Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File:                     YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier:          oRiXcDgjgZVvQV/3AWmDRpqowXOp1O8UekpPmCXlBYc=
Subject key identifier:   E6:8A:57:A3:BB:F4:73:0B:71:0F:F6:C1:4D:22:BA:82:70:B6:FD:6C
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer:       /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial:       0193572E01CAACEDEA31E43EED76049964A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number:          03CC
Signing time:             Sat 23 Nov 2024 04:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:53 +0000
Files and hashes:         1: ByjnFbHLHBalTObbLXPMwsiNb_o.roa (hash: qXOHO2QVdNVhYmpn4IeKqWMGOImp8rTP9OeqmWdb6+E=)
                          2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: NWv2ErDrwzlnemEpaPqxOPy3EuWR4y06zM1fj0RZuPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:01:ca:ac:ed:ea:31:e4:3e:ed:76:04:99:64:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602d570b542e7302885d367418df802f99494f26
        Validity
            Not Before: Nov 23 04:00:53 2024 GMT
            Not After : Nov 24 04:00:53 2024 GMT
        Subject: CN=e68a57a3bbf4730b710ff6c14d22ba8270b6fd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e0:74:ff:3d:f1:49:15:20:19:7a:d2:3f:e3:
                    6c:60:61:f1:d0:83:02:ad:cf:6a:04:8e:5e:d9:01:
                    fb:79:58:5b:7f:4d:cc:7d:d0:a4:30:c1:4f:29:c0:
                    6d:c6:1b:1e:b2:48:2b:99:cf:61:12:9d:66:83:b4:
                    68:28:09:c1:dd:50:0f:db:0f:d2:05:68:29:89:29:
                    fd:51:a1:ef:6d:5a:f3:f2:51:b4:96:0f:e0:4f:90:
                    9c:ca:6a:86:c4:6b:a5:39:fb:1b:47:d5:15:c6:8b:
                    c6:69:2b:65:84:2c:0c:9e:08:09:1f:51:71:e9:89:
                    27:4e:08:c9:db:77:d2:4d:2d:69:c8:f3:40:17:65:
                    a2:17:d0:46:26:31:d3:22:dc:0b:5f:93:c4:1f:39:
                    fb:14:91:99:0b:08:ba:fd:e3:ad:4a:2c:10:19:cd:
                    f7:ee:7e:3d:b7:83:35:89:64:1c:e2:bc:05:e7:8c:
                    db:54:be:6a:7f:3f:cc:ac:8d:8f:7a:6b:78:4f:5a:
                    0c:ba:ca:29:76:7a:15:a5:97:01:2a:4a:d1:14:0c:
                    c0:3b:d4:ad:14:13:99:cf:54:1c:df:2d:86:bb:98:
                    12:f5:39:be:60:ba:04:91:70:97:96:f1:63:20:54:
                    4f:87:e3:8a:1d:8c:72:ae:4c:e3:b7:49:3a:9e:cc:
                    77:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:57:A3:BB:F4:73:0B:71:0F:F6:C1:4D:22:BA:82:70:B6:FD:6C
            X509v3 Authority Key Identifier:
                keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:96:7a:a7:20:2d:ad:97:69:04:f2:00:10:fb:3c:7a:a4:28:
         f7:47:9d:cc:bd:8e:85:97:51:70:a8:4e:59:50:fa:92:8c:35:
         86:a9:a1:ff:d9:95:96:f1:4e:60:15:c8:e4:2f:c1:53:17:9e:
         9c:e7:fe:31:d4:47:97:be:5b:52:05:5f:a0:b0:5b:d5:1f:13:
         a3:c7:05:c7:b0:be:d4:69:3b:7e:39:b3:15:90:9a:d0:29:99:
         c2:79:48:b4:69:b4:b3:37:af:4e:27:de:8e:23:4f:78:39:c2:
         2c:9d:65:8c:70:f2:86:48:32:45:7a:be:5d:ba:a8:28:a3:24:
         ab:79:3b:a7:a0:e7:44:f9:80:17:7f:1d:57:d2:9f:df:90:55:
         ce:bf:7d:93:b5:25:24:36:8a:06:d8:7a:9d:5c:c3:3b:3a:73:
         d2:5b:e5:0a:5a:26:36:92:32:e2:3f:f4:df:f1:df:e7:fe:1e:
         d9:1f:65:46:ec:7b:55:bb:47:05:22:c6:36:c0:a0:ca:67:d3:
         03:7a:ba:10:8a:bc:07:bd:99:d5:aa:07:cc:f1:6a:00:55:bd:
         42:51:1f:3f:09:28:e4:00:a6:6d:5b:00:25:de:97:09:af:c2:
         bf:ad:77:89:11:c3:d5:a1:1f:a3:38:52:d2:92:46:9a:58:c8:
         70:97:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:00 2024 by rpki-client on console-fra.rpki-client.org