Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File:                     zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier:          e8WS05qmjooiBwtJi7ytouvTHQPeTJ41Pj0/bDYZ1es=
Subject key identifier:   36:E1:32:02:3B:A1:80:A5:F5:57:60:91:31:52:D2:D0:7C:B2:B7:D6
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer:       /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial:       019359C152709A47399B2D4BE99439D6A9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 16:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 16:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 16:01:01 +0000
Files and hashes:         1: MKK8n36m1oywESMa6bR5-_Fd6JY.roa (hash: ScwPVFHc9mteKST5jWWngkkiSueFxnEmbAW+yVaKLm4=)
                          2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: DAxrA8SEL9GupItAEyFqRnaS6xgd+h1rd1Rbfk+bFVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:52:70:9a:47:39:9b:2d:4b:e9:94:39:d6:a9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
        Validity
            Not Before: Nov 23 16:01:01 2024 GMT
            Not After : Nov 24 16:01:01 2024 GMT
        Subject: CN=36e132023ba180a5f55760913152d2d07cb2b7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:11:41:e6:03:a4:13:53:d5:ae:ff:e9:83:
                    d9:0a:40:86:4a:9e:90:1d:79:40:c6:b3:6c:f8:e4:
                    dc:00:71:45:7d:38:da:cf:53:18:8c:ad:e6:ff:c5:
                    79:5f:a4:dd:f0:9d:78:f9:da:6f:99:5f:27:1a:d3:
                    78:83:59:2d:d5:99:6d:e8:99:55:be:3f:c9:a8:24:
                    30:d4:d0:35:31:93:d4:46:10:0a:8d:44:1f:bf:db:
                    35:a4:c4:f9:08:2c:52:25:dc:a3:3b:bd:a8:76:16:
                    8b:2a:ec:cf:e2:72:29:87:d3:d3:75:69:83:d2:3a:
                    a9:76:1f:3a:f7:79:a3:c4:5c:d3:9c:c0:94:9a:34:
                    1e:3c:f2:30:22:51:e8:ba:f8:b3:ab:05:ce:ac:6c:
                    c4:25:cb:97:a4:d3:6f:43:e1:f5:06:d6:e3:36:d3:
                    4b:0e:a8:f6:d6:9a:07:7c:f7:88:6f:a4:ba:09:b6:
                    a1:dd:16:93:db:ab:0f:ad:4d:db:93:6e:e0:40:e5:
                    14:0f:f5:0f:eb:26:a7:6d:b5:74:8a:99:f4:0d:3b:
                    4d:7b:2a:41:68:54:3e:57:d7:8f:9e:5a:48:87:0b:
                    aa:0a:72:b8:7b:1a:9c:bc:10:36:fd:30:e8:eb:5a:
                    3b:a1:be:e6:ff:f0:c0:fe:2f:33:a8:f7:05:56:ee:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:32:02:3B:A1:80:A5:F5:57:60:91:31:52:D2:D0:7C:B2:B7:D6
            X509v3 Authority Key Identifier:
                keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:13:14:09:8a:13:c2:06:17:19:46:e8:a7:c4:0d:00:5a:9c:
         c0:f3:f1:c0:a5:bd:8b:11:dd:8f:81:0e:c4:3b:35:ac:ee:b9:
         7b:0e:5b:a2:a9:b5:c2:05:c4:5f:a6:57:6d:d3:30:73:87:5e:
         67:8e:45:f6:54:56:98:be:58:5a:79:66:28:e4:21:91:23:59:
         80:c8:e7:b0:7d:09:b5:95:28:82:16:49:cb:b2:41:ea:38:f3:
         81:db:07:27:5c:c2:8c:1f:49:1a:a6:ad:43:27:5e:05:d6:2b:
         cd:dc:d9:47:1b:4e:c9:40:a2:56:e9:40:e9:24:7c:d1:cc:ce:
         6b:d9:b7:0e:00:06:e3:dc:4c:60:26:7b:69:ed:a7:73:f7:b0:
         14:c6:fc:1f:5d:79:1c:21:27:e2:f3:37:59:6f:cb:83:a2:d9:
         da:d8:aa:76:d9:dc:77:d4:77:b7:f8:62:54:de:c6:2c:49:f8:
         70:f7:c5:1a:2e:d5:a3:54:a5:06:6d:e8:e7:26:b9:1c:4d:72:
         9a:64:9b:39:26:44:2d:af:cd:1b:ae:33:d7:cf:ef:f4:eb:23:
         45:07:fc:b2:99:fb:06:19:03:1f:df:42:96:b0:49:ae:58:74:
         89:05:b8:bd:a9:d4:32:6e:15:de:c6:67:91:c9:44:f9:7a:d3:
         1d:7e:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:56:40 2024 by rpki-client on console-ams.rpki-client.org