Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File:                     y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier:          JzMHYhDzAMJSkEWNikkXUP8VxlqitJGYGehigodYPiA=
Subject key identifier:   75:B5:A5:5A:D2:33:EA:51:A0:F1:78:1D:98:02:68:5D:21:68:8E:D3
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer:       /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial:       01935576ACC9F081C04C3CEE65BD5E859451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 20:01:01 +0000
Manifest this update:     Fri 22 Nov 2024 20:01:01 +0000
Manifest next update:     Sat 23 Nov 2024 20:01:01 +0000
Files and hashes:         1: Ey0Vqi-HSMICIeEnFC0Urc0NUHs.roa (hash: fKAZXhgelfKzQ2dTa3P+6ItKGajikTjBVU6CfQQQHZw=)
                          2: IGtUyXfbx-VgO4biw_XwLSvX84A.roa (hash: 7kSj7JKtVz1msWHcYT2wkN/CnwnicTPTc5oWRGPDXXo=)
                          3: Jj1DpcFrDlbzGtwAFFUJJSz6ReE.roa (hash: 9/0IyIXWmnALxHrtFCPa7tgMfXmyupTu9RsmHhickXg=)
                          4: LGCvLogDJREBijrhjEoqGxVrbgw.roa (hash: w455qMW9bNqPvvPcOy4Ry0eWu4o3tL/QL9LzTHcNkq4=)
                          5: avu7UkLqytzMIWSoVTtsL0ORPOo.roa (hash: Vn0JhzqiRxKsDpg6T1/RBzPPBJnGxr68uyg+pnO1VJg=)
                          6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: bQ8gwE4ST9oEJT7uDRq24tTVT8cRu0AbkoXUJaAwguc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:ac:c9:f0:81:c0:4c:3c:ee:65:bd:5e:85:94:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
        Validity
            Not Before: Nov 22 20:01:01 2024 GMT
            Not After : Nov 23 20:01:01 2024 GMT
        Subject: CN=75b5a55ad233ea51a0f1781d9802685d21688ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:24:d1:6c:fd:a2:d6:20:35:ea:b7:56:07:
                    28:72:22:22:fa:46:3a:24:ad:d6:a0:75:62:c2:a4:
                    b2:38:8c:2c:e9:83:4f:d0:6b:f8:ad:63:ee:1f:ad:
                    d2:17:da:a7:1b:08:a6:2d:87:42:86:8a:7c:9e:94:
                    20:16:bd:52:7e:f7:ce:1f:c7:48:0b:c3:83:4f:a8:
                    0c:de:fa:cf:d4:2c:45:eb:d4:c7:c5:2b:b5:52:60:
                    35:3b:27:54:d2:16:ba:19:55:bb:4b:9f:d4:9e:e1:
                    c2:1f:a2:51:81:95:de:e6:61:06:7c:98:8e:5f:12:
                    e4:65:7e:16:3d:78:46:71:56:18:84:f1:32:d3:91:
                    1e:b4:12:73:8e:e9:81:f2:e4:87:06:34:68:61:61:
                    f5:63:0c:1d:38:19:74:d6:f6:8c:49:29:ca:32:36:
                    12:a6:a7:a8:c2:5d:2a:7d:79:41:d9:04:20:b3:df:
                    45:46:25:a4:40:e1:71:bc:8c:b4:b6:d1:8c:5a:8f:
                    82:9f:46:02:9b:2c:54:43:6f:4d:db:49:51:8c:63:
                    12:5d:a7:8c:5c:47:9a:b1:67:87:59:96:bd:0c:3c:
                    3f:91:68:6d:24:9b:31:e2:b3:b6:ac:bb:26:be:04:
                    b5:33:4a:b4:fe:67:42:25:9e:5a:d1:bd:5e:19:fc:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:A5:5A:D2:33:EA:51:A0:F1:78:1D:98:02:68:5D:21:68:8E:D3
            X509v3 Authority Key Identifier:
                keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:25:b6:8d:ea:c7:92:01:20:1a:8e:9f:cc:0a:a9:31:ff:
         10:4b:b8:4a:a1:94:61:3d:f8:6b:19:c5:a3:1a:6b:61:02:98:
         aa:65:8f:4e:cb:68:ff:cd:c5:7a:ae:54:1f:91:c7:1b:d5:a7:
         4c:0e:bf:c5:1a:56:6f:66:3f:ca:72:f0:90:fd:b3:3d:49:ad:
         65:b6:30:bc:b2:ac:e4:3a:d0:59:6f:e0:1e:66:c1:20:f2:14:
         f0:e5:1f:0c:86:02:a8:e2:4c:de:28:a4:08:08:a5:0d:6c:ac:
         6a:44:c8:54:9b:42:f6:b6:ed:ab:cb:56:a7:aa:85:32:ec:25:
         d3:84:39:d4:d7:d2:8b:8e:db:1a:ff:0f:15:79:e6:6e:c6:81:
         bb:ee:ec:49:d1:e0:eb:0e:09:a6:8a:e3:b8:ed:3b:f7:e2:88:
         51:c8:99:30:d8:72:71:c9:da:2a:8e:55:2f:57:9a:b7:43:65:
         d7:fa:9c:cd:ed:8c:03:38:79:97:d6:22:da:35:22:d7:1a:24:
         d3:23:54:0d:ed:ed:57:98:da:ba:51:8f:82:eb:a1:a6:00:4f:
         a3:15:6d:4d:a1:1f:61:68:ca:f0:5a:34:26:82:06:14:13:3d:
         87:61:8c:7a:02:9a:cd:9a:6f:40:43:27:e3:88:40:72:f2:95:
         76:06:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:09 2024 by rpki-client on console-fra.rpki-client.org