Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File:                     Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier:          qDZ4BUTCofLxYGxq7tw5hC9S3AR2qEKgFRFQu81nGEQ=
Subject key identifier:   DA:35:B0:E2:13:BD:37:70:EE:89:42:1A:0A:90:8B:B9:FE:0A:51:AB
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer:       /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial:       0193568A2E1480494B315096AEE571F2A67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number:          0CC1
Signing time:             Sat 23 Nov 2024 01:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:56 +0000
Files and hashes:         1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: 7ZgbLnQXT6w5FsbkGnJKsL4dR+YyyDLq/IL7p3ZRQG8=)
                          2: b6mn04b09KJpmof9x0SmA_aUFw8.roa (hash: 0F1qficsX2KJUPk+jxNtnzZQhpNgfHjNa6zD06ZQT0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2e:14:80:49:4b:31:50:96:ae:e5:71:f2:a6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
        Validity
            Not Before: Nov 23 01:01:56 2024 GMT
            Not After : Nov 24 01:01:56 2024 GMT
        Subject: CN=da35b0e213bd3770ee89421a0a908bb9fe0a51ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:77:8c:cc:cb:3e:00:20:22:d9:50:93:29:
                    42:38:11:ae:eb:07:58:2b:4f:30:f8:f5:8e:fd:02:
                    20:12:1a:64:3b:2c:e6:e1:17:8c:d7:99:3c:82:db:
                    f1:e3:a7:da:17:d3:04:82:0a:47:84:35:30:4e:b0:
                    32:a5:cc:db:4e:51:bc:b5:31:c5:60:08:9c:dc:9e:
                    1b:92:d8:e9:9f:03:17:15:f5:92:7e:f9:96:02:d6:
                    a9:46:b4:20:f4:32:34:ca:db:73:05:15:ba:c8:ee:
                    2a:41:0e:c2:0e:ea:2f:0a:1c:e2:01:02:70:62:b8:
                    64:89:43:dc:3e:c7:87:93:45:c1:30:d0:e3:68:be:
                    6c:7c:cd:4a:78:0e:27:37:a1:64:4a:52:a1:92:f3:
                    6d:ca:86:0b:ec:84:19:95:cf:d5:30:0c:d5:48:31:
                    38:00:3b:7b:98:c3:19:01:65:b6:e7:fc:f0:70:f7:
                    03:d4:00:de:16:e5:09:a7:55:7f:9d:2c:b4:2c:55:
                    9c:f1:83:35:1f:e3:8c:fa:37:ba:1f:01:d8:eb:7e:
                    26:14:43:c4:68:69:6b:71:6a:1b:96:38:db:51:fe:
                    1a:2f:bc:4c:3f:4a:4b:f7:47:c8:b9:d4:4b:8b:a3:
                    c2:d4:a8:ac:b4:dd:c0:a2:34:2b:22:2f:18:b1:7c:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:B0:E2:13:BD:37:70:EE:89:42:1A:0A:90:8B:B9:FE:0A:51:AB
            X509v3 Authority Key Identifier:
                keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:5e:98:5f:21:87:a7:26:be:8a:30:ad:36:b4:e7:32:63:
         e7:2a:b1:cc:ca:72:86:b2:49:aa:08:bb:05:30:c3:98:1e:d0:
         97:3f:6c:6f:d4:37:f1:1d:1c:2e:04:eb:d7:a0:04:d3:9f:df:
         55:58:64:c9:50:b6:76:a5:a6:da:44:6f:17:60:45:8f:f0:f1:
         33:3d:48:f4:8f:04:18:d2:70:d3:af:22:f1:87:96:41:8a:35:
         a5:52:eb:ed:f3:dc:79:71:c7:25:0f:b6:a8:db:c1:c2:08:08:
         e4:76:e2:43:25:9c:e4:19:3e:e0:55:6b:51:c1:dc:f1:67:b3:
         29:a5:6b:f2:0f:28:96:b2:e6:a6:eb:4a:16:eb:40:00:a1:5a:
         06:fc:10:5a:9a:96:0b:64:02:3d:de:00:47:98:a3:08:d0:a9:
         04:11:66:d3:da:98:23:a9:be:79:30:e7:8f:0b:bf:f1:1c:8b:
         e7:1e:17:f5:82:0a:1c:86:44:ca:d2:50:a3:b5:b7:12:93:f5:
         b9:45:68:ac:9d:64:ec:84:9b:a7:20:31:ca:90:06:1e:8f:79:
         74:1a:a2:1c:cd:2f:d9:0e:19:a2:f4:f2:7b:d4:1e:06:77:7d:
         7a:59:21:46:91:a4:3c:b0:da:9d:6f:57:08:31:c1:a0:02:e1:
         f8:56:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:03 2024 by rpki-client on console-fra.rpki-client.org