Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File:                     ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier:          DeCYK5Y55TrmTChtpUmbiNUf2UgHXZHF4T1wAsCrksg=
Subject key identifier:   EB:8E:98:5D:3F:FB:3D:A7:A5:CB:74:35:F9:7D:47:66:AD:84:C3:A3
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer:       /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial:       0193549CE899DC733E5FF00A7445BD91EDE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 16:03:09 +0000
Manifest this update:     Fri 22 Nov 2024 16:03:09 +0000
Manifest next update:     Sat 23 Nov 2024 16:03:09 +0000
Files and hashes:         1: ujqxZWYUkm_291dR7q2YAlEqbKI.roa (hash: qO1HRcMkLp/OsoI/xiHf6JGQ2YFreP1Hgonh/BcG0EY=)
                          2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: /0IZmhLb1MGBLAq3eo6ubFeg9zNGZ2hL26cxTfWgggg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:e8:99:dc:73:3e:5f:f0:0a:74:45:bd:91:ed:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
        Validity
            Not Before: Nov 22 16:03:09 2024 GMT
            Not After : Nov 23 16:03:09 2024 GMT
        Subject: CN=eb8e985d3ffb3da7a5cb7435f97d4766ad84c3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:43:97:5a:c7:d6:bd:38:4b:37:54:9c:6e:
                    84:c1:8f:f1:52:c8:8c:85:99:fe:d1:c2:1a:3a:22:
                    0f:90:4d:d9:bd:d5:a5:94:7b:e7:e2:27:de:3e:ba:
                    64:ba:86:0c:69:ac:80:fa:f0:80:db:20:61:4f:da:
                    c0:22:58:36:22:e2:8f:ab:fe:1e:a0:20:82:13:a4:
                    41:7e:99:5b:96:aa:fe:b2:04:76:d5:4a:05:a8:0e:
                    bc:27:ff:fe:79:cb:af:0a:82:d2:57:3e:6d:87:75:
                    c8:eb:63:d0:ab:fb:0d:a3:2e:00:72:3c:5c:f4:a4:
                    a3:51:08:1b:56:a0:43:14:64:d3:46:e8:b7:2b:85:
                    e0:1d:7c:27:fa:67:77:0a:06:ad:56:85:55:ce:31:
                    11:c6:8d:67:7f:bb:5e:28:c0:83:96:90:ab:ca:88:
                    c2:a6:52:76:ae:83:30:82:61:9e:e5:73:63:2c:56:
                    e2:b3:76:4f:83:69:cf:7c:fd:60:1e:c3:3b:78:a0:
                    ff:3a:ff:20:88:7f:7b:cf:f6:61:51:01:19:c1:bd:
                    ca:ca:cd:85:b7:ec:bf:87:41:bd:ee:b9:2e:15:c4:
                    2a:6a:56:17:26:b5:ae:f7:26:84:2a:9b:bc:e8:11:
                    7f:71:f0:66:35:1a:63:df:ce:e0:f5:77:6f:64:ba:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8E:98:5D:3F:FB:3D:A7:A5:CB:74:35:F9:7D:47:66:AD:84:C3:A3
            X509v3 Authority Key Identifier:
                keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:81:72:23:32:ca:d6:63:38:8b:de:3c:cf:19:2f:2b:5d:18:
         3b:e4:92:48:3b:c4:1f:ea:6e:cf:af:32:84:39:bf:18:85:46:
         d3:4b:6f:ff:00:80:86:41:f3:b6:e7:57:b7:80:2b:8c:2a:7d:
         53:1a:b6:78:7c:50:be:b0:04:b8:96:3b:6d:11:87:24:b6:12:
         2b:ce:02:82:82:54:0a:e4:f4:0b:5a:d4:1a:20:89:a8:89:8e:
         a8:88:f2:04:07:15:e0:fb:de:ac:a5:33:b2:3a:65:22:92:4e:
         3d:1c:fd:ee:6f:7a:e2:70:e0:df:29:2f:25:1e:8f:70:ea:59:
         61:57:5f:2a:09:3c:ce:5e:47:74:4e:54:d4:36:ef:05:f3:fd:
         8a:5b:a2:db:38:0f:91:24:58:28:d9:04:84:18:e9:f7:96:06:
         ac:12:ef:83:f8:5d:36:ab:8b:5d:40:f9:9a:b9:ec:68:22:44:
         dc:37:7d:06:24:44:1e:7c:93:3d:88:30:f2:ec:03:ce:64:38:
         a5:91:fe:4b:c9:c8:3a:38:92:ac:4c:f4:b3:08:98:34:97:c9:
         88:e0:13:de:78:52:17:ab:a3:dc:3e:2e:4a:0e:2d:d2:ed:88:
         42:36:87:a7:78:2a:fc:61:f7:bd:57:c7:71:b8:eb:c3:d5:eb:
         ae:b9:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:37 2024 by rpki-client on console-fra.rpki-client.org