Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File:                     Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier:          tiB+JlmaXX+13VhUH/Yb1s4MflYPXwYE0dp95pdYcfo=
Subject key identifier:   DF:62:6C:FB:25:28:93:A9:DF:14:E8:12:B4:0E:16:4F:A9:55:09:A1
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer:       /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial:       01935508513A96AB3B0092FB6866055790C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number:          0F2C
Signing time:             Fri 22 Nov 2024 18:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:28 +0000
Files and hashes:         1: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: U2CClqF8XjEAco/tubHZozbzxl5PG3eZXLbBJVghIm0=)
                          2: p2NxHuHEvm6-VtLtsGR70NjnXU0.roa (hash: 6PtkYLC++irxYOaEOIumYreIOhvsWmMefI2pPa5VOAI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:51:3a:96:ab:3b:00:92:fb:68:66:05:57:90:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
        Validity
            Not Before: Nov 22 18:00:28 2024 GMT
            Not After : Nov 23 18:00:28 2024 GMT
        Subject: CN=df626cfb252893a9df14e812b40e164fa95509a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:ea:d8:51:9a:29:93:c4:3a:f5:69:f9:61:
                    60:6a:30:de:b9:d6:a8:b3:3d:29:b5:92:17:7d:b8:
                    b3:79:12:fa:19:f0:d5:12:0b:0b:85:1b:1c:34:dc:
                    13:70:8c:5a:77:f4:e4:1a:f5:02:cc:d5:05:94:32:
                    42:d6:43:6f:5e:f7:0e:15:50:0e:13:58:4d:de:78:
                    fd:da:c3:2f:88:08:de:e6:0e:31:0d:b9:19:c2:e2:
                    76:58:61:3c:34:c3:28:4c:23:03:91:ca:06:a6:8e:
                    d7:f8:53:bf:0c:df:99:58:57:08:b3:bc:4b:9e:47:
                    0d:3b:7d:75:f5:7d:5d:8a:b6:16:60:f1:07:c5:a0:
                    16:bd:66:9e:7b:c3:6b:49:a3:d1:dd:9e:c9:5c:ec:
                    a5:1c:cd:5d:55:0b:a7:c2:25:69:36:52:93:19:c4:
                    36:f3:99:af:31:9f:50:36:44:19:c0:7d:84:53:5f:
                    b9:1e:18:1f:59:fc:8a:23:8c:4c:83:fc:5b:1b:1b:
                    a3:9d:7d:32:de:f3:11:15:9e:4b:ae:e0:55:b4:d9:
                    6f:2f:a3:39:77:4e:d3:8d:30:e1:c5:e6:40:93:65:
                    b8:fd:94:47:da:7e:e7:ad:9f:10:83:2e:7c:45:89:
                    d5:ca:3b:a0:85:d0:ef:5e:de:d8:1a:10:0f:58:32:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:62:6C:FB:25:28:93:A9:DF:14:E8:12:B4:0E:16:4F:A9:55:09:A1
            X509v3 Authority Key Identifier:
                keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:96:6a:25:12:95:b4:c9:c4:3a:41:8f:ff:84:a7:22:57:
         95:c2:76:7c:ce:4b:9c:a5:4a:33:da:85:d4:ef:28:68:4c:e3:
         ec:39:e5:8b:1e:18:0b:48:30:79:f4:6d:19:3a:cf:1f:4f:de:
         22:8b:c5:df:40:ac:b1:fd:c6:1c:3c:cb:6d:a5:39:6f:c8:fd:
         44:9f:78:a1:80:4b:89:17:da:d0:51:41:cc:01:22:5b:33:d5:
         32:31:44:56:ed:e4:40:2f:b5:77:d1:71:13:de:27:cd:1d:c3:
         9c:39:5d:a4:e6:a2:a3:e1:e2:ed:60:57:6c:f3:ed:dd:76:6c:
         2a:f4:cb:20:f7:0a:6e:93:5b:64:d5:2e:df:2e:60:42:6d:68:
         4a:6f:70:f6:f9:60:1d:5e:0c:3a:c5:04:fc:a8:2d:51:dc:03:
         15:8b:db:2c:8d:68:5e:f0:95:22:1a:ef:be:c6:3b:8a:d8:ef:
         f0:bc:9a:ef:50:f1:f2:03:98:2a:7a:b6:9c:73:89:7c:90:b1:
         e8:08:0b:f6:07:e0:4c:5c:ea:9a:84:9b:29:9a:ef:d5:4e:d6:
         d6:e3:23:2d:72:36:3e:1e:1a:fd:48:48:96:94:68:47:a2:40:
         23:ef:05:dc:0a:52:04:f3:6b:09:e5:40:f8:7e:f0:3b:20:cf:
         23:af:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:51 2024 by rpki-client on console-fra.rpki-client.org