Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File:                     YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier:          a5+1unminPI2IiZu/UOG41dH/dWJHyHEuqhIrlYTxJc=
Subject key identifier:   A5:0C:02:01:B7:B1:56:29:AE:59:AA:1C:5E:B7:EB:5B:5C:AF:03:7B
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer:       /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial:       0197B70EEE1CDDE7687C2F69DF7DB39019FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number:          1025
Signing time:             Sat 28 Jun 2025 15:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:38 +0000
Files and hashes:         1: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: os8iCK9mu11Yxvnp+PgOwuksfmn9NVuGdelvO4tdLY8=)
                          2: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (hash: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ee:1c:dd:e7:68:7c:2f:69:df:7d:b3:90:19:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
        Validity
            Not Before: Jun 28 15:01:38 2025 GMT
            Not After : Jun 29 15:01:38 2025 GMT
        Subject: CN=a50c0201b7b15629ae59aa1c5eb7eb5b5caf037b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:da:32:4a:87:32:1f:c6:d2:e1:5b:25:a4:
                    72:86:68:3b:d2:45:85:dd:5a:c9:a3:c0:c1:48:7f:
                    7a:37:cc:6e:be:79:e4:b8:e3:7e:ce:24:d5:d6:74:
                    86:d3:a2:00:96:92:3a:60:a2:fe:5e:53:61:23:6f:
                    a6:4d:91:ee:1d:f3:e4:3c:92:d3:37:04:d0:fa:d6:
                    c7:55:c3:e9:6f:e0:b2:70:47:43:cd:63:5e:5b:f0:
                    5a:15:43:57:b7:fe:2b:ea:37:fc:38:a2:16:03:be:
                    99:d8:c5:6b:b1:1e:6a:05:15:70:15:25:cf:3b:f8:
                    00:79:0a:11:d8:4c:63:bc:a6:b3:76:1a:4d:d6:b7:
                    0c:d0:d4:52:1a:85:f3:2a:10:50:bf:86:53:ec:97:
                    93:eb:5e:00:45:67:29:be:c7:80:a1:e2:ac:99:72:
                    ba:95:a8:21:87:08:00:19:93:f7:1f:a8:22:4c:2d:
                    99:20:f2:77:e9:9e:d3:db:83:04:a1:83:50:fb:e9:
                    af:65:56:04:0b:6c:85:0f:89:92:ce:4d:30:f1:ea:
                    dc:91:56:9c:90:f0:d9:7b:7d:45:e4:84:83:fa:80:
                    6d:1e:fa:16:3a:37:63:e1:6e:8e:c6:ff:e2:49:7e:
                    31:d1:ec:ce:09:d2:cd:15:07:e2:a6:dc:f1:c1:2e:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0C:02:01:B7:B1:56:29:AE:59:AA:1C:5E:B7:EB:5B:5C:AF:03:7B
            X509v3 Authority Key Identifier:
                keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:54:9d:13:ed:bd:22:ab:0d:ac:33:22:ce:5b:19:72:b8:99:
         cc:ea:2d:2d:d8:fb:71:11:0c:d4:4a:3c:11:b8:00:47:9e:20:
         d2:d0:10:71:0a:08:2d:22:07:c7:58:be:5f:bf:08:40:03:a9:
         30:da:78:1c:d5:f6:8f:82:62:4b:08:18:af:57:ea:76:17:ab:
         99:b4:5e:0f:fb:66:1a:d8:cc:ac:b7:7e:4e:74:59:ee:d4:34:
         96:90:c4:88:fa:a8:82:01:e5:11:6d:73:e5:71:f6:c4:bf:5b:
         20:a3:e8:03:12:03:d6:f9:64:b6:02:8e:d6:ee:21:29:85:5e:
         99:43:04:b7:d5:69:8b:17:64:13:b2:ac:26:54:9d:91:ce:04:
         33:e5:1b:9e:5c:c3:71:1a:16:76:95:a2:7b:0c:31:99:30:c6:
         d5:ba:49:35:55:79:48:be:27:bb:9e:19:07:4f:01:38:b2:6b:
         a3:cf:94:bf:e0:1b:86:36:f0:35:ba:36:96:7c:4c:59:cf:1d:
         33:5d:62:c2:5a:d9:f5:36:63:f3:2a:a3:66:6f:c3:42:9d:1d:
         d6:ca:d2:35:90:e7:17:ac:14:76:74:3b:a0:78:d5:cd:4d:78:
         e9:9f:f8:57:96:08:5c:d1:2a:a3:e2:0a:fc:1d:8b:c3:3e:0b:
         e1:59:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:59 2025 by rpki-client