Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File:                     yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier:          uGXwDV85/Vk74g8z+aia1+Azv6O+LV1212uo8VCiOJU=
Subject key identifier:   22:16:5A:88:B2:C8:86:5C:5C:7F:40:B6:15:41:38:71:2E:D5:D6:7B
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer:       /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial:       0191FA478DE36DFF85E42CA4E7B52F704958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number:          F0
Signing time:             Mon 16 Sep 2024 10:01:19 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:19 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:19 +0000
Files and hashes:         1: IdKiBrDYJ2m2JwDS4trNjV0cKb4.roa (hash: kBX2dLl6oGUqlakWeoAlgK2Dr+VlBghAl5l25c4ccSc=)
                          2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: M0xeXf7qwah0b8On26KkAz+hxTCMKtZQqLREdg6TJb8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:8d:e3:6d:ff:85:e4:2c:a4:e7:b5:2f:70:49:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
        Validity
            Not Before: Sep 16 10:01:19 2024 GMT
            Not After : Sep 17 10:01:19 2024 GMT
        Subject: CN=22165a88b2c8865c5c7f40b6154138712ed5d67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:29:a9:96:19:e8:d1:8d:f1:ea:33:ff:73:
                    66:3e:93:c9:6e:8b:e0:37:36:63:0c:81:e1:ce:78:
                    3b:48:19:7d:f3:92:67:22:ef:9c:03:8c:20:7d:ca:
                    97:f1:7a:8d:96:d0:3c:d2:56:ee:4b:74:0f:6c:94:
                    87:86:80:1f:fa:18:72:0c:83:98:4f:d1:7b:8b:db:
                    1e:f1:2f:75:88:05:64:f2:8b:b9:5d:d8:09:d5:5a:
                    5f:da:ae:cf:31:c7:2d:10:df:b7:84:23:83:32:c7:
                    9b:05:e9:bd:b4:85:93:54:0e:5a:08:ec:c8:2c:0c:
                    dc:ae:81:2d:1c:7b:ef:c9:04:1f:5e:2a:d3:18:c7:
                    04:f4:4f:95:c9:92:1b:fd:9d:59:be:f3:4d:ed:fe:
                    42:3e:e0:06:f7:ad:ec:ec:13:c3:89:55:5f:88:08:
                    a1:a4:08:57:26:de:b0:b5:49:18:6f:3a:e0:9e:99:
                    c1:87:c9:68:f8:5c:3d:34:33:03:c2:7a:21:26:ae:
                    83:5a:ce:01:12:e5:35:17:5c:d9:07:52:16:1e:c9:
                    75:2e:59:f6:55:7e:c7:f1:2f:5c:b3:22:66:5e:c0:
                    b5:9d:48:8a:05:11:c2:cb:35:17:d9:00:b9:d8:0f:
                    18:bc:13:d1:15:f6:34:35:09:1f:57:86:a9:0b:ef:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:5A:88:B2:C8:86:5C:5C:7F:40:B6:15:41:38:71:2E:D5:D6:7B
            X509v3 Authority Key Identifier:
                keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:d5:17:01:e9:b5:8c:84:f4:04:90:aa:84:c3:4c:d4:3f:
         0a:29:ee:42:e4:ca:3b:72:61:4d:b7:2b:32:cf:ce:15:f7:ea:
         dc:c5:0f:27:36:05:db:7e:60:94:f3:3f:a9:8e:68:ba:ef:4c:
         2b:64:be:72:a9:67:c0:f0:3b:28:9d:b1:e9:63:ca:53:f1:fe:
         4b:96:fe:5a:d1:16:1b:0d:38:22:08:6c:17:1b:99:d8:f6:90:
         e4:16:18:7f:b4:45:0c:a5:20:93:80:9a:f6:ca:16:1f:97:67:
         80:73:6b:af:c6:31:ff:a9:a9:85:4d:ad:e7:bd:1d:c4:05:5d:
         67:0f:bc:ad:a5:52:a1:b1:02:68:ce:64:b4:2c:b8:51:56:94:
         72:c4:8f:c9:48:ad:24:c6:ba:af:8e:28:dc:39:8f:0a:af:19:
         7a:e4:15:0f:cc:af:91:e0:0b:71:04:e8:af:fd:37:ae:8a:7b:
         7e:4a:b7:3c:95:f7:b0:60:ff:6b:a7:99:69:73:e7:34:7c:42:
         f4:f4:55:a7:df:d8:07:22:b6:49:9f:6f:a9:4c:0c:97:c4:37:
         29:8f:9c:ec:ab:9f:fd:54:5c:04:5b:db:e7:60:9a:db:89:64:
         bb:bb:be:be:b4:2a:4a:8a:1a:87:ec:b5:ae:e6:15:b4:f1:a5:
         f5:16:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:29:30 2024 by rpki-client on console-fra.rpki-client.org