Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
File:                     YeVlVi0-P1ZenApBlG6lPUXV1lc.mft (raw, json)
Hash identifier:          tu/K+u1kQqGErboNuAOujkijD6ddCxbbW9aIe+6O284=
Subject key identifier:   64:19:74:D4:5E:2A:1D:C6:C2:95:A2:1E:BA:66:36:E0:BB:C2:C9:C1
Authority key identifier: 61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
Certificate issuer:       /CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Certificate serial:       0194BB604D5F03E27D6266A2AD438F19040F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
Manifest number:          0E5E
Signing time:             Fri 31 Jan 2025 08:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:38 +0000
Files and hashes:         1: 0-DRCfkpBDrsJRSJxKK3nX_LrZw.roa (hash: BjYEFfztzrfSf9BH/ut9S9y16Rlv7uTwFlgTI+tPFoE=)
                          2: YeVlVi0-P1ZenApBlG6lPUXV1lc.crl (hash: f+5WBmPLvSHdlRequ50MksFK9VuroCrwbJ2OTgeioFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:4d:5f:03:e2:7d:62:66:a2:ad:43:8f:19:04:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
        Validity
            Not Before: Jan 31 08:00:38 2025 GMT
            Not After : Feb  1 08:00:38 2025 GMT
        Subject: CN=641974d45e2a1dc6c295a21eba6636e0bbc2c9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:fd:25:9e:24:a8:e2:13:8f:f6:9e:23:ca:
                    44:a7:c7:e7:44:ca:63:0a:47:2f:0a:a0:d5:59:72:
                    1f:c4:62:4b:1a:73:ad:b8:6c:b0:1d:16:4d:e7:4c:
                    cb:c3:98:b2:db:de:5d:c2:2d:d4:83:f8:67:6f:f8:
                    13:db:3c:ed:90:14:e5:77:d8:a7:ff:a2:0b:b8:61:
                    81:1b:0f:89:f4:43:ab:aa:d1:ff:16:eb:b0:dc:e7:
                    eb:3d:27:f3:d7:2a:a0:e1:d7:65:63:c8:20:fa:1a:
                    1a:56:58:ad:78:a3:3c:90:ce:0a:64:be:50:11:cd:
                    c7:34:fb:da:da:a5:8e:cd:68:ea:b9:4c:db:80:12:
                    38:22:a5:fd:bf:a6:8d:b0:e7:05:e1:a2:b1:55:9a:
                    43:68:5b:f1:9d:53:d1:06:23:ba:d7:da:ed:20:c1:
                    22:73:73:65:d7:03:3f:ae:73:b7:2c:2a:a6:c1:4e:
                    58:8b:56:8b:7c:17:2d:97:88:0c:d9:9b:d0:02:8f:
                    a5:81:a8:75:f6:47:27:0e:5f:7a:e0:95:9f:c8:a3:
                    f9:b5:4a:0a:a2:0b:ff:36:ac:a4:f8:90:d2:76:cb:
                    d0:f9:6a:a8:b8:52:4e:95:bd:84:1e:5c:8d:9a:2b:
                    8c:31:d0:44:66:4e:8d:ec:11:0e:45:cc:59:e9:df:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:19:74:D4:5E:2A:1D:C6:C2:95:A2:1E:BA:66:36:E0:BB:C2:C9:C1
            X509v3 Authority Key Identifier:
                keyid:61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:68:b9:ff:f1:9a:15:df:cc:57:bb:5c:d9:a3:bd:7d:81:
         48:74:88:22:94:58:88:68:49:f2:c9:22:b4:52:9e:0c:c5:58:
         84:7b:13:2c:13:3d:03:b1:a1:e3:eb:1a:fd:a7:3e:49:1c:58:
         ac:62:3a:1b:8b:e1:de:c4:a2:8f:ca:0d:cb:91:75:cf:5f:eb:
         34:3e:6b:37:00:84:ea:cf:9d:85:68:1c:dd:ff:dd:a4:bc:c8:
         81:03:31:73:3e:85:ac:99:20:86:3f:47:db:d2:56:4d:f3:ae:
         85:5b:29:e6:d0:bc:f6:9e:6b:a7:65:3d:a4:5c:a4:72:7a:9b:
         cb:c3:0d:7a:6f:a6:a1:4e:d3:1f:70:96:9a:a7:1b:06:9d:59:
         53:ab:37:8c:5e:6c:9b:9d:6e:a7:90:51:bd:2a:5f:e1:d7:eb:
         df:62:11:09:4d:bf:63:4e:34:0c:8f:0a:d2:cd:22:41:02:7f:
         d0:fe:c4:31:11:66:68:43:ec:49:46:1d:15:9d:77:ba:07:1a:
         5a:d5:47:d5:99:05:0a:62:be:4b:63:53:c8:55:41:3b:22:94:
         5d:3c:d5:a5:af:78:f3:50:74:5b:f2:8a:28:0f:b1:bf:59:07:
         75:19:a2:b8:44:e7:70:3f:99:72:7a:b6:15:6f:13:78:7b:46:
         c4:3a:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:08 2025 by rpki-client on console-fra.rpki-client.org