Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File:                     ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier:          Y12q59beoUR6+4idlDPxU69fKUMdkiUcBNV347wjuCs=
Subject key identifier:   11:D5:68:25:F2:3E:2B:A4:14:32:F0:74:03:87:5F:58:24:91:29:0B
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer:       /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial:       01935878F082D2E46971C30FA392281B4676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number:          1304
Signing time:             Sat 23 Nov 2024 10:02:21 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:21 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:21 +0000
Files and hashes:         1: VoFNE13yydiEt4xsZvIlv4k4W7E.roa (hash: f289WsJo098/OYEhqFW2juzSrd1otWfkECx7AhnQH4A=)
                          2: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: GX5+Rtr/ZMmVeF0Xik3WI7c/p7G24qFhiVwLbuGmE04=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:f0:82:d2:e4:69:71:c3:0f:a3:92:28:1b:46:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
        Validity
            Not Before: Nov 23 10:02:21 2024 GMT
            Not After : Nov 24 10:02:21 2024 GMT
        Subject: CN=11d56825f23e2ba41432f07403875f582491290b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:a6:e2:81:fd:83:b4:de:4f:34:f5:8e:59:
                    5f:7c:00:58:bc:ea:45:1c:a5:e4:7a:db:48:ea:35:
                    38:6f:42:34:8e:c2:63:e3:4f:7b:ab:1b:92:9e:f0:
                    c2:97:d9:96:74:65:79:13:66:ef:c7:fd:8f:f6:bb:
                    9b:56:fe:21:ad:5f:15:22:a6:c3:ea:ea:58:b3:c4:
                    df:53:e1:ae:57:a9:28:0e:64:f8:15:f5:71:9b:a3:
                    8d:a0:24:46:3a:9f:10:43:ce:21:b0:ab:a5:bc:0e:
                    31:97:0b:2c:fa:d2:6a:a0:fc:1c:fe:4f:d2:d5:1a:
                    19:b9:e0:4c:19:08:c3:46:b8:8d:87:1f:56:34:3f:
                    0e:6a:6e:d5:15:d5:98:08:37:85:e3:7f:17:b0:59:
                    1d:81:7f:31:d6:fb:35:44:9e:7d:ef:e3:45:ce:f9:
                    c5:55:b9:4b:4c:04:62:60:36:c4:31:78:ef:08:c2:
                    05:3b:ab:04:af:9c:a8:c1:14:7c:09:00:6f:56:a8:
                    1b:f2:20:8c:10:f8:41:3d:67:c1:d1:ed:27:26:fa:
                    dd:28:c2:1c:74:66:06:d2:e2:aa:1d:bf:12:03:f3:
                    6e:be:7e:f4:3b:7d:e7:86:bf:ca:70:94:2a:75:2b:
                    a6:5e:0e:b1:61:ad:08:b3:0d:64:12:25:78:1c:e9:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:68:25:F2:3E:2B:A4:14:32:F0:74:03:87:5F:58:24:91:29:0B
            X509v3 Authority Key Identifier:
                keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6c:61:d6:8e:26:b8:7f:76:fa:af:3d:0a:49:e5:ce:e0:ee:
         0d:69:8a:88:97:fa:d4:18:84:47:32:e8:95:1d:4d:57:8d:4c:
         77:47:36:f9:6a:0e:eb:53:14:5a:99:5d:15:3e:c7:04:0c:44:
         af:a6:83:d0:a7:30:a8:c5:ba:ea:54:f8:4c:10:b3:81:6f:50:
         d0:3d:a4:a7:9a:8e:16:80:db:57:0a:92:9f:19:43:d3:31:27:
         92:b8:c7:c1:56:d3:28:4d:b5:c8:db:e7:25:cb:62:b5:1c:c2:
         c5:e8:99:3f:12:dc:a5:cb:a1:97:1a:0f:8f:0c:72:97:52:4b:
         63:b2:b4:93:30:74:b2:8a:5b:eb:18:5f:08:eb:73:21:34:4a:
         c9:d9:5e:67:eb:72:f6:01:b7:7d:cb:88:64:5b:63:63:e2:84:
         b2:50:ea:07:d1:0a:ca:41:d6:a1:1b:f4:85:2e:5b:c7:54:a2:
         3e:92:eb:29:fd:bf:b7:50:00:da:b6:89:d2:6e:fd:a6:a0:41:
         88:4d:c0:99:4c:96:38:b5:ad:fa:42:4e:de:ae:84:85:61:a3:
         0a:40:1f:3c:e7:77:0b:f6:2d:e7:73:a8:67:82:ab:b3:46:d2:
         c2:e0:32:5b:12:35:2e:38:dc:9b:8f:4c:1c:7a:44:fd:d8:c5:
         f7:ab:8e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:53 2024 by rpki-client on console-fra.rpki-client.org