Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File:                     ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier:          6nkDrsQI/zvzOAk1hfsJ59xmHRpu7lqRwTHXesduKUY=
Subject key identifier:   84:39:28:B0:BE:DF:9F:E0:98:4C:78:6F:D1:95:AF:7B:5A:DC:41:BC
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       01935274F6486E18FC8BADADE1E596A8FE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number:          02A8
Signing time:             Fri 22 Nov 2024 06:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:17 +0000
Files and hashes:         1: 1-C-YuO6qNqSyxzgvithwScOGN_c.roa (hash: 43JynL37zJKU0Vw2nQwY3HqV/Qq34HSTJqgwBdc21Ug=)
                          2: 7GAi5jXyv6VY2o4Nb-4InA18q60.roa (hash: rURMUB2XorA27cHZjGvYKlb1nOx6oKcS/uBeCH1PARQ=)
                          3: FA3LSdGbYsf9W6UajmtU0yIorns.roa (hash: A5hHq9zLylolZoRBD5/LvE0OpguLYSrxMFigllufawI=)
                          4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: KWMR5/S8XA/IWM90Wmya/2fd33vHSEmlUb+DTtKAxW0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:f6:48:6e:18:fc:8b:ad:ad:e1:e5:96:a8:fe:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Nov 22 06:00:17 2024 GMT
            Not After : Nov 23 06:00:17 2024 GMT
        Subject: CN=843928b0bedf9fe0984c786fd195af7b5adc41bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:2c:c0:21:5c:bd:16:d1:42:0e:16:0f:77:
                    7d:96:b3:a5:ec:a4:29:01:19:99:67:32:cb:d0:7c:
                    60:6f:8a:11:c0:bd:87:4d:40:bf:91:9f:a8:11:91:
                    1c:69:e0:3d:a6:b6:e1:7c:68:46:a1:1f:ad:65:33:
                    95:c7:9e:7a:92:e0:c2:0a:27:cd:ee:65:ea:ca:f9:
                    a4:d0:d0:7f:80:04:71:98:9e:3c:ba:88:fe:38:08:
                    92:ef:3a:ce:07:13:09:66:a2:1a:d5:a8:0c:a0:c6:
                    8c:c0:fb:b8:af:b4:06:15:02:cb:d1:99:63:73:76:
                    d2:96:f1:29:99:a9:f8:45:25:3d:f7:09:0e:e7:e8:
                    1a:41:b1:58:9f:26:2d:a8:05:e3:e9:a8:19:e5:e7:
                    d7:3b:fe:4e:b7:f5:c4:d3:40:28:50:4c:d0:3b:37:
                    d0:3f:91:70:3a:4e:41:ea:69:4e:5e:44:4b:b7:5c:
                    ec:de:d5:f3:f5:15:81:83:b9:6d:d6:55:13:84:37:
                    07:bc:c4:a1:12:20:98:63:25:95:1d:8f:66:55:08:
                    6b:bc:04:b3:6a:16:64:4f:e9:6e:0d:b1:f5:f5:bf:
                    a2:82:ef:1c:93:9d:5f:1a:f3:b5:7f:55:ae:fb:75:
                    20:b4:23:15:50:93:03:a0:75:c6:e0:ab:56:ca:7a:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:39:28:B0:BE:DF:9F:E0:98:4C:78:6F:D1:95:AF:7B:5A:DC:41:BC
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:14:20:43:a3:b6:59:6b:3a:c0:92:10:93:cc:d1:9c:03:61:
         25:9b:e8:11:41:79:ea:01:e8:9b:56:24:51:c2:bc:dd:28:41:
         db:dc:25:6f:5e:e0:ea:ed:84:1e:55:e4:e1:7f:4a:33:7d:84:
         29:cf:8f:4d:74:25:f0:57:ad:bf:52:c8:02:57:5f:85:21:03:
         02:ce:e8:a7:e6:cb:d3:b3:fc:d7:db:b8:0c:08:fc:48:ae:61:
         6c:c0:2e:17:e9:b2:86:ee:9b:04:31:2f:56:fb:0d:da:1a:ad:
         d8:5a:1b:a2:6d:70:ab:ea:c8:e1:05:06:bc:af:94:3b:dd:e6:
         80:98:3b:8c:95:3c:59:0a:1c:42:de:fb:77:be:0a:44:9b:09:
         7b:ef:e0:0d:97:e8:0d:f5:55:40:09:4e:3d:8e:32:c0:75:37:
         b1:77:96:ed:a6:c4:77:03:5e:c2:9c:53:05:da:7a:28:0a:95:
         c9:2c:a8:11:f2:4c:9e:af:99:46:54:66:34:8c:c6:89:82:2c:
         d4:b7:3e:fd:db:78:aa:88:5a:fa:4e:ca:6b:4d:a7:ee:6e:25:
         1c:5e:b9:15:69:e3:6b:18:b5:f6:1c:a5:2d:12:56:96:21:ff:
         0f:cb:d0:e2:82:9a:d8:cf:fd:09:f0:5d:e1:c6:89:d1:9e:eb:
         14:9f:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:01:14 2024 by rpki-client on console-fra.rpki-client.org