Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File:                     GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier:          r6yn35nLX/WAyOLcWHgLL7AqhQah1GHEJfiF46y6J5c=
Subject key identifier:   5A:9A:D7:84:68:7F:EE:0F:72:6F:5B:B9:D3:D9:ED:65:05:BB:B0:F8
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer:       /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial:       01935952E8FFACC17423B3961B2980D21C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 14:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:25 +0000
Files and hashes:         1: 1-Q4pDvmpZIPP7TOHf6tcH9MxxPI.roa (hash: nVDZ84mR+NQHTVdr+CQKvDdTotonDBXu00EF1uw2K+s=)
                          2: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: 49TOjP1wHeygwk5qb58pENYIKF0r0ivFIJ7shSYxeIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:e8:ff:ac:c1:74:23:b3:96:1b:29:80:d2:1c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
        Validity
            Not Before: Nov 23 14:00:25 2024 GMT
            Not After : Nov 24 14:00:25 2024 GMT
        Subject: CN=5a9ad784687fee0f726f5bb9d3d9ed6505bbb0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:19:ee:d8:52:80:64:e3:5b:c2:8c:e7:66:
                    76:77:11:bd:7d:cb:ba:1c:0e:c4:1a:ca:72:af:e3:
                    1d:41:24:a5:fe:52:3e:e5:f4:d2:9b:87:2f:41:9b:
                    6a:6a:79:8c:c4:77:12:24:76:d3:ae:5f:46:ae:f6:
                    2e:74:09:06:2a:53:ce:6c:6b:44:da:87:0c:86:9f:
                    01:a3:cf:75:f3:d5:2d:99:f1:91:2e:e3:5c:95:61:
                    90:2a:32:99:68:b8:5e:13:9a:0c:4f:69:db:3b:80:
                    ed:99:09:e2:f7:0c:45:3c:40:4c:80:c1:38:61:6d:
                    04:29:16:65:e2:09:b6:84:0d:94:0f:0c:51:03:4f:
                    f7:db:8c:8f:82:29:ac:53:ad:33:71:a7:de:d8:d2:
                    f8:a6:c7:95:b9:03:81:f6:aa:ef:80:ca:1e:96:d4:
                    a5:c1:d6:38:e5:70:e3:7c:0f:53:10:94:b4:78:42:
                    f6:7a:12:76:f7:ab:aa:87:a8:27:e8:4d:4a:e7:46:
                    31:bf:bf:94:f8:fb:ff:0f:3a:66:3b:da:3c:73:c9:
                    20:da:9d:9b:1d:67:63:22:81:94:c1:6c:d2:bd:1a:
                    86:b1:d2:e6:84:cc:5b:90:7f:ed:4b:bb:01:8f:25:
                    12:71:c0:5d:03:77:0b:33:ca:72:c0:47:42:7c:e0:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:D7:84:68:7F:EE:0F:72:6F:5B:B9:D3:D9:ED:65:05:BB:B0:F8
            X509v3 Authority Key Identifier:
                keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f3:0b:9a:b0:1f:f7:b6:58:ec:d6:c3:ae:3a:d8:c2:54:1a:
         76:75:59:ca:8a:31:31:a9:80:58:0d:82:d5:d0:cf:e3:28:ab:
         b8:d5:c2:f9:13:a1:a9:1d:cc:d2:71:7b:08:9f:36:49:cf:6e:
         5e:53:a7:8e:b0:73:58:b3:6e:cd:9a:61:79:d7:60:2c:a7:02:
         ee:90:be:f0:52:a3:b7:17:8a:27:b5:35:4f:8f:3c:c1:a5:4b:
         6d:61:ec:b3:d6:48:d5:d1:c1:2a:b9:44:21:df:0d:ba:b8:56:
         2d:b6:5e:a1:25:36:f1:87:d1:b9:1c:49:90:03:0b:30:2b:7a:
         01:dd:1a:56:b9:b2:bf:6e:f7:b5:7a:39:2d:10:8d:97:23:b3:
         b9:8f:b3:29:6d:e1:93:7c:73:be:b1:a6:a5:cb:91:5b:fe:15:
         b6:10:5b:be:c6:42:10:91:e0:ec:c4:3c:8d:e0:41:77:b7:39:
         67:fa:27:46:65:50:e6:e4:aa:5e:60:c7:23:d6:7c:7d:ec:49:
         be:8f:6c:2b:6a:99:70:4b:7d:79:cb:7b:f6:0d:2b:37:8a:71:
         33:e3:ee:39:6a:40:f2:a7:15:fd:fa:98:4f:26:6e:2e:8c:78:
         c2:f3:dc:1a:d4:87:2b:0c:80:f1:4c:fa:29:33:ef:43:4b:63:
         cd:63:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:01 2024 by rpki-client on console-fra.rpki-client.org