Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          FptkbY4Wa7QB7HYNiLRLjygKJjqKwMuPDIax8g4AbII=
Subject key identifier:   94:C1:EB:5C:59:34:80:FF:4F:15:54:F4:0C:E9:12:DF:4D:75:77:77
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       0193580925FA07F519CFE9667935FF737169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          1179
Signing time:             Sat 23 Nov 2024 08:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:14 +0000
Files and hashes:         1: B26BmjlvFx2VhTLYFipYKjz95Tg.roa (hash: 7zxwHkcgj9cAKNKc6v2DHdt9L5ra0kgjVZQ3ev83Imw=)
                          2: CzyTJ_Ns0DcjPQDjL1G00EyyDbM.roa (hash: 7qiemVbRLeq+9scMJ2CZh9suqqOjnW0YO3P3rOMG2KQ=)
                          3: e4uQmAUQkEeylpEyBl9FPTIAEkA.roa (hash: sVSsrsZX/H/UlpvcgJIVrhXmt+G3Aidanzii2dawldQ=)
                          4: esrU8GEtQyIsveVI8rzz91xERdg.roa (hash: qI8vL56ubJ5ukJ+hic/VbEQRmdp8/BNinr+8fuV5Sd0=)
                          5: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: zXiN3B7g8zTG/EQZzgkd7Dv+ZGzc85PT84Klc3+TpcM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:25:fa:07:f5:19:cf:e9:66:79:35:ff:73:71:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Nov 23 08:00:14 2024 GMT
            Not After : Nov 24 08:00:14 2024 GMT
        Subject: CN=94c1eb5c593480ff4f1554f40ce912df4d757777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:68:45:b8:cc:5e:ed:06:f2:00:af:df:87:
                    02:be:66:e0:c0:c9:fd:c2:f9:bb:4a:e3:6a:24:1b:
                    73:2d:28:1d:d9:ee:aa:c0:9a:47:02:af:ac:7b:a2:
                    5b:ad:a0:f8:1e:d8:cf:c2:fb:72:38:d3:b4:88:4b:
                    cf:33:6d:d4:91:d6:1a:b6:03:23:d1:4b:fc:03:9a:
                    f7:70:82:a1:1a:7c:15:bf:9a:ba:85:bf:76:1b:fd:
                    ae:b1:c7:e7:9e:7b:98:57:c6:86:d4:1c:79:bf:57:
                    3c:2b:1b:9c:6f:8e:c4:a9:3a:89:c2:d5:9a:f9:15:
                    01:47:2c:ea:f6:22:b1:7e:9c:42:29:b0:c7:32:a9:
                    1f:fb:35:ea:48:49:b9:d8:c9:f6:20:92:9c:58:b5:
                    bc:dc:0b:67:87:d9:a5:34:ef:15:6d:26:6b:35:16:
                    77:ef:e6:cc:72:89:fc:a8:7a:2c:7b:16:39:86:89:
                    62:9e:3a:41:a2:45:ad:71:ae:47:5a:a2:3e:da:19:
                    ac:00:d5:b5:54:cc:ac:a1:e2:6c:1f:bd:4d:ce:16:
                    52:9d:94:f9:41:44:ca:02:66:e3:19:b1:88:8c:d1:
                    b8:e4:cb:02:79:6a:e7:69:f6:d2:62:6b:4b:39:4a:
                    c5:13:90:7e:12:1e:78:0a:6e:a1:92:e4:ab:c4:7f:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C1:EB:5C:59:34:80:FF:4F:15:54:F4:0C:E9:12:DF:4D:75:77:77
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:44:77:11:69:f6:2a:94:77:a2:4b:5a:af:7f:c6:a5:95:
         1e:fc:40:e8:d7:6d:37:3b:8c:36:20:42:a9:b6:b8:06:42:af:
         81:d4:71:b8:95:f5:d7:fa:31:89:db:00:9c:97:78:9d:e8:db:
         3b:de:3d:4c:5d:80:ef:60:a5:dc:ea:32:4c:7a:ca:f9:04:5b:
         c4:e7:d5:dc:11:a3:53:a1:27:fe:50:c8:a3:88:05:c2:0f:33:
         6a:cd:22:18:8a:f9:05:fd:79:66:90:e3:a5:ec:d1:25:bb:f4:
         ce:50:b6:07:05:52:58:98:4b:08:40:01:4a:7e:42:1b:d3:ba:
         46:9b:6d:6d:ed:68:3c:ba:1b:3c:1a:ea:ef:a1:a5:a9:89:8d:
         e1:34:58:59:cf:20:49:38:17:74:e0:2c:d2:70:45:b4:74:51:
         e4:f7:cd:59:03:b5:07:3b:df:9a:d5:84:3e:a2:09:a5:ff:ed:
         08:1d:6e:d2:31:61:6b:a9:03:34:16:ee:6a:74:a8:bc:40:d9:
         fc:64:dc:97:bd:4e:cc:4a:41:bb:cf:46:68:da:10:a5:18:c3:
         31:d6:e2:56:37:2d:c1:ad:38:a0:7d:31:97:09:f0:4d:1a:02:
         ac:8b:e4:c2:dc:6a:23:1f:65:d2:4a:46:ce:14:49:7b:19:30:
         44:4c:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:39 2024 by rpki-client on console-ams.rpki-client.org