Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          ZykLOxziR/h3RKgWasHF8AfQrCvLAuYBg5zlMf5uktE=
Subject key identifier:   0A:A6:34:F6:D2:F0:57:2C:EE:46:C5:D0:41:B9:21:A6:AC:88:09:DC
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       019360D5906DFBA76F4353D678F4D67E3486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          02E8
Signing time:             Mon 25 Nov 2024 01:00:28 +0000
Manifest this update:     Mon 25 Nov 2024 01:00:28 +0000
Manifest next update:     Tue 26 Nov 2024 01:00:28 +0000
Files and hashes:         1: BXunOv9mPJkYgZ0NI5qUZKgTb1A.roa (hash: mmzsr5EgAhUZUxSJCRXBAFNum+pVa7EBF4L0ocnSXCg=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: hsUjb63FN2qtYsI/XjQnPVA+yFr/mTXuvaJQG1lmMVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:d5:90:6d:fb:a7:6f:43:53:d6:78:f4:d6:7e:34:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: Nov 25 01:00:28 2024 GMT
            Not After : Nov 26 01:00:28 2024 GMT
        Subject: CN=0aa634f6d2f0572cee46c5d041b921a6ac8809dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:86:66:f1:3a:11:ec:2a:4d:0f:49:b4:3c:
                    5b:ad:d5:8a:0e:9e:61:aa:35:86:38:85:81:04:8a:
                    2d:4e:b8:eb:e5:b0:46:b8:e4:b3:bf:6d:0f:16:47:
                    12:89:ff:f4:25:9b:2d:b7:0b:8b:ea:f6:32:67:bb:
                    09:60:5a:2c:4c:58:21:0e:12:0f:f9:e9:f4:78:18:
                    54:dc:54:4e:4f:f3:15:e6:d6:eb:8a:8e:c8:3f:1a:
                    f5:cd:b4:61:cf:77:94:c3:93:75:d6:d7:67:e2:93:
                    f7:e0:1a:55:ec:e2:bd:7d:99:7c:03:e5:9e:9d:b7:
                    9f:24:1e:aa:8f:1b:08:28:a3:06:97:18:1b:ab:8b:
                    99:57:8f:aa:9c:39:d6:78:f9:a6:61:47:c2:73:e2:
                    f3:5a:af:2d:4e:b7:b0:bf:3b:26:38:b7:56:df:63:
                    eb:aa:06:1e:60:a7:93:4a:6c:5c:f9:df:ad:e1:13:
                    5f:24:c6:c4:e7:5d:bc:d1:75:ca:a7:3c:74:45:cd:
                    82:c9:d9:4c:0c:26:f2:2e:bb:c6:7d:b0:ee:7d:58:
                    55:92:e5:0d:e0:0b:87:10:ae:f2:f3:81:a7:7b:92:
                    af:56:d5:69:0b:52:39:3b:bc:6f:a7:a1:f5:37:6e:
                    9e:45:6c:40:cd:87:f9:e2:f5:e8:f1:1e:8e:86:ca:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A6:34:F6:D2:F0:57:2C:EE:46:C5:D0:41:B9:21:A6:AC:88:09:DC
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:ac:39:e6:be:e6:17:07:0b:00:9e:fe:3b:cb:da:42:03:
         a6:87:c5:69:bc:1e:97:b1:b2:ef:ab:f2:47:d9:fd:6a:75:c6:
         0d:c4:0a:0a:4e:94:24:8f:5f:44:58:f8:19:b8:68:fc:45:15:
         81:ed:e8:12:d2:3e:55:19:d6:57:3c:8f:07:54:05:c0:ab:98:
         eb:8c:40:82:1b:58:a2:f8:2c:d0:6d:85:0d:f7:74:ee:fd:f6:
         35:cc:9a:29:7b:7c:e0:2a:d7:78:da:4d:3f:00:4b:43:9e:b4:
         54:a2:1c:b3:c2:4b:14:71:8c:20:f9:51:48:f1:33:5b:c5:9d:
         3b:c1:29:ee:6c:c8:a7:d8:e0:ce:44:fd:9c:24:8e:3c:91:a4:
         35:45:06:a5:48:20:21:e5:c6:8a:20:72:73:b1:1a:87:cb:b2:
         e0:13:ca:3c:98:c7:72:83:d5:74:94:69:ea:b6:f5:43:1f:25:
         7d:d2:8a:82:1c:40:f3:2d:d7:03:07:c3:59:73:f1:a5:a6:73:
         e8:bb:0f:56:99:39:f6:2a:95:b3:f7:b5:0b:f7:57:94:5b:48:
         08:67:41:b7:f8:ab:90:0e:f7:3c:12:bc:26:35:a3:3d:af:78:
         7f:af:af:7a:6b:0e:c6:08:5e:04:4e:48:6b:be:bf:b0:3a:c3:
         cd:f9:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:31:39 2024 by rpki-client on console-ams.rpki-client.org