Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File:                     y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier:          Hk3VpM01/nL/IgTGk7ysyhF1MoFZ3KVXMtNAI/6Zms0=
Subject key identifier:   D2:E1:1B:FA:32:20:7B:B7:12:06:3A:9E:38:8A:21:26:F8:9E:54:4F
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer:       /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial:       01901D0F10374F025015F1372A6AA2751178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number:          0C62
Signing time:             Sat 15 Jun 2024 18:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:44 +0000
Files and hashes:         1: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 2KVS0xQtdqUZVKqdLj226339xa7TM2AyCSc+kdF5eeM=)
                          2: y7I4kDuEZNartQMmgQUNwHdMZS0.roa (hash: Y3sYx47OQZHpKnidaD5TUvmSJxtOwliJj3xu5Bwjuok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:10:37:4f:02:50:15:f1:37:2a:6a:a2:75:11:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
        Validity
            Not Before: Jun 15 18:00:44 2024 GMT
            Not After : Jun 16 18:00:44 2024 GMT
        Subject: CN=d2e11bfa32207bb712063a9e388a2126f89e544f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:fa:0d:88:6b:2c:20:6f:9f:9e:ac:ee:a7:
                    54:d4:24:37:f3:47:95:6a:b2:6e:21:37:29:e2:d4:
                    68:be:2f:af:46:b5:23:d6:6e:e5:01:fb:ef:4f:a1:
                    46:93:9c:0a:10:61:36:c1:4f:ed:6f:7f:0e:f7:64:
                    31:1b:3e:19:74:87:ac:86:03:8d:a7:54:0a:32:2a:
                    ed:1c:f9:31:8a:91:89:80:a9:43:7e:71:40:48:76:
                    98:86:d2:6f:2e:b4:d6:21:fc:2a:1f:60:37:6d:7b:
                    23:95:14:8f:ea:d5:b2:3e:56:e8:c1:f2:dc:05:5f:
                    30:db:f5:b6:c9:68:58:64:03:0c:56:65:28:68:f1:
                    18:95:ea:98:a7:d4:7e:b2:10:fc:d4:07:c8:a8:8e:
                    23:4f:be:75:d6:13:a1:91:da:64:ae:02:d1:5b:10:
                    b7:c0:5b:25:b4:0e:4b:7a:ea:98:d6:70:18:ba:7d:
                    b1:17:22:b6:0a:e4:c9:06:e5:c2:a9:1a:f3:26:0d:
                    6c:2e:80:15:ed:b0:f6:bf:06:24:c2:47:ac:c0:7e:
                    a8:e6:4a:7d:30:80:a1:d9:3d:ca:d2:61:75:4f:71:
                    cd:25:f3:82:9e:39:58:f2:c7:03:83:cd:87:2d:fb:
                    2f:24:17:75:f7:b2:78:5f:c7:5b:f5:9a:30:9b:f1:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:1B:FA:32:20:7B:B7:12:06:3A:9E:38:8A:21:26:F8:9E:54:4F
            X509v3 Authority Key Identifier:
                keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:dd:8c:3d:bb:f2:7e:6a:3e:ce:e1:f3:af:3f:38:5f:c7:8c:
         22:84:b4:c9:c7:9c:2d:5a:19:1f:9c:b5:d0:18:a2:f7:48:99:
         a0:3f:a6:6e:c1:f8:f9:8e:91:79:7e:80:42:d0:bb:25:cf:02:
         18:5a:23:df:72:14:92:94:37:34:5c:15:d6:d3:f1:80:6d:df:
         78:fb:9a:9f:68:71:c1:2a:24:70:b6:36:5c:c6:9d:b8:43:f0:
         7a:a8:75:c3:e1:0d:96:c2:d1:07:50:fd:02:67:57:64:10:d1:
         ec:fa:a8:e9:76:ff:39:b7:d0:05:01:b8:75:77:a3:c9:4a:ad:
         56:d4:d9:68:2e:30:da:6f:c3:01:54:f6:4e:2e:02:b7:f9:6b:
         b2:ef:5a:3b:e5:82:0d:09:45:1c:e1:ff:aa:2d:dc:97:ed:de:
         0a:f2:31:0b:c7:ab:77:98:cc:7e:5c:70:4a:fe:01:74:8a:42:
         89:ea:0b:ab:b6:18:80:59:2f:29:7d:88:1c:08:e8:e1:f9:f5:
         aa:6f:f5:c0:89:b3:7e:e7:28:af:f4:02:42:60:34:e6:4a:a4:
         84:bb:49:d6:b7:58:e0:68:bc:9a:0e:1b:ba:06:c8:34:43:5f:
         e8:70:a9:6f:a7:27:c7:b0:8a:7c:7c:04:93:ce:3e:3d:ff:51:
         7f:30:b4:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDxA3TwJQFfE3KmqidRF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjQwNjE1MTgwMDQ0WhcNMjQwNjE2MTgwMDQ0WjAzMTEwLwYDVQQD
EyhkMmUxMWJmYTMyMjA3YmI3MTIwNjNhOWUzODhhMjEyNmY4OWU1NDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrL6DYhrLCBvn56s7qdU1CQ380eV
arJuITcp4tRovi+vRrUj1m7lAfvvT6FGk5wKEGE2wU/tb38O92QxGz4ZdIeshgON
p1QKMirtHPkxipGJgKlDfnFASHaYhtJvLrTWIfwqH2A3bXsjlRSP6tWyPlbowfLc
BV8w2/W2yWhYZAMMVmUoaPEYleqYp9R+shD81AfIqI4jT7511hOhkdpkrgLRWxC3
wFsltA5LeuqY1nAYun2xFyK2CuTJBuXCqRrzJg1sLoAV7bD2vwYkwkeswH6o5kp9
MICh2T3K0mF1T3HNJfOCnjlY8scDg82HLfsvJBd197J4X8db9Zowm/EREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLhG/oyIHu3EgY6njiKISb4nlRPMB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN92MPbvy
fmo+zuHzrz84X8eMIoS0ycecLVoZH5y10Bii90iZoD+mbsH4+Y6ReX6AQtC7Jc8C
GFoj33IUkpQ3NFwV1tPxgG3fePuan2hxwSokcLY2XMaduEPweqh1w+ENlsLRB1D9
AmdXZBDR7Pqo6Xb/ObfQBQG4dXejyUqtVtTZaC4w2m/DAVT2Ti4Ct/lrsu9aO+WC
DQlFHOH/qi3cl+3eCvIxC8erd5jMflxwSv4BdIpCieoLq7YYgFkvKX2IHAjo4fn1
qm/1wImzfucor/QCQmA05kqkhLtJ1rdY4Gi8mg4bugbINENf6HCpb6cnx7CKfHwE
k84+Pf9RfzC0yw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:51:53 2024 by rpki-client on console-ams.rpki-client.org