Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File:                     YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier:          rdP2cA5Cg96QatxLiHPEl66kTBzwkrN8Mun5OyoA7yU=
Subject key identifier:   08:5C:CD:A8:25:4E:75:A1:01:CB:41:59:14:4F:42:FF:BC:89:D8:27
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer:       /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial:       0193568AF1717451387F2229D970FAF3AD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number:          0858
Signing time:             Sat 23 Nov 2024 01:02:46 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:46 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:46 +0000
Files and hashes:         1: Noh9nd5LznmdLINSjsecFonRUjU.roa (hash: yv8Lfo3WOsCYqXmqQM4c4XBRYVRHRl/otv79wk8f98I=)
                          2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: 4RMYhP0UGqp/K2zqKDmkN6yqPYDkxm4X8WxCmiJ1buo=)
                          3: ZtSuzUxGMN2DgV-g22JAkLOG1Wo.roa (hash: BbbnttVvteibsEHwH1SDtF25iCOgpDakPfLjwVC1v2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:f1:71:74:51:38:7f:22:29:d9:70:fa:f3:ad:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
        Validity
            Not Before: Nov 23 01:02:46 2024 GMT
            Not After : Nov 24 01:02:46 2024 GMT
        Subject: CN=085ccda8254e75a101cb4159144f42ffbc89d827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:65:48:b2:5c:2f:17:25:41:4a:65:b8:c9:
                    4f:b8:d6:dd:3a:b7:0c:4b:b7:30:c9:68:8b:28:20:
                    b5:6d:bb:bf:1f:06:4a:17:7d:4c:83:f3:e3:e1:a9:
                    b5:c6:64:89:2a:38:ae:33:d4:48:75:fc:4d:31:75:
                    3d:1e:7a:21:56:e3:3e:8f:89:3d:7b:20:cc:af:01:
                    67:80:be:90:bd:f3:36:6b:c4:cb:8c:61:8d:cf:6e:
                    e5:60:02:a4:4b:24:ee:68:be:d2:91:51:ae:ea:6a:
                    7f:c0:9d:d8:06:fe:d4:11:db:e1:f9:b4:ed:6e:5b:
                    df:e2:a8:85:5d:6e:8d:a5:95:4e:cc:49:0d:91:c5:
                    40:ed:32:ee:60:13:a5:8c:4d:92:be:94:34:f5:fc:
                    81:8e:ca:34:2d:b0:c7:57:20:d4:59:3a:04:74:d0:
                    d4:42:8c:06:dc:38:fd:23:e6:f1:83:cc:8a:1d:d8:
                    ab:84:a1:bc:28:6a:17:c9:84:66:56:e6:68:4d:59:
                    b3:f5:76:82:9a:3a:fd:8d:55:74:0b:64:c5:98:48:
                    f7:e2:c0:ff:b6:0b:2e:b9:73:62:67:57:e0:15:d3:
                    6f:4a:7c:8f:0d:4b:7a:a2:62:68:ad:8f:a8:b1:d5:
                    b9:11:d7:15:7d:22:57:05:e0:ba:2a:6c:c6:f8:be:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5C:CD:A8:25:4E:75:A1:01:CB:41:59:14:4F:42:FF:BC:89:D8:27
            X509v3 Authority Key Identifier:
                keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:89:1a:68:b4:8b:6d:b1:7e:21:2c:97:dc:96:90:4b:fb:
         a4:1c:e7:81:1a:2c:02:4e:e5:d8:64:84:e0:2c:4a:37:23:a1:
         fc:0c:8c:ac:00:e1:ea:af:b5:75:27:aa:86:82:5e:ea:16:0f:
         7c:2e:b4:08:fc:ec:53:51:f3:86:36:7f:e9:1f:ea:7b:e2:56:
         41:e9:f2:d3:ed:cd:ee:1a:49:95:f4:46:74:be:96:77:93:40:
         86:af:96:5f:1e:07:bb:3d:c0:bd:87:70:79:10:90:18:bd:db:
         45:ab:8f:4c:df:c2:c2:c1:60:0d:65:d3:cb:34:6c:84:33:ff:
         4a:4a:de:0b:4a:46:a1:d0:b8:e4:4d:3f:57:71:a6:31:df:c8:
         af:9e:81:f6:84:d9:da:8e:d2:e0:68:ab:a8:86:9e:52:7f:24:
         59:4d:ff:88:b4:46:ed:1d:aa:f1:28:56:52:e3:9f:41:fa:db:
         f7:bd:83:a1:57:e5:f2:05:84:5d:d4:1a:84:eb:f1:58:c5:f1:
         b8:86:98:bf:ef:fd:0c:ea:cb:2f:3d:89:fb:a0:bf:17:75:b3:
         ab:e4:1f:24:25:8b:f2:30:8e:4c:8f:b0:16:97:0f:9d:60:9f:
         71:6f:4e:14:b1:04:01:29:d8:3f:64:20:1b:d9:fe:8b:e5:81:
         df:20:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:09 2024 by rpki-client on console-fra.rpki-client.org