Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File:                     HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier:          W0KEEddNNhXhLqHt9CTve6iN90HSWYthX4SsSKhb+VE=
Subject key identifier:   AD:9F:3A:28:7D:3C:C7:62:6C:AF:EF:D0:2E:E7:5D:E4:F2:C4:E3:67
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer:       /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial:       0193549AA40CE2FB4E5617F27C7B631BCD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number:          099E
Signing time:             Fri 22 Nov 2024 16:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:40 +0000
Files and hashes:         1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: LVsMlVBISt19nBr0IWBHk3NLbN2WzB36s6FSFdIqr4s=)
                          2: Nj6Y1umwE8Hw0flALWLf1Ts09wY.roa (hash: Y4bGQKZq2dG9DDPeI//2wCpZv3vQSFUbMu0G3XO4jSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:a4:0c:e2:fb:4e:56:17:f2:7c:7b:63:1b:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
        Validity
            Not Before: Nov 22 16:00:40 2024 GMT
            Not After : Nov 23 16:00:40 2024 GMT
        Subject: CN=ad9f3a287d3cc7626cafefd02ee75de4f2c4e367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:41:24:c8:17:41:60:85:92:7e:b8:86:ca:
                    a6:43:f9:8c:77:63:b3:8b:30:52:e8:a3:93:d1:48:
                    d4:7a:4f:3a:6d:c0:6d:a1:40:84:23:03:3e:6f:21:
                    cd:79:9d:0a:d4:21:d7:fd:d9:aa:1e:94:b4:ab:42:
                    e4:62:bc:34:44:9a:c4:06:ae:1a:c7:2f:8b:8c:4c:
                    6a:cf:d3:11:bf:b0:ae:47:40:e3:30:dd:24:e7:ff:
                    70:6c:bb:a4:b7:bd:31:72:bf:21:5e:e4:42:3a:5e:
                    80:32:fd:88:b8:94:2b:42:89:4f:50:2d:e2:b8:c7:
                    cd:38:cd:4e:3d:a8:80:e6:3e:42:c4:4c:13:fc:8e:
                    38:06:11:8d:f3:6f:df:0f:ac:3c:bf:34:c4:06:75:
                    51:2a:f6:67:5f:bb:e0:1f:61:48:da:89:fc:09:48:
                    a2:31:cb:88:2d:f0:09:b4:9b:dc:63:8b:cf:92:9e:
                    96:47:a9:57:c0:d5:49:c8:10:1c:6c:50:0e:87:90:
                    5d:d9:80:b8:ae:82:8e:ad:f9:4c:31:8e:0d:57:0e:
                    ff:14:f5:b7:21:43:6a:35:08:97:16:d8:6a:bb:3a:
                    79:19:69:3a:e5:f3:a0:95:72:46:51:d1:c0:41:b3:
                    b1:bd:06:20:44:95:17:db:fd:f6:22:47:ba:a9:8c:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:3A:28:7D:3C:C7:62:6C:AF:EF:D0:2E:E7:5D:E4:F2:C4:E3:67
            X509v3 Authority Key Identifier:
                keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:a8:93:17:71:b1:97:01:25:30:38:d0:ee:03:3f:5e:a4:
         2d:bd:69:a8:b2:86:ae:9b:ee:e4:f1:da:8b:fa:b4:e2:51:35:
         5a:1e:90:04:05:86:46:ce:d6:e2:2c:08:3b:85:e0:9f:f2:f4:
         17:57:12:c2:04:2e:df:b2:a5:da:7b:53:c8:9c:b7:5c:a5:0f:
         a8:a1:df:00:c3:2f:b3:d8:2f:5f:78:d9:ac:c5:b7:0b:a3:c7:
         04:e8:74:6e:79:5f:c1:71:d1:b6:d2:3c:9d:0c:78:5d:f9:57:
         53:b4:7b:9b:0e:63:52:29:95:9d:00:0c:38:fb:f9:72:95:70:
         d1:df:35:13:de:21:9b:52:25:96:7f:f0:ad:7a:19:a2:00:e8:
         b9:17:66:0c:b9:5c:8b:af:b9:47:79:81:61:74:b7:e0:18:87:
         5e:8f:6b:b7:15:95:95:a7:8a:67:bd:56:10:4d:0f:80:97:49:
         28:af:fa:7f:ba:d1:a5:dd:ee:f8:02:5e:57:87:c0:7c:f2:3d:
         dd:95:10:01:94:b5:cf:c0:5d:86:fc:4d:ac:81:8d:e8:e6:99:
         fb:db:73:16:9a:84:e0:ad:9f:85:5a:89:89:1a:c8:a0:92:af:
         67:b0:35:94:a3:e5:99:da:ea:f6:5c:9c:78:07:18:58:ef:fe:
         a6:18:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:35 2024 by rpki-client on console-ams.rpki-client.org