Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
File:                     hYYCc-snGSK59-yPSlkQFjVtcys.mft (raw, json)
Hash identifier:          /zNzNu31kx5+K7YskLr/c6elyRnnJul1BQTKekUL1VA=
Subject key identifier:   F5:84:2D:04:05:33:AA:00:7A:2F:D0:5C:43:59:21:C9:44:61:32:57
Authority key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
Certificate issuer:       /CN=85860273eb271922b9f7ec8f4a591016356d732b
Certificate serial:       01901CA19B5FECDF4CDBDD8934E3F48A13E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
Manifest number:          06E4
Signing time:             Sat 15 Jun 2024 16:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:11 +0000
Files and hashes:         1: TAiV4HRSbX6Td08KR8YBWiSR88k.roa (hash: UcIjV88/i/TPp8EcSf/UKuGEWlQfN9coItc/DpDHkxY=)
                          2: hYYCc-snGSK59-yPSlkQFjVtcys.crl (hash: HI+md764oTJwrxkDZPjtU5NKBQRMcSO6LBFJ3I2WpgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:9b:5f:ec:df:4c:db:dd:89:34:e3:f4:8a:13:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85860273eb271922b9f7ec8f4a591016356d732b
        Validity
            Not Before: Jun 15 16:01:11 2024 GMT
            Not After : Jun 16 16:01:11 2024 GMT
        Subject: CN=f5842d040533aa007a2fd05c435921c944613257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:87:38:08:36:1d:38:23:69:55:33:6d:cd:
                    00:77:0c:1f:18:89:3f:fc:f2:ac:35:d1:ba:56:0a:
                    63:5e:12:49:15:f5:32:e6:a8:af:5f:22:db:d6:a3:
                    bb:84:3a:7b:b7:1a:20:19:13:42:0d:f5:99:9b:ea:
                    d6:91:fa:3d:8c:0f:f0:e2:f0:c9:5e:da:48:04:44:
                    a0:1b:1d:c6:26:2a:c6:c8:24:98:62:65:73:04:12:
                    3d:b0:d6:d7:a7:0a:60:47:81:7c:de:ff:0f:2c:8d:
                    b1:47:ef:e2:a8:3a:93:f1:27:e4:64:9b:f0:ca:63:
                    0f:3c:e9:f2:5c:d0:d8:3f:75:4d:fb:09:7d:41:e4:
                    cd:a4:ca:f0:29:fd:1a:da:c5:98:90:11:9b:bb:70:
                    01:df:1e:83:7d:a5:52:48:76:3a:39:4c:95:52:40:
                    42:62:8c:e0:28:77:b8:54:f9:d0:df:17:23:ee:d0:
                    37:61:e1:86:30:d3:17:9d:6c:3c:25:14:ef:10:47:
                    09:d9:80:46:a9:53:0b:af:5b:c0:32:3d:9b:9e:56:
                    46:1f:bc:db:1b:e3:4f:ad:84:1f:ae:19:f0:10:67:
                    45:cd:7f:27:2c:13:8c:83:09:8a:77:47:5f:6d:d2:
                    3b:90:05:4c:84:a7:14:48:b7:d9:cf:b1:39:4d:80:
                    4c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:84:2D:04:05:33:AA:00:7A:2F:D0:5C:43:59:21:C9:44:61:32:57
            X509v3 Authority Key Identifier:
                keyid:85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:27:44:07:ee:03:61:84:5f:a4:48:45:3b:33:71:ad:76:
         b7:9c:21:00:c6:ae:49:c9:ac:3c:76:9a:36:9e:1a:a3:84:be:
         ef:76:53:0b:c2:7b:88:f4:7c:24:9b:83:7e:cf:f2:9e:2f:03:
         b1:35:7b:f4:e8:bd:f0:4b:b3:d4:1c:95:0f:9a:42:08:e1:a6:
         78:4f:91:12:1d:bf:b1:c0:52:22:15:d8:35:ed:b6:07:59:c2:
         ad:51:1e:32:18:ef:c1:32:69:9e:f1:34:23:99:22:fd:bb:b9:
         38:6b:79:e1:09:50:1a:09:cf:d5:c9:e2:36:49:bd:bd:a3:5a:
         42:d1:27:63:40:10:3e:31:66:3a:55:2b:37:f4:3c:aa:d2:81:
         a7:b3:f7:83:b5:87:d3:ea:14:61:53:5a:b1:48:b5:e5:67:af:
         f1:14:99:96:d1:c7:e6:74:26:ce:fd:81:50:1f:3c:04:18:2a:
         0e:65:79:56:84:06:da:bc:fc:16:8e:c1:7a:c7:20:60:bf:5f:
         ee:d1:59:7a:9e:2d:e4:d5:f2:5e:7e:d4:06:ec:89:7f:9f:d2:
         a5:0b:3a:ae:c2:9b:68:e7:1e:af:d8:96:bd:a9:52:dc:2a:6d:
         de:a2:d8:66:d9:84:b8:dd:72:9f:e1:5c:70:91:47:a7:5b:5d:
         05:9f:7d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoZtf7N9M292JNOP0ihPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODYwMjczZWIyNzE5MjJiOWY3ZWM4ZjRhNTkxMDE2MzU2
ZDczMmIwHhcNMjQwNjE1MTYwMTExWhcNMjQwNjE2MTYwMTExWjAzMTEwLwYDVQQD
EyhmNTg0MmQwNDA1MzNhYTAwN2EyZmQwNWM0MzU5MjFjOTQ0NjEzMjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCHOAg2HTgjaVUzbc0AdwwfGIk/
/PKsNdG6VgpjXhJJFfUy5qivXyLb1qO7hDp7txogGRNCDfWZm+rWkfo9jA/w4vDJ
XtpIBESgGx3GJirGyCSYYmVzBBI9sNbXpwpgR4F83v8PLI2xR+/iqDqT8SfkZJvw
ymMPPOnyXNDYP3VN+wl9QeTNpMrwKf0a2sWYkBGbu3AB3x6DfaVSSHY6OUyVUkBC
YozgKHe4VPnQ3xcj7tA3YeGGMNMXnWw8JRTvEEcJ2YBGqVMLr1vAMj2bnlZGH7zb
G+NPrYQfrhnwEGdFzX8nLBOMgwmKd0dfbdI7kAVMhKcUSLfZz7E5TYBM7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWELQQFM6oAei/QXENZIclEYTJXMB8GA1UdIwQY
MBaAFIWGAnPrJxkiuffsj0pZEBY1bXMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMTU3YzktMzQ4OC00ZmI4LTliNGYt
OTkwOWVlMmYzM2IyLzEvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wMTU3YzktMzQ4OC00ZmI4LTliNGYtOTkwOWVlMmYzM2Iy
LzEvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZsnRAfu
A2GEX6RIRTszca12t5whAMauScmsPHaaNp4ao4S+73ZTC8J7iPR8JJuDfs/yni8D
sTV79Oi98Euz1ByVD5pCCOGmeE+REh2/scBSIhXYNe22B1nCrVEeMhjvwTJpnvE0
I5ki/bu5OGt54QlQGgnP1cniNkm9vaNaQtEnY0AQPjFmOlUrN/Q8qtKBp7P3g7WH
0+oUYVNasUi15Wev8RSZltHH5nQmzv2BUB88BBgqDmV5VoQG2rz8Fo7BescgYL9f
7tFZep4t5NXyXn7UBuyJf5/SpQs6rsKbaOcer9iWvalS3Cpt3qLYZtmEuN1yn+Fc
cJFHp1tdBZ99Lw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:41:44 2024 by rpki-client on console-fra.rpki-client.org