Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File:                     YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier:          YgOPXcApsYmWXXWRBHEXCNem/mAEbmUglchH8nWgBAA=
Subject key identifier:   49:90:E3:9D:B1:A8:43:7A:3A:EA:9E:88:26:94:23:54:CB:D1:B7:AD
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer:       /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial:       01935C545EA2DF0D83EB0190996469E39943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number:          0E37
Signing time:             Sun 24 Nov 2024 04:00:53 +0000
Manifest this update:     Sun 24 Nov 2024 04:00:53 +0000
Manifest next update:     Mon 25 Nov 2024 04:00:53 +0000
Files and hashes:         1: N3TbndfGUvkycvdp2Tfa4aoG_U0.roa (hash: WnxU5jwJ8u1mIoeqJPOK5dBFCNE0dGVFlfGDh1mvj5A=)
                          2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: /9PZ3vIOWWVAMqdFe9AA3WZIWVtSm+GEe6BWx1LuAUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5c:54:5e:a2:df:0d:83:eb:01:90:99:64:69:e3:99:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
        Validity
            Not Before: Nov 24 04:00:53 2024 GMT
            Not After : Nov 25 04:00:53 2024 GMT
        Subject: CN=4990e39db1a8437a3aea9e8826942354cbd1b7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:e1:02:de:7a:3a:3f:56:37:d8:26:c3:69:
                    66:c0:93:87:35:60:f7:31:a9:2d:f3:c9:3c:c1:2a:
                    04:5a:05:c4:90:78:f8:dd:d3:b2:a1:66:a2:5f:71:
                    da:07:b7:b8:d0:01:9e:7f:17:e5:83:02:56:8d:f6:
                    bb:c5:e0:9e:34:6f:1d:f2:42:e4:f3:29:eb:2d:b5:
                    a5:86:31:63:d8:fc:fd:f0:c2:cb:cb:5a:ad:99:0e:
                    17:24:bb:a2:b6:f6:46:e8:71:03:71:24:a4:fc:8b:
                    25:85:e5:c8:56:22:71:20:53:7a:1e:6f:98:d0:28:
                    2f:8b:e7:7f:4c:a4:f0:cb:f1:46:2e:ef:a7:8c:6d:
                    12:2f:d0:e7:33:9c:ac:80:1e:ea:61:cc:51:46:7c:
                    6c:f5:c2:c9:56:7c:5c:d6:19:23:04:67:7b:24:7b:
                    13:cc:87:17:ea:d5:8d:22:0e:22:ee:85:1c:d9:43:
                    82:5e:90:25:a6:14:9c:9b:37:70:0d:d7:8f:38:42:
                    b2:40:10:e0:07:0a:72:26:fc:1b:19:41:29:1d:07:
                    42:37:da:d6:a4:70:ad:b1:f7:99:d5:c7:47:da:d9:
                    6c:60:09:cf:76:bb:2c:65:44:ff:c3:f2:3d:ad:6a:
                    48:c0:c7:56:f2:58:8d:e6:5c:cd:8f:d1:bf:27:49:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:90:E3:9D:B1:A8:43:7A:3A:EA:9E:88:26:94:23:54:CB:D1:B7:AD
            X509v3 Authority Key Identifier:
                keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:82:56:27:f3:c9:00:d1:f2:81:a0:83:dc:7e:c5:bb:f5:
         b6:52:e9:b3:2f:88:8c:79:71:5e:08:2d:a5:5b:78:8b:1b:51:
         b9:68:e0:95:43:1a:1f:62:54:9c:0f:ce:c2:cc:b5:c2:5f:53:
         23:b1:b1:39:3f:f3:e8:4d:d6:4d:56:e6:27:46:ad:1d:48:50:
         8e:e2:6e:eb:52:b3:84:bc:55:54:71:3b:65:bc:f9:a2:fc:5f:
         2a:43:de:f1:42:bc:fe:a0:47:a7:f0:40:8e:83:2b:08:d8:64:
         b0:ce:ef:0a:32:5c:5d:01:55:67:ef:a8:1c:27:1f:f8:7a:9f:
         a2:21:6b:32:79:16:ea:8f:59:1a:15:d4:ed:80:9e:8e:a4:57:
         30:0c:87:02:16:55:8a:e7:01:2d:a3:85:59:ff:b6:16:05:ed:
         45:5d:88:6d:e2:65:2c:bc:ce:42:3e:97:e2:e8:f9:5e:e4:53:
         94:1f:84:fd:60:97:78:ca:c3:93:a8:67:25:c6:01:68:fc:35:
         b2:d6:e4:84:a4:7b:46:63:bc:26:f9:b7:2a:ad:66:96:39:60:
         4d:a3:b4:50:31:31:e0:3a:91:a2:e5:ba:1e:c1:8a:66:ed:ec:
         c7:cd:12:53:73:3d:11:c0:cc:4b:0b:23:d2:e2:cd:74:2e:e4:
         c8:ac:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:47:44 2024 by rpki-client on console-ams.rpki-client.org