Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File:                     YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier:          2B9A/ZOfIeuZwMgBUzUP/cGUm08BFnum0lsebvdEec0=
Subject key identifier:   9B:6D:70:32:BB:66:AD:C9:4B:60:86:4B:C2:45:D6:DC:79:0B:1E:23
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer:       /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial:       01935840459B5BAD7AF2F9531A3FEDBD0430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number:          075C
Signing time:             Sat 23 Nov 2024 09:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:27 +0000
Files and hashes:         1: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: PnJNORuOs7RTJZbEqTXlsz0eIj168xKzQ6YfvapLvEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:45:9b:5b:ad:7a:f2:f9:53:1a:3f:ed:bd:04:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
        Validity
            Not Before: Nov 23 09:00:27 2024 GMT
            Not After : Nov 24 09:00:27 2024 GMT
        Subject: CN=9b6d7032bb66adc94b60864bc245d6dc790b1e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:e1:d0:cc:0f:54:38:e2:d7:08:14:17:57:
                    c5:b1:bb:7b:3e:a0:0d:cd:06:b2:f5:28:8a:3b:84:
                    44:5a:eb:86:23:06:fa:d4:7e:ba:b3:82:36:83:74:
                    8c:20:db:f5:37:50:cd:eb:40:73:ae:7e:30:79:d8:
                    bd:19:e4:69:2d:ee:f7:2a:c6:18:d0:fd:d8:c4:df:
                    fe:9a:5b:28:c0:7c:3a:57:27:9f:a8:b4:25:be:3d:
                    1d:d7:31:02:c8:97:3d:e4:da:63:e7:0a:e1:ab:36:
                    d9:f2:50:fd:82:1b:ef:c4:1d:ef:52:5c:ed:97:2e:
                    b6:5b:8a:7d:b9:9b:b0:60:33:af:2e:6a:22:23:7b:
                    42:2d:28:5e:a5:51:34:ea:3b:1a:35:5f:5e:5e:8e:
                    16:ff:64:6a:e0:4e:63:88:f0:35:c9:85:fe:2f:87:
                    b7:31:2f:c2:f3:43:00:2a:2f:f7:77:b5:be:47:2b:
                    46:80:87:3e:b3:f7:40:09:0d:d5:83:b5:f0:b6:94:
                    b5:0f:14:c9:8e:e2:63:47:56:77:7f:1f:70:e3:4c:
                    f1:87:5d:72:33:d8:ac:ef:fc:31:f3:32:95:e0:1c:
                    e9:5d:96:54:62:b1:4a:24:e5:c1:92:82:23:27:0b:
                    01:8a:0a:2e:a4:a4:7b:58:89:19:eb:78:a2:17:b8:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6D:70:32:BB:66:AD:C9:4B:60:86:4B:C2:45:D6:DC:79:0B:1E:23
            X509v3 Authority Key Identifier:
                keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:96:91:a4:3c:85:01:2c:ce:9d:e1:61:0a:e7:13:61:5c:
         01:ca:51:70:99:f9:9d:84:3b:b8:68:d2:65:c9:38:30:7b:d7:
         1d:3b:fa:e1:a8:8e:a5:25:b8:50:27:6c:f0:a0:00:58:cb:d0:
         8d:f8:e9:1b:2e:8c:f4:1b:61:16:ff:15:9d:8b:19:93:d6:e8:
         38:58:16:3f:b8:da:40:74:1e:db:29:23:b0:20:8e:18:69:c5:
         d6:a9:d5:77:73:e9:e9:6e:f3:d3:9d:20:c7:97:6a:98:ff:f5:
         18:ea:13:7e:c3:8f:44:62:1d:cf:a7:1a:27:06:66:34:bb:41:
         de:81:2c:33:29:36:5b:17:09:9b:e1:ec:24:a7:45:1b:cd:96:
         01:bd:47:c1:40:e6:90:2e:84:8d:4e:b2:d9:5d:53:fe:b7:87:
         43:01:6b:de:c0:03:f8:81:fd:ae:28:c4:6b:4d:90:c7:c6:1f:
         7d:12:d1:50:28:47:1c:52:93:fc:1e:2c:f6:32:7e:18:79:c9:
         6a:7e:9f:c7:ac:9c:d6:f3:a8:d9:19:ce:a0:52:9d:4b:ae:df:
         80:47:88:c7:54:04:04:60:f7:84:16:cc:a3:a2:8f:30:19:b2:
         5f:04:bd:f8:d5:82:4e:d4:b9:92:d0:da:28:0f:3a:9b:05:77:
         32:d9:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:17 2024 by rpki-client on console-fra.rpki-client.org