Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File:                     yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier:          oM4mQmx0ZxXmpWV6Xs1ZGUHXW07mp0gLvilVJ/gHS+w=
Subject key identifier:   7F:30:C3:01:29:9D:5E:AA:69:62:17:AC:B4:4E:C9:FE:69:B8:25:F6
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer:       /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial:       019351D0BE652FDFFD31FD587D18418B4640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number:          01C1
Signing time:             Fri 22 Nov 2024 03:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:54 +0000
Files and hashes:         1: _4feJt_t3NEHL0Z99_1tPOCeSww.roa (hash: ZNrLa6LiQoSGKGiCcV4rT0+Jpw5ep09iBum4Gs6YUt4=)
                          2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: O1N0m/43io8g2Gga/rlK+3B2rJhp7s5h7ofvcmdCJIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:be:65:2f:df:fd:31:fd:58:7d:18:41:8b:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
        Validity
            Not Before: Nov 22 03:00:54 2024 GMT
            Not After : Nov 23 03:00:54 2024 GMT
        Subject: CN=7f30c301299d5eaa696217acb44ec9fe69b825f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:48:ec:26:96:e2:e7:d5:67:a0:4c:ca:cf:
                    06:33:c4:d5:05:34:0e:3f:12:f5:10:f6:3f:a2:95:
                    91:3e:4f:93:da:85:b0:5e:3c:f1:be:66:d8:db:99:
                    d0:1e:2e:b0:58:e8:34:bf:e0:5b:79:33:37:f3:b0:
                    d9:69:7e:97:41:ca:a9:cc:ee:63:27:08:57:a9:61:
                    57:e0:90:33:59:ab:5d:2d:77:16:e5:fb:5d:47:96:
                    f1:f0:69:04:c1:d1:fb:98:d4:d1:31:6b:fb:7e:ff:
                    b9:2e:29:02:ad:2b:50:c4:cc:15:35:bd:a1:8a:96:
                    ca:14:ed:0d:25:f2:bc:67:92:c0:f0:ef:ce:ee:a5:
                    d5:7c:37:c4:65:ed:5a:2a:76:c8:b7:c8:a0:16:17:
                    c7:9c:7d:5c:b2:8e:ad:f6:a8:2d:83:5f:c4:28:0f:
                    b0:d8:d5:0b:09:ed:d9:ab:73:d6:fe:ae:af:18:5c:
                    4f:e9:2b:00:b2:74:c0:8d:13:b3:3c:9f:f2:fd:08:
                    b3:9f:59:d6:3b:bd:16:3c:30:d5:3c:2f:02:04:72:
                    7f:67:ff:d4:39:77:46:ee:e4:35:69:5c:58:39:37:
                    59:cf:bf:32:99:29:89:6f:92:59:50:95:51:04:c7:
                    c2:25:b4:16:f5:df:6d:cc:ab:23:d4:f0:67:08:e9:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:C3:01:29:9D:5E:AA:69:62:17:AC:B4:4E:C9:FE:69:B8:25:F6
            X509v3 Authority Key Identifier:
                keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:62:fb:a3:43:55:b2:a8:d8:9d:d7:ac:d5:58:f1:79:0e:
         89:f5:47:48:2a:c3:fa:68:ef:70:3b:c2:a6:6a:f2:89:b4:39:
         c4:44:1a:20:2f:ef:87:5f:9e:40:ae:79:c4:e8:59:07:65:b5:
         1b:3e:4f:bd:0e:3a:55:e3:ff:f2:53:2d:01:7b:35:e1:c6:c4:
         82:2c:94:45:1e:02:f3:10:80:39:14:53:7f:4e:8b:ec:fc:a1:
         79:26:61:50:f0:70:35:02:25:1f:50:49:f8:10:5b:89:46:ce:
         3c:1a:8b:ab:f4:fd:84:8e:d9:1e:5f:20:ac:f0:90:92:a5:ad:
         d9:fe:0e:9d:58:b0:97:d4:f2:fe:e6:48:43:60:6d:bd:4d:22:
         86:2e:22:ee:12:fe:b2:1d:34:cb:06:9f:88:a7:42:f2:68:5d:
         5a:75:4f:7e:26:92:49:44:a8:f7:f4:61:c2:60:b8:8e:c3:94:
         f9:74:13:79:ff:59:5d:c0:f2:80:89:be:b5:c5:2b:05:8b:71:
         28:c3:22:1f:43:1b:fc:1a:db:57:55:24:16:3b:51:70:d2:89:
         05:6c:78:ae:3e:89:26:65:70:f6:1e:ac:a0:2e:b4:04:53:04:
         7e:a2:da:e3:28:51:cd:eb:95:0a:a4:e9:09:ea:44:10:63:ed:
         64:dc:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:38 2024 by rpki-client on console-ams.rpki-client.org