Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File:                     yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier:          2mIfbbx+wuDg5yopbAK7hSx8Mcow7ubazoh+vFko7R0=
Subject key identifier:   58:5B:A3:C2:BD:FA:F6:A6:60:DF:B9:67:68:86:CE:49:21:1E:D6:4A
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer:       /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial:       018F8DB876BD5842922C21DE357FAF2FDAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number:          01D1
Signing time:             Sat 18 May 2024 22:00:27 +0000
Manifest this update:     Sat 18 May 2024 22:00:27 +0000
Manifest next update:     Sun 19 May 2024 22:00:27 +0000
Files and hashes:         1: gi4j7tJDDSS1gUB8dWdAJ31D2Tc.roa (hash: 00efuo5gLACE9USCHCqnUWx+kuUYxwBH7cYFz8nCogI=)
                          2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: Jxn89gP3ir5sXNAP7RGrkUvc8S+Q90DlnS9B94HNoPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:76:bd:58:42:92:2c:21:de:35:7f:af:2f:da:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
        Validity
            Not Before: May 18 22:00:27 2024 GMT
            Not After : May 19 22:00:27 2024 GMT
        Subject: CN=585ba3c2bdfaf6a660dfb9676886ce49211ed64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:87:e0:b0:ff:48:39:c2:1f:19:71:ad:4c:
                    fa:14:a7:f1:c0:8a:fd:01:bd:a7:b0:87:0c:83:c7:
                    91:bb:4e:57:6f:44:80:56:8d:41:3c:f4:91:f6:91:
                    d8:4d:40:22:00:f5:66:bc:37:cf:3c:ab:3a:af:cd:
                    2d:4f:7f:da:d6:83:df:40:35:6a:e3:8c:15:c7:ae:
                    95:fe:2e:e1:9b:9c:f4:18:8d:cc:b0:c0:f0:23:d0:
                    be:18:4d:3b:db:83:02:dc:8b:01:a1:73:58:05:c5:
                    11:5a:d0:88:8e:09:cd:0b:c5:a8:20:8c:fe:9b:36:
                    8e:c1:23:7c:50:da:c6:a3:98:93:57:40:45:c6:42:
                    e7:c4:f1:02:f0:c5:23:ff:ea:94:aa:b6:21:61:f4:
                    d4:23:c7:a4:40:88:ba:ce:0d:fe:20:48:f4:8f:69:
                    07:3a:11:72:75:e0:a5:82:8e:24:4f:1d:e9:55:bf:
                    59:9d:2d:66:7b:cb:75:5d:2b:26:90:c2:85:72:be:
                    35:8d:78:05:fa:c1:0c:bb:2f:c3:47:45:3c:de:87:
                    94:26:da:6d:09:91:09:87:87:54:40:29:ab:b1:0f:
                    b5:30:a7:56:f4:85:a4:23:17:bd:67:35:5f:f5:1d:
                    a4:03:7e:28:12:69:43:d2:af:1b:ae:b5:c8:95:fb:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5B:A3:C2:BD:FA:F6:A6:60:DF:B9:67:68:86:CE:49:21:1E:D6:4A
            X509v3 Authority Key Identifier:
                keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:25:6b:ef:73:b1:58:d2:1b:2e:59:cd:4e:d3:72:56:f1:b2:
         6d:ae:a8:61:fd:6d:d5:bc:ea:a0:f3:24:04:87:c4:be:f5:a5:
         54:cd:12:d0:7e:40:d5:ef:17:d5:d5:d0:5d:18:7b:e0:8c:cb:
         d2:57:ce:5f:06:29:e3:0a:7f:50:76:bc:59:d8:c2:47:66:b5:
         f6:d3:7b:d0:b3:26:e1:89:74:ed:9d:cc:e7:c8:3a:dc:4a:c6:
         0c:21:43:cb:81:49:de:32:de:52:2e:b8:10:e2:a2:dd:12:50:
         5b:73:a7:87:95:24:36:e9:9b:7e:0b:5e:58:3d:d0:df:ec:a6:
         be:45:2b:2c:c5:8a:d4:c8:6e:4b:45:17:3d:88:19:7c:ce:b7:
         83:cb:d9:ee:de:8a:e0:4f:40:e9:fa:24:02:d3:3c:48:a6:98:
         3d:4c:33:13:95:67:f8:8d:3b:7f:f2:22:a4:38:12:33:c0:2c:
         81:28:80:c7:bf:4e:bd:f2:a9:4c:2b:bf:ec:80:ff:12:ae:cf:
         37:8d:81:62:21:02:cd:59:6c:89:60:8b:9d:29:42:10:fd:f6:
         b5:59:12:c9:39:70:bc:c1:80:30:cb:50:21:15:e2:2d:9b:82:
         ac:11:71:e8:26:a6:5e:da:7b:0b:73:b6:31:d4:6f:cc:45:86:
         45:7b:37:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NuHa9WEKSLCHeNX+vL9rCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5
NzM0M2MwHhcNMjQwNTE4MjIwMDI3WhcNMjQwNTE5MjIwMDI3WjAzMTEwLwYDVQQD
Eyg1ODViYTNjMmJkZmFmNmE2NjBkZmI5Njc2ODg2Y2U0OTIxMWVkNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7WH4LD/SDnCHxlxrUz6FKfxwIr9
Ab2nsIcMg8eRu05Xb0SAVo1BPPSR9pHYTUAiAPVmvDfPPKs6r80tT3/a1oPfQDVq
44wVx66V/i7hm5z0GI3MsMDwI9C+GE0724MC3IsBoXNYBcURWtCIjgnNC8WoIIz+
mzaOwSN8UNrGo5iTV0BFxkLnxPEC8MUj/+qUqrYhYfTUI8ekQIi6zg3+IEj0j2kH
OhFydeClgo4kTx3pVb9ZnS1me8t1XSsmkMKFcr41jXgF+sEMuy/DR0U83oeUJtpt
CZEJh4dUQCmrsQ+1MKdW9IWkIxe9ZzVf9R2kA34oEmlD0q8brrXIlfvwqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhbo8K9+vamYN+5Z2iGzkkhHtZKMB8GA1UdIwQY
MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct
YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5
LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiVr73Ox
WNIbLlnNTtNyVvGyba6oYf1t1bzqoPMkBIfEvvWlVM0S0H5A1e8X1dXQXRh74IzL
0lfOXwYp4wp/UHa8WdjCR2a19tN70LMm4Yl07Z3M58g63ErGDCFDy4FJ3jLeUi64
EOKi3RJQW3Onh5UkNumbfgteWD3Q3+ymvkUrLMWK1MhuS0UXPYgZfM63g8vZ7t6K
4E9A6fokAtM8SKaYPUwzE5Vn+I07f/IipDgSM8AsgSiAx79OvfKpTCu/7ID/Eq7P
N42BYiECzVlsiWCLnSlCEP32tVkSyTlwvMGAMMtQIRXiLZuCrBFx6CamXtp7C3O2
MdRvzEWGRXs3pA==
-----END CERTIFICATE-----
Generated at Sun May 19 00:40:31 2024 by rpki-client on console-ams.rpki-client.org