Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          cYjZtZqNX36S1xf7+lcScHiSI5n9PsHJo4Y9VO+BkrM=
Subject key identifier:   EC:06:21:34:53:39:AB:88:43:59:24:B2:1A:57:70:1B:3E:41:05:1C
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       0193572DD3FD6C35F91420FCAE2C1F47C137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          0F33
Signing time:             Sat 23 Nov 2024 04:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:41 +0000
Files and hashes:         1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: /S7sqAN9Dia4KIaJnY/k69LPpDj3eABbdXfkPtog3ns=)
                          2: jF9QP8dapmk-x1lMxEKy9EqnwRg.roa (hash: PPKwGmgmuVhxNou5iBo14mbx2YG6Eduu+5Q+M3+GLCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:d3:fd:6c:35:f9:14:20:fc:ae:2c:1f:47:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Nov 23 04:00:41 2024 GMT
            Not After : Nov 24 04:00:41 2024 GMT
        Subject: CN=ec0621345339ab88435924b21a57701b3e41051c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:0e:a3:e9:76:b8:95:99:89:1d:de:13:c6:
                    c2:e1:a8:bd:88:b9:18:96:60:b7:37:09:e5:63:03:
                    e6:d6:cf:9f:1e:cc:fb:f6:30:60:91:2c:af:5b:d9:
                    d1:8a:98:14:74:8f:9c:f1:fb:9d:8b:1c:18:da:95:
                    6a:8e:a6:63:f3:e7:65:48:ca:b0:ca:a2:58:2d:48:
                    76:2f:67:03:1e:51:41:e8:f1:37:bb:87:47:71:87:
                    83:63:5d:77:c3:47:c4:21:a0:be:72:7a:a3:92:e5:
                    3c:be:f2:3d:c2:b3:6e:5f:a2:9b:33:33:6e:3a:be:
                    b0:e3:f4:65:48:cf:76:ee:e7:49:bd:19:b3:65:5c:
                    07:14:0a:64:6e:62:2c:ad:f3:fd:05:8b:ce:7d:c8:
                    98:e9:f2:29:5b:f5:45:41:cb:76:18:72:34:7e:23:
                    cd:60:91:4b:6f:a7:b3:16:61:f0:fd:c8:53:c8:67:
                    b8:a8:b3:95:f5:3b:3a:78:1a:65:75:69:6e:9e:0d:
                    03:9b:63:28:b5:5e:da:37:63:9b:db:0b:e8:c9:55:
                    1d:1c:57:5a:47:e3:5e:0c:46:0e:f1:86:c3:ac:65:
                    df:b3:85:9d:5a:dd:93:ee:b4:17:45:0b:63:91:b3:
                    d1:fd:1d:13:c6:be:44:bb:1c:82:5b:67:c3:77:2f:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:06:21:34:53:39:AB:88:43:59:24:B2:1A:57:70:1B:3E:41:05:1C
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ff:7d:32:bf:63:72:86:9b:d6:10:e9:3f:66:73:47:83:e7:
         80:1b:69:24:df:b1:1b:dc:96:16:fa:23:06:71:eb:38:4b:f3:
         10:a8:72:55:c0:d6:45:e7:a4:0e:5c:de:09:10:0e:24:a9:b2:
         8c:31:40:fd:39:fb:0b:0e:12:a4:86:a2:8c:f3:09:2e:6e:04:
         76:78:75:41:c5:92:9b:3f:00:b0:cb:f3:3b:1b:66:05:71:6d:
         76:51:d6:a3:b0:f2:7b:fd:4e:8c:7f:78:65:01:c3:36:ea:6a:
         98:1f:06:6b:a9:0e:1e:c0:0b:dd:c9:d4:74:ac:a1:66:0b:43:
         d2:d5:0e:4a:27:4c:23:a4:f0:d3:56:18:74:81:a1:4a:1d:b9:
         08:d2:55:d0:f3:12:c0:13:9f:8b:9b:53:04:23:56:ed:39:fe:
         31:97:2b:ed:42:50:bc:b8:e7:5b:e8:2b:dd:fb:08:03:c9:ba:
         63:c6:32:6a:8a:63:1d:08:f1:12:08:96:be:93:7d:54:9a:4a:
         20:b5:58:e9:f7:40:2b:1e:70:45:78:f3:61:45:ff:c6:b6:f4:
         a1:49:13:73:74:80:0d:f5:be:de:09:e4:e5:53:0d:2f:39:e2:
         03:69:cc:2f:83:4c:78:d4:4b:23:78:13:88:b4:57:2d:09:d8:
         07:d2:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:21 2024 by rpki-client on console-fra.rpki-client.org