Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File:                     YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier:          v+VJcPiF4nBr+ZjvijyEjE/eg7QUTUxWfyZ+kPpbeKc=
Subject key identifier:   72:5F:AF:69:D5:F2:94:E5:97:18:3C:12:70:11:CA:B2:03:6E:F7:CD
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer:       /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial:       0193512B84D0335315F9B1B5F41FEF520042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 00:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:26 +0000
Files and hashes:         1: 3IZT_q9np-bsnycB_W2wN_7HTnw.roa (hash: U2uZdsQBN/FogVAjv2xmiwaTa/hjSUeLHVGfOkRhNqs=)
                          2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: +GfYbpomr54G64D4JqUDeMV0zHGWXBfynb0ETPp4fs0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:84:d0:33:53:15:f9:b1:b5:f4:1f:ef:52:00:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
        Validity
            Not Before: Nov 22 00:00:26 2024 GMT
            Not After : Nov 23 00:00:26 2024 GMT
        Subject: CN=725faf69d5f294e597183c127011cab2036ef7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9e:12:cb:b9:07:44:98:e1:3c:8e:82:ad:98:
                    54:34:f8:cb:82:de:3d:ce:5c:51:17:40:be:5f:f7:
                    64:1f:60:46:14:20:b7:41:eb:d8:cd:97:1c:ca:9b:
                    50:9c:b4:df:51:ae:5a:9d:be:ee:16:d5:e7:90:8f:
                    af:ad:85:c3:29:24:52:dd:36:e4:24:6e:ea:28:f7:
                    8a:00:41:95:32:13:38:6e:c3:11:56:4c:a4:01:6c:
                    bf:58:45:12:18:2a:2f:cb:34:9e:87:db:90:1f:3c:
                    4f:ad:13:c5:bc:24:6b:9b:3d:73:81:a4:5c:1d:32:
                    73:48:2e:b5:2a:6f:6d:b3:4e:5f:ed:ff:80:e3:54:
                    07:03:18:2b:61:17:24:58:13:54:70:bf:99:0f:0e:
                    7f:4f:a0:d2:0b:97:20:58:3c:7f:9a:e9:8e:76:aa:
                    9f:16:3e:a2:4d:43:53:eb:07:40:f2:db:47:5e:88:
                    f1:ad:ec:5f:55:e7:bb:b1:37:79:04:33:db:8c:e6:
                    2f:10:5e:18:02:c1:76:4f:a3:2e:36:55:a9:7d:a7:
                    e0:54:02:b0:b1:9e:f8:33:c8:c1:0f:1d:79:e3:bb:
                    c9:05:fd:6f:13:ab:f9:d6:f1:01:6a:c4:ab:27:db:
                    eb:56:e3:90:f5:19:b8:fb:f8:e5:ce:eb:b9:37:ef:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5F:AF:69:D5:F2:94:E5:97:18:3C:12:70:11:CA:B2:03:6E:F7:CD
            X509v3 Authority Key Identifier:
                keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:02:3d:0f:cb:02:35:57:43:8a:4d:79:75:d1:f9:fc:16:d2:
         2a:eb:53:2d:e5:c1:97:df:7c:b2:5b:1b:27:58:af:1e:f8:ad:
         ad:e6:2c:ff:7a:df:1b:24:0c:dc:d8:c0:9a:96:5f:b6:38:87:
         dc:f9:8d:40:09:23:ef:76:ab:d2:54:53:ce:52:f5:3b:c7:05:
         5b:c0:78:c9:ed:b2:37:10:68:77:86:e6:d4:40:0a:da:6b:67:
         ac:5c:07:de:9b:17:98:b5:1e:99:24:ab:e9:df:be:70:2d:6d:
         8e:b4:20:6b:1b:b1:fd:6d:ce:2f:f0:d7:1f:2e:78:da:dc:c1:
         4d:0c:a7:a2:5d:92:af:53:d6:d8:15:82:5e:78:30:e9:8b:69:
         60:6c:75:e2:e4:2a:7c:01:30:d4:65:89:a9:42:77:a4:b6:cc:
         28:25:d8:d9:19:c5:0f:ba:59:12:19:54:06:43:f1:a2:89:2a:
         25:5a:2b:7a:fa:6b:0b:a2:4f:03:58:27:72:71:8e:dc:06:6a:
         a7:90:14:3c:7e:d8:4a:78:b9:c5:a8:33:b0:e9:36:ec:59:b3:
         1d:ad:3c:dc:90:44:dd:04:8b:a1:1c:e7:2e:ff:8d:c5:46:b2:
         d6:07:d7:0b:62:f2:25:28:f3:b3:2a:58:57:ed:a9:f6:3d:da:
         ff:38:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:40 2024 by rpki-client on console-fra.rpki-client.org