Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          0HBL1KNzNV5UnQd9XCPojQzgNHPb9fC1GxANKLqGnH0=
Subject key identifier:   F3:34:3E:47:BD:85:1E:65:F5:7C:08:07:93:6C:0B:06:95:37:2A:FF
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       019350BEDD5715005F2EC43556761655C703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          080B
Signing time:             Thu 21 Nov 2024 22:01:45 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:45 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:45 +0000
Files and hashes:         1: 6LV9vOVd3kgp3gvWNPiYx0X0Yds.roa (hash: EHMVbtfYEkoKktSDA28YZh5XbzLG6Jnw9LPpXa2rjZ8=)
                          2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: s77t0BdrwzfkpqiOTrdb6wRvcdOIVRmElkBPJWE/ABs=)
                          3: m_XMHyPTLYUAvAkSHO3HCY3mX24.roa (hash: AwS2oED3SnY4/CQbIRM7EKcijOUMjJ5DQaGOQqo/9A0=)
                          4: pLxraMGdusqRgDUPmIqQpTjC5rg.roa (hash: oQP9uooU1SmBPrFPPbMEGdSjQ4ZgaWwwD2HyEpBZRok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:dd:57:15:00:5f:2e:c4:35:56:76:16:55:c7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Nov 21 22:01:45 2024 GMT
            Not After : Nov 22 22:01:45 2024 GMT
        Subject: CN=f3343e47bd851e65f57c0807936c0b0695372aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:38:0d:d2:1b:61:3a:f8:19:d8:34:6c:b8:
                    16:7c:0b:c5:5c:a4:f4:a2:39:eb:da:da:89:82:0f:
                    29:53:d9:d1:bc:97:5f:09:84:f4:08:f7:1b:61:92:
                    20:c4:0b:bf:6d:11:21:9b:99:f3:16:8f:47:ba:f2:
                    a9:d1:63:68:68:4b:64:6c:46:8f:3a:78:a4:ca:16:
                    e2:86:2a:29:d8:64:91:1f:53:94:ca:1a:7e:49:11:
                    4d:24:37:00:bb:77:db:aa:d0:7f:a8:dc:2f:45:fa:
                    ab:86:8b:68:9d:31:db:ca:38:df:75:86:86:ac:b9:
                    44:ca:58:89:84:2c:b8:cc:30:4e:2e:4b:28:c5:7e:
                    ae:85:3b:9e:b8:4d:cb:12:a4:6c:77:8c:45:ab:16:
                    9d:b2:22:5b:57:59:63:af:89:64:91:5a:b3:cd:93:
                    45:51:b5:cd:6e:d1:90:8d:49:07:d5:93:86:a7:e9:
                    7c:c0:bd:02:8e:e9:e9:c0:c2:65:56:4a:4b:5c:54:
                    80:dc:3a:46:ee:9d:4e:cb:af:36:ca:23:b9:88:57:
                    e3:16:e8:28:f9:0c:0a:6f:e8:6e:be:5b:78:f5:96:
                    31:d7:c9:6e:d6:6e:c8:69:86:39:f0:a2:ca:26:8a:
                    a3:2d:00:e7:f1:51:12:bf:42:d5:c0:1c:1c:d0:e8:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:34:3E:47:BD:85:1E:65:F5:7C:08:07:93:6C:0B:06:95:37:2A:FF
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2f:4f:b8:1a:63:d1:6f:f8:3f:52:6a:eb:c7:48:9e:da:69:
         1e:bc:c8:36:46:d3:57:07:6f:a9:ee:fd:b1:7e:18:9c:b4:26:
         e3:ef:a4:de:72:61:ab:38:0b:32:06:e7:db:8d:cc:50:4e:54:
         c4:b5:88:5b:9c:78:28:f6:c0:0b:ce:b2:a8:1c:9c:aa:82:99:
         4e:f3:57:5e:83:3d:58:9c:ee:cf:46:bb:8c:3d:d5:1d:cd:ad:
         5b:14:5d:62:1e:c7:69:1f:2e:4c:f5:2a:2f:64:f9:db:50:fc:
         c6:57:ce:a5:a6:92:42:92:85:7a:8b:70:3f:5e:d0:fd:89:09:
         19:da:64:1f:fd:ce:51:8c:47:42:b5:7d:13:9d:3b:53:9c:2c:
         ad:6b:ed:cb:bb:74:42:78:0a:c2:43:65:bd:ee:45:6f:1c:9d:
         c5:cd:76:67:0d:c0:6c:8f:c7:c5:f2:90:33:21:f7:ac:60:28:
         7f:ae:37:3b:73:b6:3b:29:fe:c2:40:2f:7f:e0:ed:d3:6e:5c:
         b2:83:0b:52:49:50:42:b6:60:90:a1:75:ff:aa:a5:14:60:73:
         0f:38:23:84:37:d4:b3:06:34:6b:6f:28:dd:46:de:29:d0:49:
         e4:b5:b6:04:9b:f4:33:0c:03:d5:e2:74:82:1d:24:00:23:bf:
         3a:ad:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:10 2024 by rpki-client on console-fra.rpki-client.org