D6D29DE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number:          12FE
Signing time:             Fri 22 Nov 2024 07:00:56 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:56 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:56 +0000
Files and hashes:         1: CByyN14Srd5Lp_DVW-eex3fB42g.roa (hash: w9AdVyyhzLx5l7NG2+WtPK1Weso1zpuvcflxMJpTl4w=)
                          2: Tu7t5UxfQZJb9IBinG_zvMo6NNI.roa (hash: tO2TP/Y6ttoMKa/hNM34Y2g4+LNlU3Prwjmy2KGs0pk=)
                          3: VRQ4PinBEDNLT-pfsEGxa28NSpw.roa (hash: UqvkLcy1aPLkeDt+lPoVDiuE9PXhcKRNAC1RRtan+4s=)
                          4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: BtkPiBV3aGoB+GXY38UvLoKcHfFNnkeeInZn1m96guc=)
                          5: viNX-WOKe3YtaIQroOMTXXaf5uc.roa (hash: ZSP/GncSw5fAKPNficO8G3O7T/THzJmiSiiivLmMtQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:7e:99:05:07:36:bf:16:af:82:1d:6d:29:de:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
        Validity
            Not Before: Nov 22 07:00:56 2024 GMT
            Not After : Nov 23 07:00:56 2024 GMT
        Subject: CN=82de3e852f5d72250a97a3414f9550110d55ff63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:45:83:67:ed:7d:24:31:c2:70:cf:80:63:
                    35:65:d4:03:90:81:45:5e:83:9b:32:ce:9d:47:3e:
                    38:4b:be:65:73:96:0c:23:ec:48:cd:83:59:c3:8c:
                    9b:9d:e4:3b:88:ce:e1:00:20:db:03:3c:13:02:86:
                    9c:ff:e7:3b:ab:2f:bd:af:9f:53:a9:e3:c9:be:df:
                    31:00:e5:eb:40:85:a8:d2:e7:5f:dc:4f:2f:16:70:
                    7e:49:d9:52:88:1c:0e:fd:69:e0:4d:35:ae:de:a0:
                    25:8d:67:de:77:7b:f2:97:c3:19:e3:82:93:a1:6e:
                    88:5f:0c:71:fa:37:0b:d4:2f:ca:ff:51:db:75:33:
                    9d:d5:da:ac:5d:38:2f:73:09:f1:bd:82:55:7b:ef:
                    81:e2:e9:35:86:58:b0:4e:92:7a:a2:8a:a1:5a:f4:
                    61:15:95:22:21:5f:08:94:a9:c5:d0:df:1a:f5:0f:
                    c3:78:7a:14:75:a6:9b:03:da:ac:6a:54:aa:01:be:
                    3b:c5:e1:2a:25:ad:52:82:0d:a9:c7:d8:3a:9d:bc:
                    6e:46:84:21:d7:a1:b9:ff:ed:79:ae:9b:c3:c5:06:
                    6c:70:0b:ab:72:cf:3a:86:91:8d:d3:8c:a6:7f:12:
                    17:a4:0a:cf:7c:4c:39:9b:45:9c:6a:68:7e:27:b1:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DE:3E:85:2F:5D:72:25:0A:97:A3:41:4F:95:50:11:0D:55:FF:63
            X509v3 Authority Key Identifier:
                keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:37:01:7d:e3:9e:68:a5:07:45:99:30:ec:32:ba:2e:e2:a2:
         9d:8b:26:fd:65:9e:93:52:cf:91:65:38:39:9b:da:b3:5b:e8:
         75:6f:97:a9:3a:1a:8b:ca:b3:22:0e:45:74:3c:d1:f7:24:f4:
         a5:88:6a:6d:83:b0:fe:73:91:18:0e:11:95:15:8b:58:cd:e3:
         b6:43:fb:05:56:f1:d0:b1:45:a1:19:1b:06:c3:8f:67:90:f3:
         27:b4:a0:42:12:e1:01:52:eb:f6:e4:c8:63:1a:09:49:c3:49:
         4d:44:ec:12:8b:d8:8f:21:c0:bd:3e:4e:17:6b:80:d1:9c:cb:
         55:6d:6f:a8:7f:79:86:48:b0:75:5b:db:13:74:5f:b2:c2:97:
         b1:f0:4e:e6:96:2f:ec:f2:ac:3f:36:4c:a5:87:da:ef:73:2e:
         ff:7c:53:c6:67:01:a9:8a:c2:ac:92:d2:52:a8:8f:ce:71:33:
         7b:6c:6a:86:f6:98:a5:02:32:bd:03:68:26:76:6f:95:92:36:
         cb:e6:c9:9b:ce:c0:77:b6:05:98:ef:03:d2:9a:42:43:a7:e1:
         84:7b:78:f5:7f:59:02:d6:59:cc:b4:f3:cf:6c:7b:14:b9:8d:
         b5:41:d3:f7:41:1a:b2:32:42:56:95:3a:62:3a:d8:69:df:94:
         94:f8:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:09:36 2024 by rpki-client on console-ams.rpki-client.org