Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File:                     2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier:          /OD5udVbv6sCrborxz9gB4pyFphDzk1hOPvsO68CK+E=
Subject key identifier:   05:2F:C2:9F:F6:72:72:05:6D:2E:E3:62:59:E6:5C:5B:0C:88:B2:77
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer:       /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial:       01935A67C38A5DE882585C96B9B0230A0F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number:          0C56
Signing time:             Sat 23 Nov 2024 19:02:49 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:49 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:49 +0000
Files and hashes:         1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: bhC9kOQ4s+12JksnDSKMI2XkQOq8ZApotyY4AQwK4cg=)
                          2: 9WPViYLmxngK4PtReNx3CJ--9IA.roa (hash: Ar15Y1TY5gUVu7HKSy3rHb2jNHFtEW6gx+xnw41Hsgo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:c3:8a:5d:e8:82:58:5c:96:b9:b0:23:0a:0f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
        Validity
            Not Before: Nov 23 19:02:49 2024 GMT
            Not After : Nov 24 19:02:49 2024 GMT
        Subject: CN=052fc29ff67272056d2ee36259e65c5b0c88b277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:84:d8:2a:0c:75:e3:f8:7d:2c:b5:d2:03:
                    eb:14:19:84:05:9d:e2:53:7c:16:e6:20:5b:07:63:
                    99:b4:99:7b:05:1c:b0:5b:89:74:66:e4:c9:6a:f2:
                    73:e5:9b:2e:b5:f3:2d:ba:33:70:42:ae:1a:09:7d:
                    4a:6d:ce:61:04:d8:23:f4:1b:71:57:44:32:4d:c6:
                    dc:ab:21:33:cf:94:c2:f8:77:ae:25:b0:91:68:67:
                    15:47:0b:1e:e6:e2:04:a1:4f:50:ec:db:30:ec:ab:
                    8b:5c:a7:a2:d4:b8:2d:ef:d1:51:17:6a:b9:1d:64:
                    8c:e9:e4:f2:62:f8:5c:5e:77:92:e9:e9:32:f3:b0:
                    58:06:ec:99:23:67:79:a6:af:75:99:89:f5:31:c1:
                    c7:3f:3e:4f:da:ae:11:40:e2:00:53:f7:21:4d:84:
                    f5:7b:b5:2b:b3:7d:e7:8d:b3:ff:fb:e6:64:af:db:
                    3f:86:7e:e6:53:4e:cd:3b:17:44:1d:a4:7e:24:f6:
                    00:11:b0:10:10:a9:b3:bf:4c:a4:2a:d5:dd:ee:02:
                    42:3e:f7:21:bc:27:f4:e3:c2:39:0e:17:90:ce:40:
                    11:68:77:c8:ee:a0:42:5d:5d:85:fa:35:75:87:d1:
                    e1:68:5c:d1:05:1e:42:87:5e:1d:93:ca:1e:c7:5c:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:C2:9F:F6:72:72:05:6D:2E:E3:62:59:E6:5C:5B:0C:88:B2:77
            X509v3 Authority Key Identifier:
                keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:16:ae:69:af:0e:aa:f8:35:d7:05:92:e2:72:4a:64:b7:c5:
         94:5b:ef:24:de:8d:b5:f0:ac:a0:99:38:af:ae:c6:90:1f:5f:
         a9:9a:4a:e4:ac:39:63:6c:0c:a8:fa:ab:14:f7:8a:71:8d:73:
         73:5e:27:3a:bc:f2:ca:0b:33:80:bf:38:35:73:32:b6:3d:bc:
         2c:e0:9a:7d:1f:4b:6e:05:b5:cd:49:e1:f9:2a:1e:05:f1:3a:
         d1:18:06:ca:43:0d:46:38:55:33:d6:b6:23:cd:fe:7d:3e:26:
         c4:1f:cd:13:9c:cb:11:39:6e:ec:13:93:2f:6e:f5:4d:9a:72:
         4e:7e:d4:9e:63:c3:e8:ef:95:22:b7:ba:52:de:26:3c:b6:5e:
         0b:1a:db:d5:26:fa:a0:d3:77:75:6b:fb:7b:42:1d:00:9a:83:
         86:4c:d6:df:c7:04:92:a2:57:af:dc:54:02:0d:0f:61:e2:3d:
         e5:1f:64:ad:4f:25:30:bb:2c:43:f0:fb:6f:f3:2b:50:94:37:
         cc:ee:3b:e2:1e:c9:89:6b:21:5b:05:f2:e3:b0:b4:22:0a:4c:
         a1:37:f2:4d:fa:cb:61:d0:f7:ae:96:2d:fd:f4:d3:a0:c7:0d:
         f6:d0:82:aa:09:f0:0e:4a:ec:64:ae:37:e7:f9:50:95:85:93:
         ed:29:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:56:40 2024 by rpki-client on console-ams.rpki-client.org