Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File:                     YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier:          fYr6t6/ynSj+KoUbSqcYTFIgBRyeZKm7yVnw3N87qZs=
Subject key identifier:   96:1E:CE:22:FE:CD:91:50:FA:DA:86:F6:83:60:40:82:31:78:44:B4
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer:       /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial:       019357D2D7B686A117CBE58F244C0218C186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number:          0FCF
Signing time:             Sat 23 Nov 2024 07:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:55 +0000
Files and hashes:         1: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: gwiHOJ0ax9IqV6VksEPOC/Tl/c7750kEiRBy25sGf50=)
                          2: yeU9Jf8iVS9FtuAXF2BSclsouLs.roa (hash: t2xp+rbEnXYwtlv+MVg4MUycEtLYglcE4QhNLMG8Z5Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:d7:b6:86:a1:17:cb:e5:8f:24:4c:02:18:c1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
        Validity
            Not Before: Nov 23 07:00:55 2024 GMT
            Not After : Nov 24 07:00:55 2024 GMT
        Subject: CN=961ece22fecd9150fada86f683604082317844b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:ad:69:f9:2f:9b:3c:8c:25:b4:e4:2d:74:
                    dd:60:ee:f0:a1:37:83:6d:1e:1b:7a:48:be:1d:c8:
                    0c:58:cd:5a:11:b3:cd:99:e1:a6:60:ef:d9:4c:23:
                    e7:48:75:10:07:b5:91:1a:71:df:a6:33:19:e6:77:
                    27:c6:97:43:88:ff:7a:45:03:c0:69:a4:df:2a:5e:
                    05:ca:ae:2c:b8:79:33:d2:f2:4c:74:40:1e:81:a2:
                    88:80:9e:97:f6:9a:72:f0:a0:37:26:5c:69:12:a5:
                    61:a2:9d:6e:84:00:ee:a8:a5:61:64:5f:29:16:30:
                    8e:8b:1a:8f:3a:f3:85:a2:eb:6c:d3:c0:24:50:fa:
                    f8:55:12:8b:1d:48:ee:6f:f4:63:64:ad:19:0a:39:
                    79:72:db:ca:57:6d:c5:7a:19:56:e4:d3:da:77:9d:
                    13:f7:a7:d9:28:57:28:88:f5:cf:4a:23:05:cd:42:
                    3e:dd:a2:0e:35:45:b6:07:28:5f:01:ed:80:b7:e3:
                    9b:33:60:bf:b9:eb:b3:87:51:f6:15:12:24:3e:f0:
                    1c:6e:97:b8:97:e9:43:df:84:8a:2f:7e:eb:bf:88:
                    2a:96:92:d5:1c:c6:d7:9f:7b:00:18:9a:32:35:d0:
                    ca:7e:c5:c8:11:c0:9f:40:b1:a4:bc:5d:01:4a:50:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1E:CE:22:FE:CD:91:50:FA:DA:86:F6:83:60:40:82:31:78:44:B4
            X509v3 Authority Key Identifier:
                keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bb:98:50:12:7a:da:6b:84:23:57:5d:c3:e5:4a:ba:b5:5b:
         ab:47:e9:1b:fb:87:ce:0f:a9:03:11:12:78:44:0a:15:e2:27:
         18:3d:5e:29:96:d5:ad:a6:c9:8d:be:a0:a6:15:92:53:1d:52:
         4b:be:a3:2d:3c:df:18:30:e1:97:24:f4:f5:7b:76:aa:e0:dd:
         05:a9:47:29:84:d0:b4:f1:cd:1c:4c:f2:51:b0:1e:cd:6b:8e:
         63:4c:07:02:db:29:09:2a:a2:96:0d:f4:38:c5:6c:14:77:68:
         d1:22:a0:e6:0b:94:71:68:71:e7:ea:60:1f:1d:e4:06:ec:d9:
         0b:01:d7:15:2b:1e:03:1e:17:e5:14:95:69:20:0a:f6:7f:06:
         d9:ab:bd:49:84:a1:ae:02:5b:3c:af:b2:4f:1d:1d:6e:1d:48:
         62:8b:c3:44:12:ee:d5:98:1f:f4:01:52:9e:67:b0:47:37:58:
         b7:15:3b:af:7d:e8:1e:9c:f6:2d:d8:b8:d9:e5:4c:c3:89:72:
         49:0b:3f:08:9b:76:1f:57:bc:4a:4a:fc:b3:f7:cc:bd:b9:46:
         9d:9a:94:9f:bc:2d:ed:38:a7:de:37:10:ad:9a:59:af:7b:07:
         13:a0:b4:54:b2:d3:39:49:e5:8f:e5:9e:19:17:76:ec:f9:cc:
         52:cb:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:50 2024 by rpki-client on console-fra.rpki-client.org