Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
File:                     hYYCc-snGSK59-yPSlkQFjVtcys.mft (raw, json)
Hash identifier:          pD8KrgZWdFHxTP+IliwJBQjye7Wa7Nucgdro621iqzU=
Subject key identifier:   33:CA:54:72:A6:04:6D:B9:D7:B2:EB:5C:22:2D:76:BC:6D:9C:62:16
Authority key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
Certificate issuer:       /CN=85860273eb271922b9f7ec8f4a591016356d732b
Certificate serial:       019033CE29E2A30A0C1092A153745CB87B88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
Manifest number:          06F0
Signing time:             Thu 20 Jun 2024 04:01:07 +0000
Manifest this update:     Thu 20 Jun 2024 04:01:07 +0000
Manifest next update:     Fri 21 Jun 2024 04:01:07 +0000
Files and hashes:         1: TAiV4HRSbX6Td08KR8YBWiSR88k.roa (hash: UcIjV88/i/TPp8EcSf/UKuGEWlQfN9coItc/DpDHkxY=)
                          2: hYYCc-snGSK59-yPSlkQFjVtcys.crl (hash: vjXWfjPQK1k5CXq6QhF7Jgd9SvywJG4mk5hl+0fwJSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:ce:29:e2:a3:0a:0c:10:92:a1:53:74:5c:b8:7b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85860273eb271922b9f7ec8f4a591016356d732b
        Validity
            Not Before: Jun 20 04:01:07 2024 GMT
            Not After : Jun 21 04:01:07 2024 GMT
        Subject: CN=33ca5472a6046db9d7b2eb5c222d76bc6d9c6216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:c4:be:0f:10:8e:bd:8e:63:b4:c0:57:05:
                    5c:64:ce:72:4a:51:2f:62:bd:5a:e9:bd:9b:a5:49:
                    ed:33:36:5d:9b:7a:f5:9b:62:07:cd:76:21:68:8f:
                    a1:85:61:3b:85:38:39:ee:a1:42:c6:5e:fd:94:5f:
                    4e:57:40:a1:c2:e3:b5:91:ea:f8:0b:9a:90:46:ae:
                    13:8d:c8:05:d2:17:0c:6d:41:cd:93:fe:ff:42:d7:
                    cd:8a:ed:68:aa:68:77:61:75:e3:69:91:07:38:7d:
                    72:58:92:31:3b:5c:1d:91:57:1e:ab:51:e4:d4:67:
                    91:84:42:d8:20:6e:3b:2b:4c:17:3d:cc:3f:71:b4:
                    ba:1f:7d:01:2e:64:7a:b1:4e:59:05:ed:ce:66:0b:
                    f7:34:67:4f:ee:de:85:a5:bc:50:fd:af:26:25:e1:
                    c8:f2:4e:09:76:10:b1:2e:94:76:2b:09:4b:de:fa:
                    84:a2:90:0f:17:ae:35:d5:be:c9:07:21:81:ff:ee:
                    e9:5e:b4:b6:38:13:67:d0:65:1f:2e:af:69:7e:56:
                    62:0a:1e:35:d8:a5:82:6b:b4:8b:1a:0f:e1:5d:4a:
                    0d:02:8c:20:99:56:a6:cd:97:d8:b1:8e:71:2b:ac:
                    a4:c7:c4:5a:5f:a8:fd:33:aa:94:77:05:d6:2a:c7:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CA:54:72:A6:04:6D:B9:D7:B2:EB:5C:22:2D:76:BC:6D:9C:62:16
