Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File:                     y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier:          3YqM/tIyc6O0BLsK4uhi/yCdpL09LqJeeWdNzQJ/8bA=
Subject key identifier:   AD:0B:DC:15:57:EC:97:14:91:66:78:2B:86:FC:56:DB:F1:03:14:61
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer:       /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial:       01935688A3DD393259BA53422BD1FA8C84C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number:          13C9
Signing time:             Sat 23 Nov 2024 01:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:15 +0000
Files and hashes:         1: 29P0CKg1qEGCX2RJptIrYoSU-GM.roa (hash: Ljr4XS+AmQK8aVDdjDm+vSUSgXrRbuugHGP02mS0y7c=)
                          2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: 7cLDAe0Y9DmyV/TXgrb+15bIRi8DD6I0myh+HjVd7Ec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:a3:dd:39:32:59:ba:53:42:2b:d1:fa:8c:84:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
        Validity
            Not Before: Nov 23 01:00:15 2024 GMT
            Not After : Nov 24 01:00:15 2024 GMT
        Subject: CN=ad0bdc1557ec97149166782b86fc56dbf1031461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:85:e4:8d:48:48:b1:bd:05:b2:7c:26:5c:
                    ca:78:14:d9:a5:1d:c6:5a:cc:fc:81:d3:87:95:1e:
                    4c:24:a0:26:9f:72:5b:fe:d7:8c:ef:0a:9b:53:23:
                    bb:32:af:35:9b:62:6c:5a:e4:d8:10:77:1e:15:cc:
                    fc:e9:44:a0:0f:f5:3a:7a:1b:72:36:69:a9:c7:92:
                    7f:e2:96:c6:6f:b9:e5:a0:08:f0:d4:f9:05:ff:d5:
                    01:69:13:d0:67:6e:43:60:04:49:98:6b:c9:55:4a:
                    7e:03:95:1f:02:bd:4c:ad:31:42:ea:48:01:7b:6e:
                    75:74:9c:ab:53:98:df:6f:a5:09:27:9c:33:6a:27:
                    7e:3c:63:87:28:53:da:32:bb:0b:e3:4f:3e:62:f6:
                    57:2c:0b:fb:c3:18:77:d1:07:8e:97:ee:73:93:7a:
                    f2:09:e7:01:7d:c4:df:05:6c:54:21:ba:2e:67:61:
                    06:22:81:06:d9:76:42:eb:e2:43:6e:bf:93:50:7e:
                    1d:bc:3f:7a:2b:5f:f7:ed:96:8d:70:5d:58:c1:d8:
                    64:76:72:32:d3:bf:6c:73:e6:7a:4f:f1:a1:45:51:
                    c0:ac:31:5c:66:25:5a:75:2f:03:5d:7c:8f:de:03:
                    38:eb:08:fd:3f:6d:b0:7a:e9:d5:0d:4a:3a:83:01:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0B:DC:15:57:EC:97:14:91:66:78:2B:86:FC:56:DB:F1:03:14:61
            X509v3 Authority Key Identifier:
                keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:60:8c:55:60:f3:b2:99:52:ae:bf:61:7e:f0:ac:2e:2a:
         49:14:c3:68:24:01:39:13:72:7c:04:5d:60:ff:d5:61:22:a4:
         5d:55:cb:51:5f:17:33:c0:95:87:00:5f:eb:e0:5c:e3:54:03:
         67:27:b6:38:7a:83:9c:56:7f:bb:13:bd:dc:cf:c8:d6:e5:b4:
         ae:56:00:b1:d9:b4:23:61:f7:ee:5d:c3:66:33:bc:89:ce:77:
         ad:f3:e0:bb:ec:7f:d9:59:ab:3e:92:01:ba:d2:6d:d3:31:46:
         17:28:d7:a1:24:ef:cb:0d:c6:70:d0:d0:7c:4f:04:7c:23:f7:
         d4:65:5c:d3:4d:e6:f6:75:76:2a:a9:7b:1b:04:39:b0:c4:db:
         fc:3e:d1:e2:b4:91:d9:c0:16:6a:02:83:aa:ba:c2:91:7c:27:
         22:f8:d6:df:11:1a:37:38:cb:f0:54:e1:14:9d:f5:0b:f5:5c:
         a5:65:6b:b7:34:be:da:97:51:7b:1a:5d:d4:66:3a:40:39:4b:
         17:32:bb:83:b9:15:0f:32:64:f4:e1:08:10:79:e2:42:2e:74:
         19:a0:ce:f8:a0:d2:24:ed:5a:b4:ea:1e:39:e3:4f:69:03:ac:
         3b:61:f2:af:7b:cc:2e:fb:cf:e9:25:48:4d:83:0a:99:bc:8c:
         36:96:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:40 2024 by rpki-client on console-fra.rpki-client.org