Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File:                     Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier:          IUZVKvJTQlCF6Ae7nqwli7NpLWqLnMHqjslCxRnhQZ4=
Subject key identifier:   C2:61:C0:C2:E1:57:67:E8:5A:44:3A:36:EF:A2:35:74:82:13:82:38
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer:       /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial:       0193609E6E2F6A158B6806568403A052DEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number:          03EC
Signing time:             Mon 25 Nov 2024 00:00:15 +0000
Manifest this update:     Mon 25 Nov 2024 00:00:15 +0000
Manifest next update:     Tue 26 Nov 2024 00:00:15 +0000
Files and hashes:         1: PlNyg2RwFEGROgUOS-sF4U3g2Gc.roa (hash: 7Z03kZ1F1780f05ndsxWSJevUCubeug83dya6Ulky0c=)
                          2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: YzyU/twWaYs+nuPHb1+k/rVk2ecqOWMxWA7ct4mHRdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:9e:6e:2f:6a:15:8b:68:06:56:84:03:a0:52:de:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
        Validity
            Not Before: Nov 25 00:00:15 2024 GMT
            Not After : Nov 26 00:00:15 2024 GMT
        Subject: CN=c261c0c2e15767e85a443a36efa2357482138238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:d4:a8:4b:17:39:37:fd:1a:26:3e:b5:f2:
                    8b:24:68:91:bc:0c:db:44:a3:c5:6f:d1:cd:4c:1c:
                    94:9c:d0:98:38:33:c6:e5:3a:20:9a:43:48:78:6b:
                    62:a6:ef:92:e9:76:4b:80:ad:39:f4:fd:34:34:1b:
                    69:81:e7:57:83:14:d2:93:cc:c3:cc:02:7b:7b:5b:
                    f9:d5:de:33:e3:59:73:18:80:d0:4e:c6:ec:3d:b0:
                    ed:53:67:7f:cf:a3:f8:5a:0b:d9:50:52:72:df:3d:
                    53:f3:e6:e8:f4:b0:9c:c8:2d:0d:77:7f:52:72:48:
                    72:d4:2d:75:68:b4:df:bb:db:74:1b:0a:05:90:e7:
                    44:a0:88:2f:4c:10:87:9f:97:7e:a4:de:09:01:0a:
                    13:3a:26:d8:63:8a:fe:ab:01:f0:d7:e9:a6:1b:25:
                    77:1a:1f:6b:f0:53:f6:c3:f3:d0:f1:3a:00:de:22:
                    28:ba:1a:05:f7:29:c2:28:98:40:7e:93:36:49:85:
                    9f:28:f0:35:94:3b:da:fb:65:d7:8a:80:59:14:f4:
                    12:20:5b:04:f1:a8:9c:54:c5:80:24:aa:2b:59:7f:
                    37:1e:88:b3:10:b1:ce:6e:10:31:e3:24:e7:19:05:
                    5f:85:cc:94:44:da:6b:88:ec:29:d4:2b:e9:5b:d8:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:C0:C2:E1:57:67:E8:5A:44:3A:36:EF:A2:35:74:82:13:82:38
            X509v3 Authority Key Identifier:
                keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ba:9e:fd:f0:e2:a3:0f:0a:1e:a7:e5:e8:ad:90:a8:d0:ee:
         43:34:e9:b2:f7:a4:55:3c:31:98:7c:47:aa:70:88:72:88:e1:
         f9:82:e7:e0:43:9f:59:6f:93:1d:61:e1:6b:91:7e:5a:9e:74:
         2a:49:a8:06:a7:05:90:ab:d7:79:5b:34:e2:35:35:5a:7a:64:
         5d:d3:c5:6d:70:b2:cb:73:d7:40:bf:70:06:9a:0d:2d:5d:cd:
         6c:47:e0:7f:6b:cd:2e:c6:36:cb:05:05:d3:6a:b3:6e:85:be:
         96:f6:9c:d5:72:27:b0:1e:aa:cd:6c:dd:49:67:4a:24:f5:27:
         52:02:fb:0f:f7:8b:4f:98:da:25:13:77:d1:6f:11:5b:86:de:
         41:cb:3a:c3:46:80:9a:18:63:a3:6b:eb:6d:92:9e:bf:33:61:
         9b:9c:69:19:a5:a0:78:b8:03:fb:e9:27:04:92:57:38:67:87:
         85:39:8f:da:c6:83:12:a1:0d:1e:ef:be:94:58:21:5c:84:7b:
         ba:e7:be:f0:0d:15:1f:58:5a:61:00:80:7f:bb:68:35:b7:4a:
         56:78:05:37:af:35:f5:bd:bd:cb:8e:2f:5f:04:f3:bd:33:b5:
         3a:08:93:93:d9:d9:d5:4a:c5:7d:2a:9d:38:11:e2:5f:c9:5f:
         a1:a8:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:33:18 2024 by rpki-client on console-ams.rpki-client.org