Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File:                     YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier:          6BamZrP/ziG7nEqRG87CdozD67gfo4bl/eOJzXbJMeQ=
Subject key identifier:   A2:F3:A5:23:E2:2F:9B:14:D6:DA:99:4A:DA:B2:93:50:23:28:2B:18
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer:       /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial:       0194BAF28F6930155F216DACA973B59DF9C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number:          06F3
Signing time:             Fri 31 Jan 2025 06:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:46 +0000
Files and hashes:         1: EazGIzCNsJQ-d_BWYfmd1vlrvCo.roa (hash: d3utp+C5LV7nCWO9WCf6OQQVcLK8tzjUVXN59g8Xo5s=)
                          2: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=)
                          3: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: 4I16AZkBVlUWUUi5ctLjY94NbMzEHDPhlBjS5p99Zm4=)
                          4: dvL-jIIUnjzrmF_ix2eqcqmBOt8.roa (hash: lxw8tmWyTGgbmVPvCpBbeUcrOgcDy10u21KTE2KYeAU=)
                          5: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:8f:69:30:15:5f:21:6d:ac:a9:73:b5:9d:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
        Validity
            Not Before: Jan 31 06:00:46 2025 GMT
            Not After : Feb  1 06:00:46 2025 GMT
        Subject: CN=a2f3a523e22f9b14d6da994adab2935023282b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:6b:4d:ae:93:2f:64:df:66:8f:a8:50:99:
                    d9:9b:80:e7:41:bb:10:dc:6f:82:b4:20:b2:41:db:
                    a7:7e:f3:23:bf:f9:43:f7:87:85:e6:05:44:47:84:
                    eb:ac:3c:dc:14:d9:2e:29:e6:eb:29:37:78:25:87:
                    37:79:33:34:84:de:05:c2:af:82:80:29:f5:27:d9:
                    0f:4d:27:06:f1:39:cf:e4:35:92:2f:63:d4:da:06:
                    66:03:43:0f:33:5f:8e:fb:66:c5:79:57:02:b9:e8:
                    80:1a:0f:9b:31:e6:62:a2:51:42:7e:ef:d1:00:51:
                    08:af:d0:9d:d5:a3:bf:ac:d9:91:e5:8c:7a:ec:28:
                    47:8e:3a:f7:47:e3:9e:c8:c1:88:06:ab:88:56:83:
                    e9:ac:47:41:cb:04:42:be:d0:77:86:20:ff:99:7d:
                    d6:ac:10:85:2c:48:88:19:c3:a6:45:48:5c:0d:be:
                    d4:64:6b:4d:4e:9e:0a:cd:77:d6:82:d9:2c:48:9e:
                    dc:11:34:7c:9e:ed:07:8b:dc:c6:ed:06:21:1f:76:
                    cf:1c:d9:1e:30:79:77:d6:b9:73:dc:45:d4:09:2a:
                    9d:ad:f3:3d:44:5b:c7:1b:aa:2d:c8:49:e4:7c:0c:
                    3e:1a:45:48:4a:fb:9f:6c:6c:0f:f0:9a:db:10:3a:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:A5:23:E2:2F:9B:14:D6:DA:99:4A:DA:B2:93:50:23:28:2B:18
            X509v3 Authority Key Identifier:
                keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:c4:e4:a4:5e:6f:a5:bf:da:1f:67:a4:04:69:3c:96:fa:
         53:53:50:d8:09:fc:dd:56:1c:c6:58:ee:84:ba:97:2a:f8:c3:
         43:6d:f3:7a:4c:20:be:90:d0:0f:34:13:e8:73:23:d6:98:bc:
         fc:f9:21:20:07:e4:98:07:e8:e1:c0:c0:27:37:f8:bb:6f:a5:
         c4:a8:76:66:10:2a:9e:5b:a2:9d:0d:9d:76:88:cc:f0:fa:65:
         c5:6a:ca:0a:1c:ec:8a:b1:40:78:c3:a0:4e:26:81:1e:2c:ff:
         90:da:1c:c1:9f:6b:7b:da:db:6f:67:26:52:95:de:05:65:51:
         d5:29:62:36:13:ec:12:8f:b9:a6:af:0e:69:1d:f9:ec:b4:75:
         bc:e9:f9:42:69:c5:8a:8f:03:40:b7:98:87:56:fd:05:ec:4d:
         62:66:01:30:ee:f8:07:32:aa:8c:cb:1b:17:bb:b9:e1:c2:ee:
         ed:69:9b:7e:13:69:48:d6:de:8e:2e:28:c8:02:31:9e:d1:9e:
         d8:91:48:81:6a:15:67:5c:d4:27:c8:5d:2e:09:94:9f:e0:6b:
         98:30:8d:31:9a:8b:1a:02:4c:b1:a6:f5:fe:76:73:5d:32:19:
         47:a8:bf:3d:47:8d:b1:95:fd:52:8b:a4:87:9d:48:50:9b:2d:
         96:a0:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:38 2025 by rpki-client on console-fra.rpki-client.org