Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File:                     Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier:          MB3c+b3qA2OHcxTetrUdPK509LlDVOPOt8Nczq6+INo=
Subject key identifier:   C2:47:04:E6:09:5D:0A:F1:D7:1C:E7:AC:1E:CA:72:B1:9B:44:E7:DF
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer:       /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial:       01935764541065C445D2373F580899DA4438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number:          1267
Signing time:             Sat 23 Nov 2024 05:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:12 +0000
Files and hashes:         1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: CWOp0Wb3wrmsOdOvxMYHUm5VBSu6fNviJbBcqaT1ZEs=)
                          2: wrcIAOIjlNbbRpSqREXw2nARpFQ.roa (hash: TobuQCiRT1qOWg4Pbddn2M7I1r4NzjXjPB+6M4rS+gk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:54:10:65:c4:45:d2:37:3f:58:08:99:da:44:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
        Validity
            Not Before: Nov 23 05:00:12 2024 GMT
            Not After : Nov 24 05:00:12 2024 GMT
        Subject: CN=c24704e6095d0af1d71ce7ac1eca72b19b44e7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:b7:7d:b4:a6:f7:97:63:19:46:77:c9:32:
                    60:a7:97:b7:35:ea:7d:bb:cb:6b:97:b3:6c:b5:84:
                    9e:47:22:46:08:42:b8:68:8a:eb:cb:f6:96:2c:32:
                    3f:47:a3:b5:d0:a3:8e:78:bc:c7:eb:a2:dc:59:0f:
                    cc:47:36:ed:e5:50:f7:ac:5d:71:fd:1e:25:b8:69:
                    db:c1:4a:da:a4:c5:87:f4:c8:20:38:1c:de:b5:42:
                    3e:ce:80:76:9c:14:fd:97:13:31:cb:72:89:6e:55:
                    d4:1c:dd:1b:7f:78:52:71:14:58:29:cc:fe:f5:72:
                    41:33:d9:38:6d:a2:11:70:2d:6a:61:9d:f9:2d:81:
                    45:7a:8f:65:86:bc:c8:b8:6b:2f:33:1f:65:5e:cf:
                    8f:d7:7b:98:a6:90:31:da:ae:05:04:90:4f:4f:cb:
                    4b:57:84:79:ba:c7:83:b5:c0:42:61:ab:0e:a9:68:
                    ee:1f:42:9d:29:27:1c:ef:0f:d0:02:73:d8:63:de:
                    3e:dd:40:07:06:02:ac:8a:a0:71:86:f6:0f:37:fe:
                    e4:e0:ab:ec:de:41:4b:87:e0:89:d2:a9:91:71:2c:
                    92:d1:6d:20:3a:b4:e8:0c:65:9a:71:16:ab:c7:e3:
                    6c:93:60:22:76:58:76:69:97:72:6d:6f:8b:e0:6e:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:47:04:E6:09:5D:0A:F1:D7:1C:E7:AC:1E:CA:72:B1:9B:44:E7:DF
            X509v3 Authority Key Identifier:
                keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ae:ee:4c:22:de:af:1a:4d:69:22:5d:93:c5:97:9a:55:ed:
         f4:76:62:26:b9:74:e1:c4:36:b5:88:f4:7b:08:e9:d6:e4:a0:
         8b:6f:f3:1b:32:d8:9e:e6:85:f0:a0:a7:3b:29:6d:f7:99:1b:
         a8:e4:51:d5:ee:b4:9e:2a:d4:9c:c8:ea:4a:cd:04:1a:63:fc:
         36:17:ae:6f:04:e6:cb:52:44:1e:78:68:05:9b:c9:0e:79:99:
         e3:87:e4:6e:28:9d:83:c4:12:e6:38:77:76:31:2b:d5:bb:db:
         e3:65:d9:35:df:55:df:3b:67:d0:09:ae:27:b1:c3:74:8d:e3:
         f0:11:24:1f:4a:cd:d6:85:02:10:d3:ac:cc:37:a1:af:b0:79:
         57:93:6d:4c:86:8c:e3:13:89:f7:4b:8e:6e:4b:eb:8f:48:7d:
         37:dd:93:14:25:e2:db:72:da:53:0e:b5:e8:9d:e7:19:10:1e:
         74:08:a0:6a:18:54:9d:2f:e1:83:76:2b:b5:d5:ef:ca:db:73:
         c5:a1:d9:7b:7e:1e:95:58:85:ea:7f:1a:cc:86:6b:89:35:68:
         96:8a:a6:76:dc:24:95:61:d0:8e:92:11:6f:5c:62:bc:89:46:
         ee:19:3d:07:77:9b:ba:c7:c5:20:7c:03:77:5a:25:c8:5f:79:
         60:74:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:24 2024 by rpki-client on console-ams.rpki-client.org