Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File:                     YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier:          ygQCGoeUsBdH+g2k6rLRCB/YNG7ZnHCAZ6trsytf3Uw=
Subject key identifier:   B1:F9:60:A3:ED:F3:AE:B9:BC:C5:D4:D0:2A:19:13:59:55:4B:A5:58
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer:       /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial:       01901CD897D2750BFEADFB5914E2C87B707F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number:          0C35
Signing time:             Sat 15 Jun 2024 17:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:15 +0000
Files and hashes:         1: 256OYm3_E0VfxLRNftANFHWSZrU.roa (hash: zbkjzcmxdhR2fwN3RVftV4X3wQz+42ogFjy5SIpSa0c=)
                          2: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: dh7+tRFsmCJZLHOyaZr/okaFdFWGzbrPx51T9M7htx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:97:d2:75:0b:fe:ad:fb:59:14:e2:c8:7b:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
        Validity
            Not Before: Jun 15 17:01:15 2024 GMT
            Not After : Jun 16 17:01:15 2024 GMT
        Subject: CN=b1f960a3edf3aeb9bcc5d4d02a191359554ba558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:c3:85:9f:b9:6a:88:a5:8d:8e:dd:88:4e:
                    97:21:79:97:ef:56:ef:89:99:56:46:93:1f:f2:c1:
                    ae:fa:cc:23:ad:b0:b5:e4:7d:73:5c:a7:28:fe:8f:
                    2a:a1:c3:70:ae:fd:c6:97:6d:17:fe:05:bb:70:b9:
                    0b:5f:62:fb:a8:f0:63:f9:5d:ba:76:36:c1:f3:c3:
                    73:79:a9:4a:ea:9f:de:a5:9d:c5:cd:de:5f:30:4f:
                    1c:a3:37:cf:6b:9e:74:13:c8:b5:fb:75:7e:1b:2f:
                    1b:04:28:61:79:55:5b:04:ba:a1:31:30:d8:51:79:
                    cb:a7:10:b7:48:38:b8:cc:4f:15:0b:e7:73:7d:6a:
                    16:56:2f:03:8d:91:f3:1b:4e:2a:80:97:f7:af:37:
                    b8:35:36:d3:d9:53:a2:97:2d:01:89:77:ec:e7:34:
                    44:b4:ba:8e:9a:25:9e:c0:b8:43:b2:d6:5e:7e:08:
                    64:da:98:c3:10:ed:67:88:47:22:71:4e:c5:92:6f:
                    5e:60:8e:e9:f2:a4:e5:50:c1:74:1f:dd:ff:6a:19:
                    e3:3b:a8:7c:95:c1:b5:4f:29:22:9e:9d:e7:3e:00:
                    3b:e4:d4:e9:c7:62:6a:a9:38:9d:59:2c:8a:79:9e:
                    71:76:6f:d5:ef:e7:e8:55:da:55:18:bf:6e:38:41:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:60:A3:ED:F3:AE:B9:BC:C5:D4:D0:2A:19:13:59:55:4B:A5:58
            X509v3 Authority Key Identifier:
                keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6a:1f:b3:34:01:7b:71:4b:48:36:bc:16:d0:58:2f:9d:3a:
         19:03:cd:93:5e:85:49:bc:26:8c:5c:0a:33:1d:8e:2c:90:2a:
         0c:ab:76:5e:ba:a6:7b:ab:70:cc:07:21:92:37:14:07:1c:28:
         bc:b3:ac:7e:bc:a9:f0:76:21:5a:bb:b6:18:a6:dd:c9:50:9e:
         05:8f:ab:30:7a:76:b5:8b:9b:33:e2:d0:d6:d5:26:4d:2c:ee:
         ed:e8:b1:a6:c8:e8:65:07:dc:7c:d6:f0:42:82:6e:c3:d5:cd:
         fa:92:a9:d8:e6:d0:c3:56:09:51:c3:68:6b:b2:64:3d:9c:1c:
         21:99:37:4f:9e:44:35:c6:86:53:cc:28:c4:a3:91:12:1e:ea:
         f0:59:ef:d3:63:e0:61:0b:a5:3e:ae:31:ea:aa:e4:17:7e:59:
         dc:2d:a2:f1:e8:04:5d:7f:23:17:74:1c:d8:cf:43:cf:fb:cc:
         37:50:21:8c:7a:f6:43:14:96:07:3e:e3:ac:46:f6:f0:9d:d5:
         db:fe:a1:2e:66:cd:6e:43:fb:41:15:12:1b:ab:31:43:38:e7:
         5b:1e:48:23:55:27:04:d2:ee:67:dc:c3:69:24:9d:22:00:59:
         22:23:b3:a8:8a:f5:8a:d6:51:00:cd:21:a0:0b:c4:9c:39:0a:
         54:a2:24:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:28:05 2024 by rpki-client on console-ams.rpki-client.org