Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File:                     YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier:          3bNa6SQdXqUFaAdbNCu7SEJPeRYXpqgRQkxTT6QCFQs=
Subject key identifier:   C7:A1:B4:02:4D:1F:3C:8F:D0:E5:5E:32:19:C5:8E:8A:B3:F1:EC:58
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer:       /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial:       0193587832B86315CE9345E5D10F05992A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:01:32 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:32 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:32 +0000
Files and hashes:         1: Onc_GoImgYJgywV4R9UlDDwZCHk.roa (hash: iAv98LcnRuWodCKrZjJPZE1wzL8vqdh2RsyL9YHzZ+4=)
                          2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: pu2tsnIP80Cpa5aUdJhfgC/B9rCiE7s73xhGnv/5LFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:32:b8:63:15:ce:93:45:e5:d1:0f:05:99:2a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
        Validity
            Not Before: Nov 23 10:01:32 2024 GMT
            Not After : Nov 24 10:01:32 2024 GMT
        Subject: CN=c7a1b4024d1f3c8fd0e55e3219c58e8ab3f1ec58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:e3:c1:ac:27:1b:2f:6a:7b:25:e5:9e:13:
                    58:9c:fc:46:00:b4:99:2f:43:6c:5c:33:73:d3:9a:
                    ce:5d:d0:95:00:2d:3a:4f:3d:36:ab:4e:19:3c:8d:
                    74:db:f2:2c:14:10:5f:dc:53:85:8c:c2:fd:b0:ee:
                    75:97:fc:d2:f1:79:3e:77:a3:e3:f5:f1:a4:12:25:
                    1b:16:8e:30:0d:bb:93:ea:d4:fb:05:49:b9:ad:17:
                    88:7e:88:ac:f0:94:b2:28:1b:5b:d3:a7:fb:1d:e5:
                    60:17:79:f8:64:ca:ea:f9:aa:c3:2d:ed:a3:2c:c4:
                    9f:4f:fc:f4:17:e7:fe:37:2c:93:b9:6f:3d:89:46:
                    4a:36:f2:83:84:79:2a:83:56:5b:b0:ac:b0:2e:de:
                    aa:37:7c:e4:cc:ba:bb:3b:71:d8:e1:fc:b4:38:10:
                    18:ee:9a:1f:ea:5b:64:1d:eb:b4:56:72:aa:1c:74:
                    b2:f3:11:cd:25:37:cd:96:92:9b:b4:da:da:57:50:
                    ec:57:6d:cc:16:2a:89:f9:8b:a4:d4:f0:5d:79:c8:
                    e4:1c:ce:5d:9c:a9:76:21:04:67:11:cb:a3:e6:70:
                    b5:54:28:f2:e4:75:35:91:f9:1b:75:46:fd:de:43:
                    7f:5f:2c:4a:32:0b:61:35:4e:f6:48:73:c0:38:96:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A1:B4:02:4D:1F:3C:8F:D0:E5:5E:32:19:C5:8E:8A:B3:F1:EC:58
            X509v3 Authority Key Identifier:
                keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:45:9a:61:a9:6b:02:06:c1:6b:0b:8a:fa:02:47:4a:35:10:
         65:9e:e6:2d:b6:7b:50:7c:e5:6d:e7:98:27:2f:2c:56:5e:ec:
         cd:fa:2d:8a:b4:65:ba:7c:10:47:5e:02:b4:d7:c0:95:7e:e9:
         e6:2e:12:fd:6d:b9:dd:a0:93:22:75:0a:f1:4e:60:f4:99:dd:
         2a:49:10:c8:dc:73:3d:8c:0d:4f:2f:2f:ff:9b:b9:4d:d7:d1:
         75:1a:c2:dd:35:2b:c6:66:7f:f9:e6:a8:ae:4d:c4:38:1f:1a:
         d4:c2:23:e5:29:12:4b:12:15:11:ca:06:9b:1a:57:86:93:94:
         c5:08:8e:bf:44:d3:74:15:5f:01:3f:20:fe:91:43:27:a2:cc:
         bc:91:5f:5a:17:60:8a:19:16:cb:47:91:d0:25:35:84:e2:15:
         05:71:5e:27:52:ec:ff:51:16:c8:27:bc:fb:b3:3c:8e:b8:d1:
         88:ab:44:7e:39:59:ea:89:ba:76:e5:52:5b:b2:2e:74:d3:be:
         34:9f:be:61:14:95:13:08:0e:f9:8b:14:b9:9c:26:b2:d5:df:
         24:f0:8e:79:43:8a:1e:77:09:78:f3:f8:b4:8c:f2:93:f4:ae:
         2b:1b:fa:1e:d7:c3:6b:e8:09:35:9f:85:56:1a:c4:57:0a:3d:
         1c:49:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:24 2024 by rpki-client on console-fra.rpki-client.org