            X509v3 Authority Key Identifier:
                keyid:85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:cd:91:93:a5:72:4c:93:61:31:4d:37:6d:0c:a4:68:2c:
         38:cd:fe:f6:2b:5c:22:8f:8a:85:dd:26:a0:7b:9f:d1:12:7f:
         1d:22:53:09:be:bb:41:96:ad:b4:54:38:06:2a:1b:5e:77:e3:
         a0:13:16:f9:ee:e6:85:37:63:b1:7a:93:a4:9b:f8:82:68:dd:
         30:a3:0e:67:be:6d:2b:2f:af:a8:6e:08:73:98:e5:cd:58:60:
         ef:2b:ff:ce:c1:64:11:56:d3:5e:d2:2f:4c:9b:6f:99:f6:fa:
         17:a1:b6:75:6f:c2:30:ae:ab:63:e7:f5:c5:b0:a6:d0:5a:62:
         4e:3c:3a:5e:c5:89:c0:85:17:55:11:fa:bb:ed:07:5f:72:4a:
         71:a1:36:06:60:c4:dd:6f:02:c7:73:71:c8:b1:43:dd:36:25:
         73:93:04:12:02:aa:5f:87:29:4d:73:60:95:8f:89:49:ac:31:
         50:70:be:b6:71:99:f7:6a:32:79:48:52:bd:28:b7:80:75:f3:
         31:42:9e:d0:e6:0d:e6:25:b8:4a:0a:df:8a:98:4d:fa:9f:f8:
         54:bf:0c:93:39:b5:56:b2:47:59:68:26:18:78:65:ee:42:fe:
         23:8d:01:d7:e6:b2:c4:ed:c2:c5:2d:1d:42:19:37:ea:44:5b:
         af:2b:c8:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAzziniowoMEJKhU3RcuHuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODYwMjczZWIyNzE5MjJiOWY3ZWM4ZjRhNTkxMDE2MzU2
ZDczMmIwHhcNMjQwNjIwMDQwMTA3WhcNMjQwNjIxMDQwMTA3WjAzMTEwLwYDVQQD
EygzM2NhNTQ3MmE2MDQ2ZGI5ZDdiMmViNWMyMjJkNzZiYzZkOWM2MjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEPEvg8Qjr2OY7TAVwVcZM5ySlEv
Yr1a6b2bpUntMzZdm3r1m2IHzXYhaI+hhWE7hTg57qFCxl79lF9OV0ChwuO1ker4
C5qQRq4TjcgF0hcMbUHNk/7/QtfNiu1oqmh3YXXjaZEHOH1yWJIxO1wdkVceq1Hk
1GeRhELYIG47K0wXPcw/cbS6H30BLmR6sU5ZBe3OZgv3NGdP7t6FpbxQ/a8mJeHI
8k4JdhCxLpR2KwlL3vqEopAPF6411b7JByGB/+7pXrS2OBNn0GUfLq9pflZiCh41
2KWCa7SLGg/hXUoNAowgmVamzZfYsY5xK6ykx8RaX6j9M6qUdwXWKscTPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPKVHKmBG2517LrXCItdrxtnGIWMB8GA1UdIwQY
MBaAFIWGAnPrJxkiuffsj0pZEBY1bXMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMTU3YzktMzQ4OC00ZmI4LTliNGYt
OTkwOWVlMmYzM2IyLzEvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wMTU3YzktMzQ4OC00ZmI4LTliNGYtOTkwOWVlMmYzM2Iy
LzEvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9PNkZOl
ckyTYTFNN20MpGgsOM3+9itcIo+Khd0moHuf0RJ/HSJTCb67QZattFQ4BiobXnfj
oBMW+e7mhTdjsXqTpJv4gmjdMKMOZ75tKy+vqG4Ic5jlzVhg7yv/zsFkEVbTXtIv
TJtvmfb6F6G2dW/CMK6rY+f1xbCm0FpiTjw6XsWJwIUXVRH6u+0HX3JKcaE2BmDE
3W8Cx3NxyLFD3TYlc5MEEgKqX4cpTXNglY+JSawxUHC+tnGZ92oyeUhSvSi3gHXz
MUKe0OYN5iW4SgrfiphN+p/4VL8Mkzm1VrJHWWgmGHhl7kL+I40B1+ayxO3CxS0d
Qhk36kRbryvIuA==
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:16:22 2024 by rpki-client on console-fra.rpki-client.org