Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File:                     Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier:          7FCM/7arEaXsUeW77YpJ6IaEjtN53YGO6Wdn4HKpViU=
Subject key identifier:   20:74:A5:86:45:45:45:81:F3:C1:BC:72:67:FD:AC:D7:54:EF:4E:0F
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer:       /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial:       019357D22E5506FF5AA895343B9968B73DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number:          1075
Signing time:             Sat 23 Nov 2024 07:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:12 +0000
Files and hashes:         1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: tbRmbubrsjhG2RIcNczxYMCpmLqBcxeSQJYhq6BuM5w=)
                          2: ynJOzKhZqPgLO_94rsKMqHNrknE.roa (hash: +QB32yQ/kr3/CNhwqd/3RIlPeZwGXmco98nCOBC57rE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:2e:55:06:ff:5a:a8:95:34:3b:99:68:b7:3d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
        Validity
            Not Before: Nov 23 07:00:12 2024 GMT
            Not After : Nov 24 07:00:12 2024 GMT
        Subject: CN=2074a58645454581f3c1bc7267fdacd754ef4e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:b1:01:bc:42:2b:61:38:e1:d2:4c:57:ce:
                    ea:0d:bd:34:ae:00:33:5e:73:da:1c:41:49:86:e5:
                    b7:64:91:a4:53:cc:e8:2e:1a:2c:88:33:88:b8:9a:
                    46:6c:d0:c3:42:dd:c1:4e:52:17:17:33:c0:c0:19:
                    6c:b6:e2:a3:3a:81:4d:84:05:5a:ed:e2:e4:81:38:
                    e8:0e:84:dd:bc:f2:ac:f6:ef:af:da:15:74:ff:f7:
                    59:e9:41:b9:2e:69:78:47:02:66:10:d5:61:f6:d9:
                    1e:9f:b2:3b:ac:e4:be:f9:e5:16:84:db:15:ad:5b:
                    e3:91:5a:a2:4a:f3:5d:89:0e:97:c8:01:bb:81:78:
                    40:6a:ca:0b:63:c2:2b:d1:7e:ae:0e:42:30:95:35:
                    18:6c:fc:22:77:34:bd:18:46:1c:35:26:3a:e1:6b:
                    1d:6d:3c:b1:d8:4a:a5:87:30:b5:8b:4a:f5:50:5c:
                    ba:1e:17:df:f3:3d:bf:1c:58:0c:84:a2:60:79:2c:
                    3c:01:6e:9d:0d:ff:1e:9f:52:74:03:a1:24:ed:70:
                    08:0a:92:3c:59:19:af:17:9c:93:92:e2:65:61:04:
                    b3:1d:e5:4e:c9:6c:fe:95:5e:aa:c3:45:8b:6c:32:
                    25:0f:ae:30:94:b4:32:72:c1:31:ea:3e:25:93:1a:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:74:A5:86:45:45:45:81:F3:C1:BC:72:67:FD:AC:D7:54:EF:4E:0F
            X509v3 Authority Key Identifier:
                keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:98:4a:b1:06:d5:e2:54:3d:f8:bd:84:0c:35:79:f9:21:1d:
         aa:62:7f:08:57:aa:77:6b:ec:ac:cb:fa:3a:69:1d:82:40:ea:
         0a:4d:1a:87:8b:00:17:d1:36:80:f3:13:d8:50:48:a9:6a:1f:
         e3:fa:e5:5b:81:c2:b9:97:9c:9d:02:6f:a1:d1:2c:64:f6:f2:
         95:41:5e:32:22:b3:23:ae:59:38:1d:3d:5a:a2:d4:33:01:cd:
         9f:64:b6:85:61:03:6b:c7:71:74:c8:ae:fa:e0:1f:e1:6d:12:
         9a:26:10:08:b6:97:66:db:a3:3c:81:93:2d:ec:fa:9a:2a:16:
         f0:56:95:31:2c:78:4e:1f:63:b4:90:4b:e8:2c:16:dc:7e:51:
         a9:e3:29:ad:c6:e1:e9:c8:f5:67:11:60:ca:5c:76:52:b1:76:
         1b:eb:5b:e4:b7:b2:e4:3f:7d:20:57:c2:9b:ec:75:26:11:2a:
         bb:2b:33:cd:64:c4:c6:03:ba:2b:90:97:0c:b4:c6:0d:c5:81:
         a9:1a:d6:19:df:9a:11:92:20:3a:80:f6:91:09:cb:b5:de:76:
         1a:b1:cf:b1:6f:1b:9d:fc:5f:d5:84:df:58:3c:9d:d0:64:7b:
         d3:a7:7d:a8:03:8a:53:37:59:a0:f5:97:43:48:67:f6:c3:ad:
         d6:b6:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:20 2024 by rpki-client on console-fra.rpki-client.org