Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File:                     YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier:          91P6FxTWJwDODf9dUl0d21wjxUr9pXBF6zVL3PNj+yk=
Subject key identifier:   79:5D:D8:6F:BA:22:F7:67:72:4E:27:EB:F8:32:07:71:53:F5:BA:45
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer:       /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial:       01935689D22FB1F73FCA14E5425CC56701D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number:          131B
Signing time:             Sat 23 Nov 2024 01:01:32 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:32 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:32 +0000
Files and hashes:         1: 9x3_U8qx79TNaJPCp0afPKP4Hb4.roa (hash: CkrabCoWdesDOSOLYAo0hz7o6pe4BOkSgLSNmRieaVw=)
                          2: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: uFh4vGDDFG1Lojzt5Aa9eO+uGAZHJz21gialGoEIp74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:d2:2f:b1:f7:3f:ca:14:e5:42:5c:c5:67:01:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
        Validity
            Not Before: Nov 23 01:01:32 2024 GMT
            Not After : Nov 24 01:01:32 2024 GMT
        Subject: CN=795dd86fba22f767724e27ebf832077153f5ba45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:1e:26:6a:5d:8f:55:86:7a:7f:1f:47:6a:
                    bd:df:70:78:48:b5:dd:7d:76:98:1d:55:15:ec:96:
                    ff:0d:3f:56:ad:4c:a1:13:fa:e1:b2:02:cb:c0:90:
                    a4:69:5c:60:08:ba:54:e6:d8:27:bc:f3:44:50:bd:
                    75:43:03:2b:8a:df:ab:6c:4a:f4:c1:bb:a2:68:61:
                    3d:59:ce:a6:dd:9d:34:15:c8:b3:7c:24:6d:e1:6f:
                    c9:2a:91:93:12:04:67:5f:71:e8:35:de:3d:74:2a:
                    15:60:db:f8:3a:e3:d5:de:49:b5:21:34:fa:e5:6b:
                    be:13:0e:a6:35:5b:19:24:64:42:a7:1e:21:6d:fb:
                    cc:bf:76:1c:37:d7:68:82:4a:84:6f:dc:d3:79:65:
                    7b:43:63:cf:ae:c5:87:63:5b:3f:d7:30:24:18:c6:
                    2a:0c:c2:89:7f:db:38:cf:51:79:d7:ca:42:21:61:
                    ff:d7:3a:e6:99:b2:91:cf:52:c1:6a:22:f1:08:36:
                    84:bf:19:9a:a7:d8:3d:2b:ee:53:9d:98:61:3c:3a:
                    f9:a9:a1:2e:63:b9:7a:dc:73:7c:bc:d3:d2:ca:fa:
                    e6:13:c4:8a:64:23:81:29:b9:10:c6:4b:31:60:0f:
                    ab:4e:d8:68:a1:6f:f7:1d:41:12:db:76:d3:2c:88:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:D8:6F:BA:22:F7:67:72:4E:27:EB:F8:32:07:71:53:F5:BA:45
            X509v3 Authority Key Identifier:
                keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:26:b7:5d:d4:eb:0b:ac:50:01:96:11:7a:2d:15:4b:96:bc:
         e7:d0:74:be:52:c6:5c:5a:a3:b4:37:31:94:a9:48:e0:6e:68:
         5d:85:97:a3:d8:74:b8:e5:ca:2a:ef:e9:87:44:fd:cb:87:9f:
         64:e3:d6:35:f6:ec:ef:73:0c:44:cb:2d:30:a5:ca:56:17:e6:
         36:78:82:08:f5:93:d6:27:99:9f:a6:8d:75:2e:d3:6c:58:d4:
         52:97:6e:89:4d:db:8e:3f:12:d5:a4:0e:6b:bd:3a:22:dc:46:
         2d:ec:b8:35:38:32:38:ab:95:d0:3f:f6:0b:af:a6:f1:02:5b:
         35:f9:46:da:12:b4:39:2c:97:42:29:64:72:ca:67:7f:8b:c2:
         4a:ea:9c:15:94:08:e1:3c:29:d2:7e:31:2b:6d:31:05:7c:4b:
         03:f2:35:b6:16:8d:26:69:a2:e6:1b:c3:ef:69:ef:77:fc:d7:
         c1:b6:20:6c:9a:07:c9:de:66:9e:96:e6:14:7d:01:21:b2:1b:
         d5:19:12:e2:c6:00:d6:78:47:1c:19:bf:3e:17:ec:6d:2b:7d:
         0e:2b:cf:18:81:61:31:d0:89:1f:3b:d4:aa:e8:06:5b:c9:80:
         eb:2e:ed:8a:53:58:cf:1f:5d:23:c6:9e:a8:c5:53:5c:06:11:
         5e:13:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:58 2024 by rpki-client on console-fra.rpki-client.org