Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
File:                     yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft (raw, json)
Hash identifier:          KfNdtP1mg/85QQpPakk7dUe8Zp3CDaaB9J1XUz0SSpU=
Subject key identifier:   46:D1:C4:3C:F7:A9:55:B9:F2:E8:BD:94:0F:CF:D6:BF:80:E3:F3:0A
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Certificate issuer:       /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial:       0193775E3A0147BE067983F839FF647E353A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
Manifest number:          1384
Signing time:             Fri 29 Nov 2024 10:01:24 +0000
Manifest this update:     Fri 29 Nov 2024 10:01:24 +0000
Manifest next update:     Sat 30 Nov 2024 10:01:24 +0000
Files and hashes:         1: 0jHVSfl8FFgP4CFZE74StlW-6p4.roa (hash: yOZqsLseUCgjrcN4lWtpBWQtNN490/e89Z5eWCRzlOw=)
                          2: iiEwz3S7JzKIGSMmsYCytTIkLT4.roa (hash: T9JqmAd6FjXryweIk/i1JZZvuwr0hFRaWI7+VrsXnf8=)
                          3: oKMoKg3CzRKeUYY9CD_Zq5BpPqw.roa (hash: iI5Yn4DK0z+jkf5vETgK3cwlDLbf+GK3Vtl6pEfA0yI=)
                          4: yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl (hash: 7DqRc0m/ZFAKXXm1pSnLObo6GCxt3Kv37AdP65zJpEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Nov 2024 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:77:5e:3a:01:47:be:06:79:83:f8:39:ff:64:7e:35:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
        Validity
            Not Before: Nov 29 10:01:24 2024 GMT
            Not After : Nov 30 10:01:24 2024 GMT
        Subject: CN=46d1c43cf7a955b9f2e8bd940fcfd6bf80e3f30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:c1:93:db:4b:13:79:a8:b5:e7:c4:40:9f:
                    ce:be:cc:b6:d1:4c:c7:b3:f6:26:bd:ab:0a:29:b3:
                    ab:99:23:57:bd:9f:18:cb:7c:68:45:43:df:f5:5e:
                    44:15:43:8c:d3:40:94:a7:4b:8b:a6:c3:4c:82:a0:
                    6d:1e:97:69:be:5e:bf:ea:02:31:d8:ce:f5:0f:e3:
                    2c:46:3d:9b:b1:6a:5b:4a:7f:37:27:ee:20:9f:ab:
                    26:99:f6:6a:2b:c0:04:78:51:5a:42:5e:32:30:88:
                    65:4f:fc:ca:b8:c1:00:de:7e:38:b4:98:8d:f6:0f:
                    e5:fb:44:0e:f8:5e:d4:2f:a6:9c:2b:97:af:80:8c:
                    e0:7e:4f:f7:b3:36:b0:a2:9a:ad:7a:6e:4d:17:80:
                    e6:e5:98:b9:2c:4f:9f:78:c6:03:4d:75:11:17:46:
                    b3:5c:76:72:34:09:9d:ff:fd:2b:b4:bb:e2:99:f9:
                    49:1a:bb:fa:e5:8a:8d:de:c2:3f:c7:7f:6e:b3:50:
                    5b:0d:ca:ce:9d:42:15:32:fc:80:a9:73:b9:aa:29:
                    39:ac:12:3e:31:9d:14:c7:01:89:4d:d7:52:ce:a9:
                    8a:1f:3e:83:dc:d3:b4:4a:2a:c8:1e:5b:4a:1b:f5:
                    36:4d:d4:07:78:ac:69:46:6f:a6:3f:57:6c:d7:7a:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D1:C4:3C:F7:A9:55:B9:F2:E8:BD:94:0F:CF:D6:BF:80:E3:F3:0A
            X509v3 Authority Key Identifier:
                keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:74:3a:6a:9a:bd:f3:30:db:4a:2a:71:6d:21:e8:04:29:
         0e:d4:b0:e5:07:0b:b7:b3:b6:48:3b:be:d1:16:c6:cd:bb:f8:
         54:d1:bc:07:94:c2:08:41:35:e1:51:95:8c:4f:b3:24:e4:a2:
         cc:ee:12:21:15:ff:cd:ff:d0:d5:4a:06:f8:35:0a:27:fe:c4:
         9f:4b:5d:a4:d7:54:5c:4d:55:7d:45:b1:63:dc:86:aa:13:5a:
         33:ed:5e:3f:bb:f8:1d:7f:a9:4c:eb:53:7f:6e:e9:fe:15:24:
         d5:43:51:23:ad:19:10:3d:29:ed:58:42:e2:d2:40:13:02:a9:
         b6:db:ab:3e:57:c7:c7:f5:b5:5e:06:3b:86:0a:27:df:5d:db:
         5f:c6:2f:86:ce:74:41:a1:bf:a8:7e:07:3a:6a:40:f1:1a:16:
         08:63:26:bf:c2:e6:12:f5:62:84:5e:60:53:b2:7f:38:6b:98:
         bf:14:0e:95:29:75:f0:70:75:d7:b2:04:b3:47:ca:cf:fa:2c:
         ac:39:99:2d:32:a1:5a:e8:ec:d6:88:db:11:ce:6c:98:8c:1e:
         90:1e:36:49:c7:4e:c4:7f:36:dc:ef:4f:11:68:f6:f5:ee:69:
         c9:5c:a0:b8:36:a1:f1:57:a8:b1:68:7b:10:38:91:0a:c8:72:
         49:40:27:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 16:32:34 2024 by rpki-client on console-ams.rpki-client.org