Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          kF6r2LUEI1YG5h781S5TPU74f5FtcEjheWrtAHnU1v4=
Subject key identifier:   03:32:F9:B8:B0:8E:18:BC:AC:42:D2:5D:AE:29:6D:BF:19:68:C3:47
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       019355AD2B3F59A4A3ACC02B981CC9D29674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          09FF
Signing time:             Fri 22 Nov 2024 21:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:32 +0000
Files and hashes:         1: E1zmer2HQ42L-ZbrhVzM2WRRCOU.roa (hash: eVg/2SqnrO1UK2jgl9y6mxRaocphwbjGhWyCXVZPNH0=)
                          2: GRUIRLPslnKEY2Xjsvf_G-zul6U.roa (hash: PlalVKCgMhvVm0pbdreJAikQ+hXP4zFxlNesi51ptas=)
                          3: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: NsPkqktXFFKTB2LRrzC03zWUIpG6M1Viaqvm1Z0VfF8=)
                          4: gF1rNNltKaH4Pj-DBFDV5l0W4WQ.roa (hash: LusZQTsRkWhMZvzilXVRzdgK7xGH2bUpqQCqMXpUgZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:2b:3f:59:a4:a3:ac:c0:2b:98:1c:c9:d2:96:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: Nov 22 21:00:32 2024 GMT
            Not After : Nov 23 21:00:32 2024 GMT
        Subject: CN=0332f9b8b08e18bcac42d25dae296dbf1968c347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:8b:ef:1c:e4:5e:6f:db:53:22:6b:82:33:
                    89:a9:1f:47:a7:23:69:c1:44:19:5e:dc:be:49:ec:
                    ef:dc:32:11:cd:25:01:a0:2b:4e:61:0d:2f:f2:fb:
                    76:87:ba:0a:63:fd:59:8c:4e:4a:0d:95:33:c9:3b:
                    71:3a:18:cf:49:62:9f:ed:ad:e2:2b:d4:8f:22:9c:
                    fa:12:ad:68:de:69:ae:38:8e:d6:09:c2:13:50:e7:
                    27:c8:16:25:e4:c9:cd:66:af:e2:8e:fb:50:18:08:
                    25:4a:e4:cc:fe:e6:98:a5:9d:52:0c:8e:a0:f2:06:
                    48:3a:47:22:d5:aa:e8:3d:52:93:e8:f5:63:df:eb:
                    98:6f:6f:48:75:05:19:78:42:82:83:57:62:3e:19:
                    6c:22:b7:56:21:a5:7b:ae:9c:2f:87:df:bb:f9:73:
                    b9:ad:82:f8:e8:8f:e5:ba:26:01:77:95:95:9c:79:
                    77:b1:6f:4d:c4:f7:b6:b2:9f:30:1d:12:6c:42:81:
                    8b:ff:c7:b0:a3:10:d3:e0:d1:83:1b:d9:47:9f:76:
                    78:84:9c:1f:fa:34:f9:5f:a0:35:a5:87:0a:fb:3a:
                    35:3d:de:c6:1b:f9:26:85:c1:e7:ec:60:fc:e9:e9:
                    f2:f5:81:ea:3e:70:d8:d9:73:3f:4c:f8:fa:88:cd:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:32:F9:B8:B0:8E:18:BC:AC:42:D2:5D:AE:29:6D:BF:19:68:C3:47
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:4d:78:05:c4:45:e1:51:98:ff:38:21:bd:1e:99:e0:4b:
         90:c8:73:58:ed:10:89:6d:92:a3:0f:07:b5:08:02:d0:cb:6c:
         bd:62:2c:5e:f3:22:d5:fe:e8:e1:2a:3f:25:a5:2a:33:a9:cb:
         66:78:e6:46:cc:79:49:ba:55:da:ed:5a:ce:8e:eb:15:24:a7:
         02:70:29:05:1e:48:ce:0c:39:c3:08:1e:05:d6:6d:1d:e7:ce:
         ff:69:4c:92:57:4e:e7:d6:7a:be:eb:30:da:f1:dd:91:cb:ba:
         ec:f9:95:57:1b:56:32:a0:8f:07:0c:7a:d2:24:04:dc:fe:64:
         fe:3c:0c:07:ca:44:0f:ed:59:4e:a4:e1:64:cf:63:69:8e:14:
         12:11:fb:4a:f3:c7:01:1b:33:aa:5d:69:e4:64:a5:20:9f:6b:
         e4:0b:b8:42:5c:11:3e:1e:54:3d:00:10:a2:fb:cb:24:e5:64:
         ba:eb:43:60:87:97:74:29:74:a4:b2:6c:7a:c6:64:df:55:ae:
         c2:3f:cf:77:81:6a:37:0c:fb:91:4b:f7:8c:37:33:dd:f9:9a:
         c5:f9:fa:de:4b:2a:16:87:d8:ab:a9:55:fa:35:04:8f:90:ee:
         ea:7f:63:2f:dd:99:d0:c7:39:ac:dd:5c:da:b1:52:61:91:a8:
         ee:e2:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:41 2024 by rpki-client on console-ams.rpki-client.org