Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          qnKX8iiBhG1zrbZGsdpsk+0DbRy8PESVtW58auPHooA=
Subject key identifier:   2F:05:EA:43:30:1F:89:4C:F2:72:49:FB:4B:33:E7:3D:D1:C7:5A:9B
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       019352E2F506A595B23CEFA37D52724A4A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          0F41
Signing time:             Fri 22 Nov 2024 08:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:25 +0000
Files and hashes:         1: 0oyvQSskKLURMU5--71GY_qY1Rw.roa (hash: FhWGFi3zT3MjfU9qoqVGUVoaCnDp7KJNtgGP2EcinAs=)
                          2: 9cgOLKHfBXic18SWWWVJ8dJVKC0.roa (hash: bxoYgPgCFjPlDgxzdQn5McCph4gAeiEInaVog9CmMIo=)
                          3: EUYojsM_UYTGlrZ6mf-a5TsQFZA.roa (hash: aLTxnlgASWXFYhQlZmK8H+2Q/4L2/1ABtpqF/ApI7J4=)
                          4: JMqQz0LyPug8Lw4hPe9xOo4XAyU.roa (hash: 3JW6orhnnIvCohVO2P4d9w/jJ8zYGWP8qYjsk3B7usw=)
                          5: OVcwLzmEoq7QAL7yFFIHm__VAaQ.roa (hash: 4KssxDPsEYHWQkjwfg8GRg5pUfld+uJPm/ZFcZ/8DJE=)
                          6: Tu7NZ30dtxbwVPsJlvyacbPc_5I.roa (hash: 9Gb+XvdJENFB5jV+1uMyQTyodhdB8qO4zxB8LVDUs/I=)
                          7: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: wRFJV63WvkO726JquxpNvrMtKA2bpjMbhxtmLivIg+E=)
                          8: qdXpP05s74FO9hlbbVDcABSp780.roa (hash: ZgDAbazhF8k+7N5LYBQwrkdf/Voy1fK7gZyvRKnirnM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:f5:06:a5:95:b2:3c:ef:a3:7d:52:72:4a:4a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Nov 22 08:00:25 2024 GMT
            Not After : Nov 23 08:00:25 2024 GMT
        Subject: CN=2f05ea43301f894cf27249fb4b33e73dd1c75a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:4a:c2:9b:db:55:ec:67:32:35:dd:9d:dd:
                    67:c0:71:fc:56:e3:8f:37:3f:81:71:2f:71:91:5a:
                    89:f3:77:b2:c8:24:dd:db:ec:38:86:ce:dc:cb:14:
                    e1:93:91:44:11:4d:51:a4:22:48:11:6e:7b:6a:61:
                    4a:fd:f7:9d:df:72:ae:4b:21:a1:93:06:ce:ab:5d:
                    63:c2:f8:d2:1a:25:9d:71:74:c9:58:4f:0b:34:c6:
                    fe:10:fb:cb:37:e7:71:c2:47:e9:32:4c:e5:30:4a:
                    9a:23:1c:02:0a:07:79:82:2e:e9:e5:09:5f:53:80:
                    f4:e6:42:c7:2a:a0:fe:09:0c:43:98:58:50:7f:dc:
                    d6:f6:ea:c7:74:e0:75:53:a8:0e:cf:33:5d:0f:33:
                    3a:87:c6:30:02:57:15:4d:c6:39:57:07:c1:91:19:
                    09:38:7a:36:f6:a0:13:75:f5:42:8e:c3:4f:90:52:
                    99:ac:88:8e:04:a5:65:99:5b:d7:a8:32:71:80:75:
                    ca:74:fa:aa:75:29:89:12:48:59:92:f9:3e:ac:ac:
                    76:f0:5a:e0:6c:e5:c0:ee:9a:b0:89:0c:ba:02:45:
                    e5:79:96:a9:8d:47:2c:45:4f:cc:e5:07:cc:6c:2c:
                    7a:c6:ff:39:10:0e:1e:0c:ab:04:04:31:4f:9b:71:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:EA:43:30:1F:89:4C:F2:72:49:FB:4B:33:E7:3D:D1:C7:5A:9B
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:66:b2:f4:02:53:b0:c6:3d:35:f8:37:e1:24:0b:eb:4e:b9:
         b4:1f:0d:50:21:81:03:73:c4:9b:2e:48:c6:18:6e:c2:4a:3d:
         70:81:6b:06:f0:5a:9e:44:df:5e:39:f7:18:87:10:43:76:d7:
         ae:5c:53:1c:5d:7c:8d:a7:58:b8:27:30:fd:14:60:79:23:99:
         a7:28:6f:ec:8a:7d:8d:ce:33:2d:7f:31:a9:8a:96:fb:80:c1:
         e1:24:22:16:08:ed:88:d1:6b:4b:eb:5e:8f:20:92:d7:f5:27:
         2f:2b:82:95:ec:56:5f:52:83:d2:b5:db:b8:a0:31:9a:ba:c0:
         05:49:68:fb:27:a5:1e:8f:3b:3d:a5:d0:39:35:a4:70:e4:07:
         3f:eb:da:ee:80:b1:d1:71:6f:c1:f1:53:58:fe:8b:2e:54:2c:
         88:24:60:e5:25:ec:59:74:05:f0:bd:aa:71:5a:7d:82:34:02:
         e8:7f:5b:18:1a:b9:98:b3:08:e1:64:6e:dc:23:c6:46:f6:94:
         e5:89:63:04:58:f5:ba:42:55:71:0e:1b:d1:87:0d:69:05:69:
         4c:f1:29:53:ae:c1:63:17:2e:67:83:0f:0f:e0:98:de:29:e3:
         21:57:c7:44:ab:41:5b:c1:dd:51:7d:79:fa:85:24:48:e0:13:
         7a:40:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:39 2024 by rpki-client on console-ams.rpki-client.org