Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          INi5p71t6HeUPudS2mKS/b7CYA/zTK+bqe3xBz5Mo6Q=
Subject key identifier:   93:43:24:EF:ED:AA:1C:7B:38:37:6C:CC:DA:5D:4F:E9:CE:AE:E8:25
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       0193512B6FA34D2E3654FF789F12745D6689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          0C19
Signing time:             Fri 22 Nov 2024 00:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:21 +0000
Files and hashes:         1: Ne6N-hwSPPCXOB8vueVyXlAfWd8.roa (hash: kDuKUnFulvMmoG+X1Cr4d107zp848NrW0Eyb0wzF7+4=)
                          2: elbk19OAExa8Bf5Z3NPRVmT_3iA.roa (hash: KUkK1sYh7tONb5QjJPQj4O1IK6fOfEG9tKjL/4rH1yk=)
                          3: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: +EOLM5IuwVYTuelcUakWOTC/VE/lRqpzy2kPYLmjdbg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:6f:a3:4d:2e:36:54:ff:78:9f:12:74:5d:66:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Nov 22 00:00:21 2024 GMT
            Not After : Nov 23 00:00:21 2024 GMT
        Subject: CN=934324efedaa1c7b38376cccda5d4fe9ceaee825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:94:9c:b8:25:2b:cc:40:3c:6d:2a:58:d8:
                    4c:18:72:bd:06:50:6b:1e:c8:45:cd:40:1b:8f:06:
                    09:28:5e:a0:dd:c8:9f:83:5c:ef:14:2d:d2:c8:59:
                    1a:0c:20:3b:2f:ca:d6:d8:8d:dd:1c:96:56:3a:54:
                    4b:11:0b:8c:bf:44:8b:5e:39:03:a4:71:58:61:38:
                    ae:14:0f:17:f0:d6:c2:cb:19:d5:5d:52:37:93:70:
                    fc:a8:c7:e8:d9:73:0e:21:4d:3c:39:13:d7:ed:24:
                    22:a1:20:47:2c:a8:f2:62:e2:d8:d4:29:b6:03:db:
                    4c:28:bb:f3:46:ab:d4:48:51:76:2e:74:8f:f7:a0:
                    ff:7c:57:c8:88:7a:16:9f:3c:8a:28:c1:39:4c:89:
                    45:f6:14:ea:81:f6:69:aa:c4:71:7d:96:d5:dd:d7:
                    c2:0c:ad:8e:32:9d:b5:e6:08:46:4f:9a:b1:62:b4:
                    6b:bc:38:37:ae:79:fc:b2:3c:33:8b:0e:69:40:ac:
                    87:06:d3:19:97:f4:b9:f9:08:3c:82:00:79:de:40:
                    db:b2:d3:f5:6a:6f:2f:41:44:0d:0a:79:c6:c3:48:
                    76:c5:de:29:16:28:ca:26:5c:94:22:12:9e:b4:d6:
                    66:37:f8:76:a5:83:ae:d9:19:23:90:58:9b:67:fa:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:43:24:EF:ED:AA:1C:7B:38:37:6C:CC:DA:5D:4F:E9:CE:AE:E8:25
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:10:99:8a:a9:0f:df:2f:99:da:bc:fd:5e:df:74:41:3d:b8:
         77:d5:98:50:0f:a9:00:d8:f4:97:49:ba:03:f4:29:83:c4:44:
         e4:d5:da:ce:ce:17:b6:33:64:67:7f:cc:35:c6:4c:1a:2c:ea:
         80:fe:1c:b8:d4:a1:7a:66:1f:62:65:11:11:38:87:0c:b7:72:
         60:8b:68:ef:c0:c0:55:06:95:53:f5:48:69:ed:8c:85:cf:36:
         83:21:81:e2:7c:ef:be:2f:1a:40:91:75:e4:fd:82:39:8f:bd:
         be:97:ac:01:f5:9b:d6:32:e5:11:94:10:79:d2:f0:12:3f:03:
         dd:8d:55:89:f9:16:1d:6b:b9:d1:d7:da:27:29:22:26:d9:b4:
         00:9b:9b:c5:0a:4f:0e:dc:56:59:b5:df:39:69:9e:7d:b3:53:
         e1:cd:42:03:b1:02:d0:ca:95:a9:19:fe:42:dd:cd:02:91:ca:
         aa:a9:c8:79:97:e9:5a:25:ef:81:17:66:01:bb:9a:10:fe:cb:
         e3:c1:1a:23:eb:d3:a1:2d:d9:8b:72:55:58:52:7f:0d:b8:5e:
         fd:7a:87:53:1d:10:79:f0:ec:64:82:95:fb:d6:87:8b:da:5b:
         cb:e6:c0:6a:f6:be:4a:13:4b:22:5b:b7:e5:64:35:8a:f5:fa:
         80:11:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:52 2024 by rpki-client on console-fra.rpki-client.org