Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File:                     yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier:          rLKTE4Rc0A1edJIIUEpEMwCsoQxrAckT2vtZQTgX+GE=
Subject key identifier:   F6:3C:49:2E:59:93:64:AF:F3:55:34:03:7D:2D:E6:6C:BC:55:21:64
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer:       /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial:       019234DD185A375680E3E27D5FF4FE23CBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number:          0432
Signing time:             Fri 27 Sep 2024 19:02:37 +0000
Manifest this update:     Fri 27 Sep 2024 19:02:37 +0000
Manifest next update:     Sat 28 Sep 2024 19:02:37 +0000
Files and hashes:         1: BsWRkwvBY6BkDJGJHPVOhDCEw-Y.roa (hash: M9yCRip2jvrSQZMWJ2CAQa3vU6j9jgf8kRiwClpQjOA=)
                          2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: fyChEoGPNsODSjOg9scp7jyeJbeuBBg4HSh88+aKti0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dd:18:5a:37:56:80:e3:e2:7d:5f:f4:fe:23:cb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
        Validity
            Not Before: Sep 27 19:02:37 2024 GMT
            Not After : Sep 28 19:02:37 2024 GMT
        Subject: CN=f63c492e599364aff35534037d2de66cbc552164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:9d:67:8f:bf:a4:c8:82:ec:aa:bb:b2:ee:
                    7b:d4:86:98:56:e8:34:14:83:4c:ae:b6:7f:ab:75:
                    bd:7b:7d:db:f4:71:a0:1b:b1:6e:ba:f6:b1:13:16:
                    a2:49:bd:ec:93:7c:11:1f:e7:9b:23:11:1a:b0:f2:
                    7f:61:94:7d:6d:21:44:e0:ac:7c:6e:2d:6d:86:92:
                    6c:58:a6:47:6d:69:14:91:6d:02:85:cd:01:05:c9:
                    93:7b:d3:ac:38:69:49:8b:ca:40:53:6b:d3:50:7a:
                    dc:14:c8:b8:11:d4:a7:d2:fa:13:59:cc:b2:64:63:
                    4b:2d:36:85:cc:73:1a:76:01:34:6c:a6:6d:dc:d6:
                    d5:cd:76:cb:7c:ab:ee:09:76:81:b9:f5:89:da:77:
                    4b:2f:bf:75:aa:3e:63:48:fa:02:aa:7b:aa:f9:06:
                    90:fb:56:07:ff:dd:bc:f4:c5:f5:59:10:c8:7f:e7:
                    45:72:82:4d:59:a3:dc:fa:f7:72:86:29:3f:58:ea:
                    d8:c2:c6:49:56:fb:e1:ff:87:bf:b7:39:89:ea:c6:
                    f0:ea:ee:7a:a8:19:c5:71:a7:e4:98:18:22:3d:5a:
                    a0:e9:30:b0:8b:df:5d:06:41:dc:0d:90:33:5b:13:
                    37:94:35:02:a1:67:8e:af:27:e6:4a:09:16:4d:fe:
                    ed:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:49:2E:59:93:64:AF:F3:55:34:03:7D:2D:E6:6C:BC:55:21:64
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e5:3a:84:07:6e:40:0e:a0:70:14:90:2f:44:4a:b9:d1:4b:
         2b:76:d2:fe:04:2c:b4:0a:ef:a8:fb:fd:0a:f1:46:d2:37:27:
         28:fc:0a:98:97:f2:00:f8:9a:99:9d:ec:c6:10:ad:76:8d:71:
         9c:e8:f0:d1:9d:b1:c2:69:1a:06:47:60:9a:09:23:5d:94:55:
         65:f4:5d:39:a4:ea:5c:27:f0:b8:2e:b9:6f:6e:db:46:f8:90:
         a1:66:35:0d:7f:50:0c:f9:26:2d:18:36:19:3d:54:5e:4e:0e:
         57:77:38:da:1b:1e:47:9d:52:d4:60:87:14:2b:cf:62:aa:9c:
         da:69:59:0c:9e:e5:40:6e:2e:b1:32:df:36:a4:76:fb:d9:fa:
         89:8e:32:ac:e1:1d:9e:25:16:f3:fa:38:9d:35:50:2e:4a:e0:
         ad:4f:94:8f:de:ff:8a:b2:de:56:8a:57:de:b6:29:35:a5:f1:
         95:be:7f:65:88:c4:74:dc:1a:2d:ed:42:e0:10:64:d7:d4:02:
         ac:63:c5:26:a4:5e:e0:5f:80:c9:b9:5e:de:5d:98:0f:6a:5b:
         94:81:42:e6:36:5b:53:e4:90:b4:4b:5d:87:99:01:4d:18:c9:
         f7:07:bf:1b:35:c8:f5:8a:de:5e:be:e0:cb:d0:22:2d:d0:ab:
         c5:98:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:18:23 2024 by rpki-client on console-fra.rpki-client.org