Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File:                     yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier:          FNKWB1Iyl196buigDD0FPtQoaGQgLX6vj4ptFEKn95I=
Subject key identifier:   39:AC:B9:AD:8B:96:2E:DD:87:6F:C6:4F:A2:36:0D:4E:91:B4:B0:29
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer:       /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial:       019044F8E1A427FC4A697486E963D6E7D074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number:          090E
Signing time:             Sun 23 Jun 2024 12:01:19 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:19 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:19 +0000
Files and hashes:         1: SbJdVJE0L7x6o3cV5uc1moLkH7c.roa (hash: N+fzqu+kZfOG9qdNGZGpAlwRy4gCgRM0O5i7dQZvD3A=)
                          2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: 8dRvqOabSyq9MVVpvBVljJKP0CrFy1mnZEfVk5nAiEQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:e1:a4:27:fc:4a:69:74:86:e9:63:d6:e7:d0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
        Validity
            Not Before: Jun 23 12:01:19 2024 GMT
            Not After : Jun 24 12:01:19 2024 GMT
        Subject: CN=39acb9ad8b962edd876fc64fa2360d4e91b4b029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b3:cb:9b:0e:f6:af:be:6f:1d:c5:98:bc:cb:
                    2a:b1:fe:8a:fa:76:23:6d:c2:e8:84:00:5f:c8:cc:
                    2d:04:06:7e:ad:8d:a8:6d:3c:db:1e:12:9d:58:fb:
                    3d:f7:de:93:11:0d:24:49:ae:18:19:3d:9f:5d:51:
                    13:96:36:8d:bd:c1:59:7e:9a:90:a6:f9:f6:a9:6d:
                    0f:c9:cd:b6:bb:e2:c8:a7:09:05:d5:fc:03:3d:6b:
                    49:06:6a:af:68:1f:58:3b:46:29:db:33:7f:af:f2:
                    da:39:e8:38:a9:c0:7c:51:c1:b3:2a:00:77:19:79:
                    4d:16:9c:0a:40:91:fc:ea:0d:b2:69:5e:48:7a:6a:
                    0d:72:ba:70:91:05:22:85:e8:a5:e7:1c:40:5a:2a:
                    6d:0f:72:dd:5c:96:1e:71:0a:3a:de:49:55:b1:d7:
                    98:d1:1a:f0:fa:f4:cf:48:92:2f:06:73:18:31:44:
                    01:15:4d:ef:7a:75:95:15:1a:79:3c:96:58:1c:56:
                    0d:c7:ac:60:dc:5c:50:44:f6:d3:c8:0c:71:e9:9b:
                    67:77:18:ff:ff:f5:ba:99:68:dc:e1:b5:18:93:c9:
                    fc:4c:a4:5e:24:3e:eb:e9:4e:f2:af:71:d1:4f:27:
                    68:61:a8:ab:12:1b:3c:ae:0b:84:31:d7:55:9a:08:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AC:B9:AD:8B:96:2E:DD:87:6F:C6:4F:A2:36:0D:4E:91:B4:B0:29
            X509v3 Authority Key Identifier:
                keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:4a:62:1d:cb:90:f8:bc:3a:61:d8:77:65:df:61:a5:0c:
         73:35:48:e5:29:f8:12:7f:6c:6d:4f:0c:81:5c:ff:8d:29:02:
         95:7a:c0:9d:00:59:c3:61:7e:0a:3d:0d:8d:c1:02:e9:12:9f:
         ff:32:53:7e:48:f5:92:c3:4f:5d:31:9d:78:8c:25:c5:df:4a:
         31:e3:29:e6:47:5a:49:ef:43:58:84:48:ff:04:c2:43:42:79:
         6d:a1:f8:8e:72:5a:49:77:f9:e7:9b:92:9c:85:4e:5a:73:ee:
         fa:7e:41:fc:6e:7b:ac:da:e6:a8:b1:d6:0c:aa:f7:44:31:68:
         be:e7:0b:b2:9d:9a:fa:7c:8e:64:74:47:07:e0:a5:25:70:62:
         16:1d:0d:85:46:45:0e:f4:2a:8e:63:7a:9f:43:55:81:76:66:
         c9:d1:c7:35:6a:9f:15:76:6a:16:23:ba:6f:36:e5:af:8e:0c:
         f9:a7:df:2b:c8:4e:c2:61:fb:6a:55:ad:6f:2a:f1:8d:e5:a8:
         0b:c8:50:b0:a3:49:54:7b:18:b9:ed:69:3e:72:d1:25:61:02:
         14:4b:26:51:c9:6e:37:4c:a7:b5:1e:41:e7:e5:f3:8b:f8:c4:
         10:b6:7b:22:a0:1b:81:1e:51:1c:fb:df:6f:26:74:6e:4e:28:
         96:51:85:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+OGkJ/xKaXSG6WPW59B0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2
ZWFkNWIwHhcNMjQwNjIzMTIwMTE5WhcNMjQwNjI0MTIwMTE5WjAzMTEwLwYDVQQD
EygzOWFjYjlhZDhiOTYyZWRkODc2ZmM2NGZhMjM2MGQ0ZTkxYjRiMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07PLmw72r75vHcWYvMsqsf6K+nYj
bcLohABfyMwtBAZ+rY2obTzbHhKdWPs9996TEQ0kSa4YGT2fXVETljaNvcFZfpqQ
pvn2qW0Pyc22u+LIpwkF1fwDPWtJBmqvaB9YO0Yp2zN/r/LaOeg4qcB8UcGzKgB3
GXlNFpwKQJH86g2yaV5IemoNcrpwkQUiheil5xxAWiptD3LdXJYecQo63klVsdeY
0Rrw+vTPSJIvBnMYMUQBFU3venWVFRp5PJZYHFYNx6xg3FxQRPbTyAxx6Ztndxj/
//W6mWjc4bUYk8n8TKReJD7r6U7yr3HRTydoYairEhs8rguEMddVmghRmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmsua2Lli7dh2/GT6I2DU6RtLApMB8GA1UdIwQY
MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt
NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl
LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI1KYh3L
kPi8OmHYd2XfYaUMczVI5Sn4En9sbU8MgVz/jSkClXrAnQBZw2F+Cj0NjcEC6RKf
/zJTfkj1ksNPXTGdeIwlxd9KMeMp5kdaSe9DWIRI/wTCQ0J5baH4jnJaSXf555uS
nIVOWnPu+n5B/G57rNrmqLHWDKr3RDFovucLsp2a+nyOZHRHB+ClJXBiFh0NhUZF
DvQqjmN6n0NVgXZmydHHNWqfFXZqFiO6bzblr44M+affK8hOwmH7alWtbyrxjeWo
C8hQsKNJVHsYue1pPnLRJWECFEsmUcluN0yntR5B5+Xzi/jEELZ7IqAbgR5RHPvf
byZ0bk4ollGFeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:27 2024 by rpki-client on console-fra.rpki-client.org