Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File:                     yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier:          tEs0yY5QPkL0vNtQ+0ihAUTaOoj7gj2VqssTAIoLxYE=
Subject key identifier:   3F:EF:4B:42:20:92:2A:D7:9A:36:F4:A1:70:E0:F5:5B:67:6D:51:1D
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer:       /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial:       0193568AEC418F57329AB86E15F3CE71BBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number:          1058
Signing time:             Sat 23 Nov 2024 01:02:45 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:45 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:45 +0000
Files and hashes:         1: xxz1MkH3XZ0uIivPJ0EB3CoBEWc.roa (hash: h5XFQ2o+cG2FHlKr+1lhu9nNY/VMXwyKvTp3a8X1JHE=)
                          2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: UDw5qSwZpTHCBTKn/gvksd97yIjN3z0ZVKFiL1+NlLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:ec:41:8f:57:32:9a:b8:6e:15:f3:ce:71:bb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
        Validity
            Not Before: Nov 23 01:02:45 2024 GMT
            Not After : Nov 24 01:02:45 2024 GMT
        Subject: CN=3fef4b4220922ad79a36f4a170e0f55b676d511d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:a0:5f:0b:2a:80:37:ff:c2:47:9e:78:ae:
                    0b:6d:cd:b3:4f:7e:20:bb:f8:79:45:5f:43:2b:1c:
                    e8:f9:8a:55:18:cd:d2:81:6c:61:ea:c3:a4:c2:f4:
                    e1:f5:bd:f5:7d:42:14:91:be:9f:17:1a:bd:a2:8f:
                    9e:29:e2:1a:f8:36:c3:1a:b4:b2:33:d8:80:c1:99:
                    73:bc:d1:1b:9a:4f:9a:34:6a:11:25:59:c4:4b:05:
                    58:74:1a:57:85:1a:f6:5a:20:dd:da:24:ca:46:7e:
                    e5:99:1c:a7:49:b0:24:03:37:e2:19:95:9b:d9:24:
                    ae:8f:43:14:23:17:40:5f:17:92:25:ed:2c:77:f0:
                    fb:8c:60:e9:24:41:37:46:d6:fc:cf:1b:30:d0:68:
                    d4:94:ec:79:e3:fe:f0:fd:9d:24:94:e7:a7:62:74:
                    b1:c8:44:14:1c:0e:fe:69:df:48:78:89:70:9d:b8:
                    5c:eb:fe:18:31:98:64:98:f4:16:83:a2:35:09:d7:
                    d3:cb:aa:36:36:be:92:c4:c5:01:ee:4d:f8:9e:4f:
                    07:a8:43:55:bc:d4:39:83:96:ea:c9:54:55:76:59:
                    47:02:4c:21:c9:00:34:d4:a5:ef:9c:ef:8e:68:e3:
                    26:e1:15:83:77:a7:36:a8:bf:93:c7:db:a7:eb:b1:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EF:4B:42:20:92:2A:D7:9A:36:F4:A1:70:E0:F5:5B:67:6D:51:1D
            X509v3 Authority Key Identifier:
                keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:90:fb:77:18:f2:dc:4a:14:25:38:41:15:17:4e:97:05:
         00:87:a4:76:ba:60:74:b3:cf:c8:2a:66:00:a8:df:25:69:47:
         a8:65:f4:d1:c0:37:1d:a0:75:70:dd:29:87:51:e9:2d:48:cf:
         77:0d:49:ce:5d:47:4b:93:4b:86:cb:cf:3f:bd:8e:21:c1:6a:
         9f:ce:20:a9:de:91:bc:44:1c:fa:a2:b4:c3:63:d2:e9:94:21:
         24:b3:8b:f4:51:ef:9a:1f:e5:59:0d:ab:90:34:03:6e:68:ac:
         8e:76:8f:39:43:8c:3e:c1:e9:52:34:3b:fe:8a:f4:de:74:07:
         a9:86:f0:8d:2c:db:00:79:48:ec:b4:22:68:2f:0b:55:91:09:
         aa:fe:19:89:db:de:b0:a4:70:91:7f:0c:09:f2:aa:51:2d:6f:
         ef:5f:45:d6:dd:8e:f6:f7:e6:c3:36:f5:d5:e3:73:6c:e2:0d:
         45:63:ee:84:53:c4:2d:76:d5:8d:3a:cf:b1:7f:bd:32:af:e2:
         20:5c:73:d3:37:c6:37:91:75:a0:08:09:8b:5e:48:37:b7:0b:
         9b:11:78:4d:8a:c7:d0:a7:54:f2:dc:8e:f8:08:a8:76:8f:b2:
         26:14:f4:c2:78:96:07:82:aa:70:fa:21:7c:27:2f:a1:e4:d6:
         19:0c:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:22 2024 by rpki-client on console-ams.rpki-client.org