Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          q/c+MYyq0oUZSHHbzFOQF3Mv7A3sTah4ryvB/ZLOcsM=
Subject key identifier:   E3:A1:7C:E3:76:DF:CC:D3:D9:4E:E6:87:79:75:E2:BA:E7:C4:92:45
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       0193568A0FF5591CBEDC89797F7DCB47AE10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0801
Signing time:             Sat 23 Nov 2024 01:01:48 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:48 +0000
Files and hashes:         1: 4AdcEbUIm1jUWryNWT7uHkF02DQ.roa (hash: bt94BJFtgx7Fdp+bGHLWFpvt7srCfzCYyNxSCtRgTYU=)
                          2: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: 7vqU2v431oe6zKwdyAC2zc2F11U06y/zF674XMdKga4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0f:f5:59:1c:be:dc:89:79:7f:7d:cb:47:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Nov 23 01:01:48 2024 GMT
            Not After : Nov 24 01:01:48 2024 GMT
        Subject: CN=e3a17ce376dfccd3d94ee6877975e2bae7c49245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:68:b2:93:1d:44:35:db:d8:a0:55:cf:88:
                    53:15:fd:1b:b0:b9:69:cd:bb:83:83:97:24:c2:0b:
                    92:5f:69:ba:c9:91:e4:d5:85:a7:e0:e4:92:90:1e:
                    1d:aa:b2:e0:55:45:e8:f0:9d:5a:73:09:83:50:de:
                    fd:00:20:af:b1:a7:1b:95:ce:81:97:49:b9:af:72:
                    35:21:07:16:eb:1c:98:fa:06:21:1e:de:e0:12:f3:
                    5e:a7:97:97:9b:87:b9:64:de:d2:59:20:ac:21:9c:
                    31:af:7c:98:ee:1b:9b:f7:13:7d:11:cf:5d:7f:41:
                    34:31:e9:49:11:35:b8:22:4f:9f:eb:3e:07:06:5b:
                    91:1e:8d:ec:e0:8c:44:0d:67:8f:a4:90:3b:30:3f:
                    8a:75:84:84:53:b6:db:3a:08:27:bb:8e:d5:de:7c:
                    a6:ae:a2:5e:30:88:8c:d2:95:71:32:61:67:b7:88:
                    97:f8:51:c7:43:33:91:13:db:13:0a:35:c9:79:99:
                    f3:6b:8b:d9:5c:45:1d:5c:9c:10:e6:90:61:c3:bb:
                    ee:c4:05:17:5d:50:db:d8:66:ef:05:87:c9:93:1c:
                    8e:ba:3c:99:b6:98:1f:69:94:98:64:2b:a7:8a:8b:
                    52:46:c6:27:01:a1:c6:bb:eb:35:ce:b0:ed:b7:4f:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:7C:E3:76:DF:CC:D3:D9:4E:E6:87:79:75:E2:BA:E7:C4:92:45
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:63:c1:84:26:dd:09:7b:c8:64:31:01:94:82:cc:8a:07:
         6c:e5:64:f9:7e:35:ea:c7:2c:02:70:6c:8b:37:f7:c0:2a:e6:
         24:e1:93:36:1b:7b:00:03:d0:cf:d6:8c:f9:13:ab:d8:0e:06:
         3f:3d:38:9a:c3:7f:e2:6b:b7:94:32:a8:38:38:3a:c4:eb:69:
         32:7e:4f:57:ed:0d:36:0c:2a:4e:7c:3a:3a:e3:47:cf:66:af:
         45:ed:5a:cc:6e:5d:8f:51:c9:43:17:91:cb:4f:2a:a5:32:5d:
         46:10:b8:9a:74:16:49:1f:d4:4a:68:e2:95:38:6f:1c:d0:17:
         65:8e:cb:09:5a:0d:58:c3:ca:e4:2f:f0:c5:87:dc:a3:1e:43:
         30:53:46:66:58:d4:40:6b:05:5c:fd:db:d5:70:70:de:40:42:
         2f:10:19:1b:01:4e:d9:d2:6a:7c:d7:17:11:b4:db:56:48:db:
         f8:b2:99:0c:c2:41:95:30:98:77:06:dd:69:0b:e6:70:cb:07:
         bb:bf:27:d8:15:7d:8c:74:8e:29:05:04:dc:a7:f8:b2:c7:99:
         c8:57:38:8b:57:34:36:4e:09:73:06:17:2b:9a:71:69:33:02:
         1c:e7:d8:be:e7:de:54:26:9d:f8:e9:4a:3f:39:87:05:1f:9f:
         8f:0d:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:58 2024 by rpki-client on console-ams.rpki-client.org