Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File:                     JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier:          f9xOW+ZrD13MvHsdc5BfeP9yuav5DAlBw3lyvTypoe8=
Subject key identifier:   6A:AD:54:22:2F:C3:1F:14:A7:6E:C2:FD:23:96:AC:18:35:83:13:17
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer:       /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial:       019357D2A7250139BEAF56A6D7478F233747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number:          01FF
Signing time:             Sat 23 Nov 2024 07:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:43 +0000
Files and hashes:         1: 5EhGWDiv-mdrFJtaGPcIV4hAZHU.roa (hash: paQm0Cth2qgQ0W2I327E4nKtaA3xuIR5I8vqj1tpRT0=)
                          2: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: MfqHA7oHwRGFoLlDzsPnYCgQRKB3CRWbDsuOz42ScOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a7:25:01:39:be:af:56:a6:d7:47:8f:23:37:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
        Validity
            Not Before: Nov 23 07:00:43 2024 GMT
            Not After : Nov 24 07:00:43 2024 GMT
        Subject: CN=6aad54222fc31f14a76ec2fd2396ac1835831317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e9:8e:52:87:10:bd:d2:ac:87:5a:5f:7a:10:
                    54:b9:65:f2:96:44:58:fb:cc:81:40:d4:09:0d:80:
                    e2:60:03:20:77:37:0c:69:14:b2:6f:bb:8b:23:e4:
                    8a:61:d4:28:55:6d:8f:cb:b2:11:2c:49:65:d6:76:
                    da:08:99:f0:22:cf:0c:f6:e6:93:b1:df:2e:a3:c6:
                    0a:18:3a:2b:4b:d4:ae:8c:5b:cc:87:a0:0d:12:88:
                    ab:bf:55:32:2e:12:21:dc:ac:c9:6b:97:6d:28:5a:
                    93:71:71:97:32:78:fd:cb:37:93:4f:f4:b0:5f:42:
                    54:8a:93:db:fa:fc:8e:68:89:cd:ba:96:3b:d0:9d:
                    30:be:4c:5b:8c:fa:b2:39:49:91:01:69:46:80:1c:
                    a2:81:ee:1e:50:e2:0e:4b:f5:e2:cf:41:bc:78:fb:
                    e4:17:ea:59:65:28:e0:6f:0e:2d:d7:71:92:61:08:
                    9e:8d:3f:01:ee:e0:0f:c6:19:26:6a:22:b8:56:cd:
                    c3:6e:08:d3:76:30:18:5d:72:03:80:80:78:bc:06:
                    0a:14:70:fd:ee:d4:6e:f6:a8:1c:fd:75:03:8a:d3:
                    e9:40:fd:cb:ad:35:47:96:df:79:34:81:b7:46:ef:
                    73:52:ec:84:d4:e5:71:58:7b:0f:a3:5b:ad:1b:a1:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AD:54:22:2F:C3:1F:14:A7:6E:C2:FD:23:96:AC:18:35:83:13:17
            X509v3 Authority Key Identifier:
                keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c0:93:08:6d:7a:91:63:8a:9f:e0:7b:e6:ad:fb:f3:d7:a0:
         d4:f4:28:0c:8d:db:6c:36:72:e1:99:8b:25:4e:3e:e2:d8:45:
         0b:de:d4:a1:7e:a3:fe:78:b5:9e:1f:80:a5:f0:cd:5d:1d:69:
         cd:0d:67:5f:10:1e:af:9c:c5:30:10:95:50:47:8c:06:c7:02:
         40:eb:c1:7b:74:08:82:f8:a8:7c:d0:05:27:fa:51:e0:e6:0f:
         bb:ed:1d:94:0c:47:b4:cf:bb:02:ff:28:6c:1c:ed:9d:53:19:
         22:dc:31:f3:29:88:61:c3:5f:67:48:0a:3d:5e:d3:fd:7f:1d:
         1d:4f:32:ac:34:d9:d5:48:45:84:45:af:ca:de:2c:c6:0e:a2:
         70:51:eb:c2:11:fe:f5:56:6c:9e:be:2b:3d:24:12:27:bb:be:
         fc:9d:a0:b1:6c:43:7e:94:3a:2c:89:76:28:79:94:c8:00:28:
         33:35:ce:33:52:f1:a9:f2:69:41:ab:70:49:d9:52:b6:19:e7:
         64:4b:80:a2:7d:e1:6f:6e:4e:a3:9a:49:4a:ca:d2:b1:32:35:
         8f:b1:e2:a3:d3:3d:eb:d5:17:ac:1a:62:47:61:be:40:5a:a5:
         27:d1:3a:97:68:d1:33:03:ed:07:b5:ed:c5:47:8d:17:60:5d:
         8d:95:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:01 2024 by rpki-client on console-fra.rpki-client.org