Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File:                     y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier:          RcqbaOnLdhPfRV8phKNKTbR4y5iqoGywLgDhnUcs+z0=
Subject key identifier:   25:2F:1F:4B:EB:B4:E9:0C:5E:0F:8A:C7:3B:CC:90:BE:CE:1C:8D:AD
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer:       /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial:       0193640F747E19E449DAF8CF4408B6F91230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number:          137A
Signing time:             Mon 25 Nov 2024 16:02:34 +0000
Manifest this update:     Mon 25 Nov 2024 16:02:34 +0000
Manifest next update:     Tue 26 Nov 2024 16:02:34 +0000
Files and hashes:         1: S7GnJg00RRzCDWmb9lqUBvYiAkE.roa (hash: kIwTInHX1LBMA4NpgL3pzI3tKUpDLcr/V4UkDat7fmw=)
                          2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: qTVaB7X+yuQYvt2UdVOlBAgWm1kJKdLfADUDzH9XmR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0f:74:7e:19:e4:49:da:f8:cf:44:08:b6:f9:12:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
        Validity
            Not Before: Nov 25 16:02:34 2024 GMT
            Not After : Nov 26 16:02:34 2024 GMT
        Subject: CN=252f1f4bebb4e90c5e0f8ac73bcc90bece1c8dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:96:0a:aa:f7:46:41:62:26:6d:6f:16:32:
                    3e:96:37:5d:e8:ac:e3:54:68:40:ae:8c:d4:f8:15:
                    cc:d4:3e:76:43:8c:ba:e6:64:66:d6:fb:4e:ee:ec:
                    b7:57:19:59:d4:43:e1:2b:c2:b6:7e:cc:3e:98:61:
                    40:1b:50:e2:d4:ec:a6:9d:40:17:ed:f9:1f:6e:c2:
                    a0:dd:bd:e5:f5:cb:f1:61:d9:b9:c2:30:6e:7a:ca:
                    5c:5a:f6:73:f5:61:12:06:57:66:9e:0c:9c:c2:8b:
                    18:3b:fc:5c:16:41:9b:20:f3:a3:da:31:a8:ce:60:
                    8a:aa:9a:cf:6c:d4:0c:4f:03:f2:9a:c1:dc:45:c2:
                    db:bf:5d:cc:0b:f6:ae:a9:bf:22:8a:64:4f:6a:cc:
                    90:30:43:f3:10:e2:0b:0a:78:18:73:05:75:7c:6f:
                    c8:ff:aa:22:fe:a4:40:bd:41:5a:fc:1b:2c:d3:78:
                    56:28:13:69:d7:dd:a0:83:f4:de:c1:ce:12:53:58:
                    a1:2c:42:22:29:e6:fc:53:cd:22:13:a9:30:69:42:
                    63:df:af:ac:e4:1c:5f:7e:46:b5:a4:6b:80:b0:7c:
                    d3:c6:dc:57:47:6b:33:e9:9e:dd:cb:64:8b:3d:c5:
                    8f:35:3e:43:6a:62:1f:d2:ee:2f:73:79:d5:66:6c:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:1F:4B:EB:B4:E9:0C:5E:0F:8A:C7:3B:CC:90:BE:CE:1C:8D:AD
            X509v3 Authority Key Identifier:
                keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ff:6b:1f:6e:ab:39:61:6e:c7:f2:52:ea:98:72:40:76:07:
         63:7c:eb:00:9f:19:e3:35:b4:98:1f:b4:75:09:4c:a0:54:d1:
         96:34:e2:71:88:10:a8:32:00:0d:b2:8c:28:f5:6d:dd:61:54:
         b0:6f:37:d6:45:50:fe:17:43:3e:35:17:81:bc:4d:50:93:d7:
         02:09:1e:00:7a:92:bd:72:52:bf:40:6b:8e:15:82:be:30:b3:
         8a:d0:58:20:1a:c4:9d:6d:6e:88:89:53:07:40:fc:6c:c8:48:
         d6:18:8b:ec:6d:4a:41:08:22:2f:79:7b:7f:4b:ec:a2:97:80:
         a0:1e:31:32:70:99:b6:14:e8:66:d0:25:2f:05:46:eb:bd:06:
         d4:dd:78:6d:f1:25:fe:c9:2f:dc:b4:c7:40:cc:6a:3a:50:26:
         22:1f:53:f2:2f:2d:8b:4a:68:96:b5:05:f2:27:81:02:88:e4:
         ea:34:f0:65:fd:f7:70:26:4a:d4:96:01:e9:b7:f3:90:65:d3:
         c6:32:a4:b6:83:b0:49:0a:30:39:67:30:e9:13:77:0a:a4:e9:
         1c:0c:77:67:4f:a8:dc:71:cb:1b:40:5a:90:55:9b:95:ad:e3:
         11:4b:77:ee:68:e9:fb:c5:21:a3:d4:a4:64:d1:81:7d:7d:2e:
         4e:a4:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:15:59 2024 by rpki-client on console-fra.rpki-client.org