Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File:                     _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier:          dEox2Sw9WnCD1hyC+XrI1uN/a+YFQZwl05Tf4/7tK64=
Subject key identifier:   18:DD:75:A0:A9:4C:B4:67:6C:CD:B9:5B:7C:4A:C0:ED:7E:93:3D:CB
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer:       /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial:       0193579BC47E3199081B7D6ACB95A788C080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number:          022C
Signing time:             Sat 23 Nov 2024 06:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:46 +0000
Files and hashes:         1: Qa3EgRF0m_us83QixIsOvgHKfqA.roa (hash: RiawXyg/f4Y5uV5qKPSu7rcetpZjlM8SZzjKigcoecM=)
                          2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: rLGUL8t4PY8+Nkj5EPQkd+HrxJBwbIiBae3r1g216qk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:c4:7e:31:99:08:1b:7d:6a:cb:95:a7:88:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
        Validity
            Not Before: Nov 23 06:00:46 2024 GMT
            Not After : Nov 24 06:00:46 2024 GMT
        Subject: CN=18dd75a0a94cb4676ccdb95b7c4ac0ed7e933dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:26:da:6f:4f:79:d0:1a:e1:99:df:f7:93:
                    f0:9f:7b:bd:43:07:a8:2c:37:09:3b:c1:28:bc:24:
                    0f:80:7e:af:12:11:cc:fb:42:89:8b:53:3b:0f:67:
                    c8:87:cd:a9:d4:ee:6d:9e:1b:11:bc:ee:ce:a3:c8:
                    c7:4b:23:69:8f:f4:6f:c5:fd:0f:80:84:ea:c9:75:
                    c0:73:1a:e2:ad:4e:a8:99:dd:7e:e0:21:92:34:56:
                    31:af:3e:59:63:1e:46:ad:07:0a:07:81:c9:7c:2d:
                    76:3f:07:19:93:99:ed:a9:9b:48:5b:4c:07:f7:76:
                    f9:3c:cc:fa:93:97:6e:c6:97:31:95:30:2d:3d:2b:
                    0e:c3:a3:5b:f5:41:2c:85:1b:83:d7:31:3b:6d:29:
                    cc:69:53:8e:42:f3:ce:56:b0:48:8e:13:0d:6b:dc:
                    ce:9a:98:57:c2:39:f5:97:10:b8:8c:d3:b8:8f:2b:
                    6f:6e:61:d7:d6:ab:5e:37:b0:54:c3:2d:33:6c:df:
                    ec:2b:44:6c:3e:f4:b4:42:3e:5d:19:d7:78:93:aa:
                    85:a4:bb:8e:10:4b:22:0b:12:15:3e:fb:73:36:4d:
                    27:ec:8e:0f:f8:0f:3d:79:bc:e7:c0:7a:41:03:eb:
                    f2:db:39:ae:14:15:55:e0:77:4f:cc:f3:93:cc:84:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:75:A0:A9:4C:B4:67:6C:CD:B9:5B:7C:4A:C0:ED:7E:93:3D:CB
            X509v3 Authority Key Identifier:
                keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:80:98:d0:cb:0f:2c:fb:8e:92:19:50:44:6c:c8:01:ff:18:
         04:98:1e:b6:73:9f:53:75:8b:ef:90:b3:3a:ac:58:e0:72:ff:
         5a:f7:8b:9a:80:47:3e:53:44:2c:01:c0:d1:8c:7c:1a:3a:8a:
         59:cc:da:c2:3e:cb:d0:30:a7:fb:9e:03:0a:2a:15:5b:8e:83:
         ed:44:8e:1c:40:0f:b2:eb:db:60:77:1c:eb:6c:94:96:6c:b2:
         89:87:ea:08:bd:93:da:21:fa:1e:f7:b1:21:dc:ba:ce:d8:43:
         2f:ff:bc:fa:44:0c:e4:2e:74:c1:7d:52:24:d5:cf:5e:15:bf:
         d6:af:d8:c0:40:5a:54:29:8c:76:01:a5:8b:f9:ac:b9:99:1c:
         98:6e:64:66:e0:7a:bf:2d:10:db:99:6f:2f:89:b3:dd:21:d1:
         60:c6:7c:93:b1:2a:db:c0:ce:d2:08:53:ac:2f:05:08:86:35:
         61:5e:c0:a1:25:1f:5a:8d:b6:60:8d:ec:4d:a5:77:44:31:d3:
         78:9c:10:60:4e:8b:39:c7:66:af:3f:f7:34:5b:17:6c:ec:55:
         c6:71:60:67:95:cc:66:37:54:73:d1:0c:c9:90:04:43:97:84:
         5a:52:5f:35:d9:6b:7c:e7:c8:d1:45:c4:6f:f5:dd:39:16:b8:
         51:4c:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:44 2024 by rpki-client on console-fra.rpki-client.org