Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File:                     YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier:          lcxezDQRPcSobRvOHt3qNqwrV493bcnddFEUuydACr4=
Subject key identifier:   53:AB:3F:51:9A:14:FA:DB:40:62:26:BA:52:74:92:33:06:BC:A8:5B
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer:       /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial:       0193576496CF74EA7FB2A60147457B2BBCD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number:          0DE1
Signing time:             Sat 23 Nov 2024 05:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:30 +0000
Files and hashes:         1: 256OYm3_E0VfxLRNftANFHWSZrU.roa (hash: zbkjzcmxdhR2fwN3RVftV4X3wQz+42ogFjy5SIpSa0c=)
                          2: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: nKnNQ3iX+xC2kvyX/0Xg5gWN2Lj7RH1BS2i/JawN9j0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:96:cf:74:ea:7f:b2:a6:01:47:45:7b:2b:bc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
        Validity
            Not Before: Nov 23 05:00:30 2024 GMT
            Not After : Nov 24 05:00:30 2024 GMT
        Subject: CN=53ab3f519a14fadb406226ba5274923306bca85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:de:18:b5:27:83:dd:f7:6b:b2:a5:2a:4f:
                    80:a4:14:f1:ab:13:de:ea:f1:ec:bf:cb:27:67:f7:
                    fc:61:ca:05:42:9d:06:f4:9f:35:85:1f:de:70:89:
                    89:3b:83:83:d9:24:a5:05:a0:9d:a0:85:07:cf:66:
                    53:cc:d7:33:2f:7b:c4:df:62:f2:ad:60:13:41:83:
                    ef:bf:a0:0f:2a:ee:0b:c6:46:bc:54:4b:58:c1:5e:
                    6c:bb:71:e2:13:de:f4:1f:a1:1d:75:b3:fb:99:61:
                    a3:b5:ea:53:3f:19:f9:f0:54:6f:f8:1d:35:aa:92:
                    0d:56:09:20:b4:77:03:1d:8c:72:52:e6:72:16:1e:
                    7d:4d:f4:12:65:aa:61:23:af:b5:ee:c8:b0:d3:1b:
                    2d:77:a7:2f:ed:c9:48:86:18:04:63:3c:e8:2f:b7:
                    df:c7:5b:75:6c:7f:aa:12:f3:b4:25:33:b2:35:35:
                    42:8c:8d:c1:17:9b:25:4b:11:a7:ca:1b:fb:16:19:
                    dc:fc:33:42:a8:97:43:1b:83:f6:e2:ef:9d:f1:fc:
                    25:57:00:5a:29:12:3a:21:63:f5:63:d7:46:4f:90:
                    c5:d2:56:26:ca:37:d7:ca:f5:ae:11:35:66:ac:05:
                    c1:45:43:84:bd:bc:04:34:a9:6e:7f:15:4a:a9:b7:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AB:3F:51:9A:14:FA:DB:40:62:26:BA:52:74:92:33:06:BC:A8:5B
            X509v3 Authority Key Identifier:
                keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:75:43:52:79:96:0f:f7:44:15:05:d6:f5:6e:5a:c8:f1:a1:
         90:55:a1:8f:58:b5:da:8d:18:b5:ee:1e:bd:9c:9d:f5:97:e3:
         94:fc:05:82:d9:88:df:3b:8d:b4:97:5e:8d:9c:d6:46:b7:2f:
         98:69:20:fd:2a:8d:82:d6:1f:8c:fc:b7:cf:e9:7f:b7:97:55:
         57:12:74:75:10:be:7a:8e:51:bf:b6:16:58:e1:cd:6a:03:97:
         6c:08:a2:7b:12:cf:4f:8e:5c:c5:88:f3:d3:ff:4b:7d:e3:d9:
         13:58:07:bb:69:09:e1:b3:ad:4e:5f:df:1f:82:e5:4c:f0:d9:
         cf:01:fd:ea:60:ff:e4:b2:f8:28:55:61:fa:f2:c4:df:3b:17:
         6d:ac:58:bb:47:ae:89:78:77:27:41:34:74:7b:a6:31:b7:d7:
         e6:b3:60:d2:39:a7:85:13:00:bc:47:5a:b9:46:7e:68:b7:28:
         6f:c7:e5:30:c5:78:65:c4:dd:a6:c8:95:0c:45:4c:ec:ea:b5:
         1d:ab:59:b3:9e:10:c2:89:0c:30:16:e5:bb:09:6a:f5:29:dd:
         2f:8c:62:40:0c:58:e4:18:d8:d2:47:a3:56:05:9d:09:c0:ae:
         77:d2:61:30:e7:a8:84:2c:58:7a:a3:1c:d4:b0:b4:29:ac:be:
         53:88:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:34 2024 by rpki-client on console-fra.rpki-client.org