Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File:                     _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier:          MrnTrWzb4O8H0MvZghgxobkyv7CT99foE8nDtmXKMXc=
Subject key identifier:   6B:88:AE:6B:C1:AC:06:FA:D6:7E:AF:E6:D3:F0:30:97:BF:D7:9F:3B
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer:       /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial:       019352AC9A7757787847F89BC63D4EAD615C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number:          09FE
Signing time:             Fri 22 Nov 2024 07:01:03 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:03 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:03 +0000
Files and hashes:         1: MYg2sMPuLyrCXtDZKgde1DUbiGk.roa (hash: a5HvjcRYo0wOyvFAnQ4dXcj9fyvSnsr+BVrgX+rgbbY=)
                          2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: w3aSK11OYXd0AYSVa8cSO+G+x44s3jSK+T9eGeF7eK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:9a:77:57:78:78:47:f8:9b:c6:3d:4e:ad:61:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
        Validity
            Not Before: Nov 22 07:01:03 2024 GMT
            Not After : Nov 23 07:01:03 2024 GMT
        Subject: CN=6b88ae6bc1ac06fad67eafe6d3f03097bfd79f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:f7:96:f0:6a:c6:78:de:db:38:29:43:de:
                    96:2b:6b:16:e7:10:45:ee:dc:1f:18:79:b0:e6:1d:
                    5c:62:75:ba:b6:01:49:af:88:bb:f7:f4:1f:88:94:
                    3d:ff:3c:91:29:c2:a2:b0:2f:1e:1e:f4:59:65:3a:
                    ac:c9:e2:ac:cf:d5:a4:18:72:33:97:b8:d0:9a:99:
                    8e:ac:3f:00:a1:10:be:e5:3b:7e:67:d4:4c:2c:e9:
                    e4:3f:3b:d5:14:e7:6d:1b:9c:0a:dd:78:c4:2b:27:
                    e6:76:c1:5a:cf:69:64:c0:0e:c8:57:ab:db:19:83:
                    55:40:33:8a:cb:ed:20:8f:f4:7d:d4:32:eb:42:cf:
                    1b:e0:9e:2f:67:9a:bb:c5:5a:16:d4:35:3f:b1:ad:
                    35:ec:cc:74:5a:c1:1e:0f:0a:aa:94:18:70:7c:68:
                    27:7d:f1:53:ef:a8:0b:f7:3e:e0:19:55:14:23:fa:
                    fd:a3:ae:bf:7a:6e:69:59:9c:1a:4e:c1:11:0f:d2:
                    dd:84:5c:fc:9c:74:a7:e5:70:25:d4:fa:cf:a0:0a:
                    70:1c:40:77:fe:d2:88:11:85:af:a6:5d:b6:c5:37:
                    0c:a4:00:a8:b3:b2:19:c4:dd:08:01:3d:4b:ec:c9:
                    b2:f7:5d:d9:78:b4:9e:fb:d1:64:12:fd:19:88:26:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:88:AE:6B:C1:AC:06:FA:D6:7E:AF:E6:D3:F0:30:97:BF:D7:9F:3B
            X509v3 Authority Key Identifier:
                keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ae:7f:28:a5:ce:c3:69:ce:a4:3e:79:0e:b8:e5:ec:5f:d7:
         01:f5:ef:35:19:2c:6c:ed:84:12:cc:7c:52:1b:c6:25:e4:10:
         26:c4:7d:b2:26:2f:14:7d:31:6a:2c:a7:6b:80:f9:f2:21:19:
         14:44:e9:02:da:db:69:e2:be:e5:47:ec:b8:27:1f:a1:48:9f:
         fc:dd:97:a7:ed:66:0f:d6:6c:4f:ee:0c:ab:68:22:de:00:ba:
         7b:1d:c9:45:26:ce:ed:09:ff:1f:9a:6e:6f:4c:e4:b8:e6:aa:
         d2:5c:08:6a:91:53:6a:7e:30:e8:03:14:a8:e9:fb:f2:a9:19:
         9c:a0:4f:32:d7:97:39:78:3e:d7:92:b6:e1:32:8d:e9:7b:0c:
         18:4b:a9:43:82:db:86:62:f2:0e:44:db:af:11:86:68:82:f6:
         41:d7:7d:de:02:a0:ae:12:65:9e:ea:a4:a6:3a:13:8e:23:04:
         a6:32:77:80:93:ea:f5:b3:f6:29:06:d5:88:c8:02:28:98:db:
         31:83:0e:dc:ad:65:6f:68:6f:ed:c5:9e:77:dd:d8:c8:db:29:
         3a:20:0c:3f:1b:2e:af:c6:23:d9:be:be:b6:8e:83:49:a6:10:
         8a:8e:ed:e3:61:e8:1f:63:32:48:f5:ce:33:be:04:a1:3f:06:
         2b:31:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:52 2024 by rpki-client on console-fra.rpki-client.org