Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File:                     iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier:          5QHNZJULnrcY4Ku/Y28sqqKV358gqPl4QMWX6aAUuAk=
Subject key identifier:   2A:D5:E6:36:0D:EB:5C:E9:5D:7A:2D:EF:66:B6:D1:D9:02:6C:A7:0F
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer:       /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial:       0193696ABAE485BBB8D0108AD77CE5DAE528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number:          1250
Signing time:             Tue 26 Nov 2024 17:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:22 +0000
Files and hashes:         1: 8QxX58LGwmGQ2m6v52VAVTsLIRM.roa (hash: CByZ7tVcU3yONGO+TI9t+ETXK67Nhm/vsR6+y81aHKw=)
                          2: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: uzqcFESRzas4GoBB17NaBAF4NbJ4qtlptBzMOfIeA0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:ba:e4:85:bb:b8:d0:10:8a:d7:7c:e5:da:e5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
        Validity
            Not Before: Nov 26 17:00:22 2024 GMT
            Not After : Nov 27 17:00:22 2024 GMT
        Subject: CN=2ad5e6360deb5ce95d7a2def66b6d1d9026ca70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:1e:d8:43:1d:d2:5c:45:38:04:da:79:84:
                    8d:b9:be:be:cc:38:1a:56:4d:7c:1e:94:25:8f:1b:
                    0a:d0:d7:ff:4c:dd:8a:7d:5d:96:e3:da:e6:ec:d9:
                    3b:14:cd:8d:c6:07:d7:69:9f:4c:e3:2f:8a:73:80:
                    e7:57:bd:37:b6:d8:e4:d8:74:1e:ee:cd:82:80:b1:
                    e2:6e:08:e3:20:d3:ff:10:9a:fa:d9:74:dd:e0:e9:
                    53:fa:8b:1c:fb:25:b4:a4:ee:9b:17:58:5d:d9:f2:
                    8f:f5:01:76:08:2a:b2:28:bc:0e:07:23:77:9a:55:
                    a6:43:4a:05:4b:cd:75:38:41:bc:67:dd:81:d8:ed:
                    93:c3:2e:80:91:f4:56:5a:55:14:5d:97:4b:78:8e:
                    4a:78:8b:0b:b7:a1:77:c6:e7:10:14:c3:50:81:e8:
                    10:d0:23:a0:1e:85:66:4d:8c:a7:55:3e:03:10:67:
                    ff:ce:bf:7a:a2:4f:13:9b:74:36:5e:d9:d6:a8:fc:
                    8d:85:95:05:fd:fc:5f:9b:29:d0:b9:c2:0e:77:15:
                    ae:65:3c:9c:fe:e9:70:31:2a:48:48:f9:9d:c8:67:
                    aa:17:eb:69:f7:f0:32:dd:1f:be:44:c4:11:e3:95:
                    4e:ad:39:31:63:3a:d6:8d:ab:6c:e4:85:ff:ba:67:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D5:E6:36:0D:EB:5C:E9:5D:7A:2D:EF:66:B6:D1:D9:02:6C:A7:0F
            X509v3 Authority Key Identifier:
                keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:12:62:2d:62:30:87:15:d8:ff:18:94:6f:12:ee:88:fb:32:
         1f:92:3b:4d:d5:df:c3:01:17:ed:be:81:31:35:3c:15:96:3d:
         f3:4b:39:ef:b1:83:fd:d0:df:7b:f4:9c:43:42:98:72:eb:79:
         9b:f1:79:18:a4:f8:d3:27:a2:f1:22:55:9c:2d:d1:23:b1:1e:
         5e:fd:28:5e:0f:9e:8b:22:4b:0f:a2:92:e3:d3:8f:8e:ee:49:
         4e:8c:9c:93:35:f4:1c:3e:53:ce:6e:bf:98:f8:62:ce:ae:d5:
         52:86:0a:a1:04:44:62:0f:fc:9b:75:f2:cf:d5:79:45:0d:8e:
         6a:88:e5:8d:2f:1d:38:ed:8d:79:1a:c1:31:fc:ac:12:ff:92:
         59:ce:96:84:af:5e:3d:7f:df:e5:b3:3e:0e:80:7c:22:e8:f0:
         16:3e:5a:df:16:3e:f8:0b:bd:69:35:5a:5e:88:98:f9:dc:84:
         82:52:32:ca:73:bf:2b:cb:27:87:31:e8:05:43:8d:56:2b:ba:
         b8:60:4d:da:b8:d5:8d:67:2a:a1:ef:a3:93:44:de:52:2b:7b:
         37:88:c8:31:0f:a2:76:fc:0a:96:9f:d1:f5:5c:d4:3b:a1:dd:
         2e:78:cb:17:98:7f:62:c5:68:ef:62:9b:f6:35:02:7f:f0:81:
         1c:5e:b3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:48 2024 by rpki-client on console-fra.rpki-client.org