Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
File:                     YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json)
Hash identifier:          mAELezYAYyiKunRLMzxg+QDd8OTonQnGkSD2tx70CuM=
Subject key identifier:   A8:48:A4:FB:7F:54:14:EF:6C:A2:FB:33:F5:10:03:E6:54:50:7E:42
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Certificate issuer:       /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial:       0193572DB951E854C90C56A2419194B3289C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
Manifest number:          033E
Signing time:             Sat 23 Nov 2024 04:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:34 +0000
Files and hashes:         1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: oWWCU1FB1jL1xyswbhpaMSXDroaUelepJg9NgRqkWN4=)
                          2: nEbEAI4Kl6B2pRjyWWyJm8nX5QI.roa (hash: qYyg303gwHsQ9ddKUak/IzlrW/XAojDoUTpf0GFgduI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:b9:51:e8:54:c9:0c:56:a2:41:91:94:b3:28:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
        Validity
            Not Before: Nov 23 04:00:34 2024 GMT
            Not After : Nov 24 04:00:34 2024 GMT
        Subject: CN=a848a4fb7f5414ef6ca2fb33f51003e654507e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:88:35:19:1b:d3:29:aa:52:52:9c:7c:82:
                    58:f2:50:f5:be:c7:c2:23:5b:87:39:99:b4:4a:0f:
                    01:18:b0:c6:ac:d6:b1:4f:27:88:fa:64:f8:02:52:
                    c2:c7:56:f2:7b:65:71:e4:1b:4d:69:03:a3:a5:cb:
                    c2:d4:12:e0:c2:b9:77:ea:d6:09:f9:69:fc:f5:df:
                    02:2c:2f:05:5b:48:93:e2:0f:13:49:b1:3f:20:83:
                    90:b4:2b:e3:5c:cb:56:b7:2f:0d:57:59:c3:72:a4:
                    ab:04:bd:f7:6b:f7:fe:26:5a:8a:ff:b5:52:29:35:
                    3d:ba:92:af:3e:24:48:91:cb:3d:cb:2d:fc:42:b0:
                    ee:e7:71:0c:78:b3:ec:1e:e4:15:67:bb:71:d0:c4:
                    2c:7c:ba:c7:ad:fe:d2:c1:63:82:3b:31:fe:f3:6d:
                    77:f5:34:ae:65:5b:44:d2:d4:4e:0e:69:6d:0f:d2:
                    b3:ee:07:7b:29:00:53:1e:58:36:fe:37:3c:8f:ad:
                    22:23:7a:27:bc:50:99:f2:89:e3:b4:56:10:71:6c:
                    1a:4c:6b:0b:21:da:4f:4b:a8:e2:f3:21:2d:19:86:
                    0f:06:be:75:f9:5e:62:a4:5c:cf:eb:d8:94:fd:8e:
                    9d:45:42:91:db:1b:80:47:12:3b:8f:88:25:e6:c7:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:48:A4:FB:7F:54:14:EF:6C:A2:FB:33:F5:10:03:E6:54:50:7E:42
            X509v3 Authority Key Identifier:
                keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:f5:9f:ca:42:ff:db:96:43:4f:6d:e5:25:76:ac:d9:4f:
         1a:8c:d9:7a:e6:95:d8:9b:2d:d4:ad:03:3d:b2:8e:36:e0:4e:
         7e:95:88:dc:10:c0:7c:41:4c:54:7b:59:c9:9f:c8:99:57:93:
         79:e6:1c:48:a4:0b:8f:6b:b5:56:dc:02:85:63:de:fe:c6:0d:
         a6:95:4f:59:29:9d:ca:7b:46:c0:45:fb:97:38:f3:10:5d:3a:
         dc:03:13:bc:fc:97:79:b3:9c:da:2d:46:dc:f7:9a:38:0c:22:
         84:4c:68:05:27:33:f4:c7:5a:a5:e1:f2:17:a3:2b:33:86:57:
         31:60:28:8c:36:c5:1a:77:19:07:53:01:ed:72:11:a8:1e:92:
         e1:4b:18:61:03:e5:3f:ae:61:0b:92:86:40:84:08:ba:88:28:
         05:34:8b:26:f0:d8:28:6e:fd:4b:a9:22:0f:10:b7:52:36:9d:
         f3:03:46:14:95:24:16:87:3b:49:95:45:60:9f:f7:7d:f4:8a:
         41:69:ab:d7:1a:d7:65:9a:5f:68:83:d8:9f:9e:fa:98:c6:c3:
         0e:e8:66:cc:7e:08:32:b6:af:d4:35:8b:cd:84:96:1f:66:6d:
         cf:51:28:18:39:5c:3b:73:67:2b:89:bb:19:ac:05:bf:be:5b:
         c4:0b:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:33 2024 by rpki-client on console-fra.rpki-client.org