Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File:                     ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier:          PzzIlH+1ShQ/gAIAzlKkmARQyqM+EqJHTW6P+beWQHA=
Subject key identifier:   3E:C0:66:B6:77:5D:93:7B:33:C1:73:51:96:D0:20:DF:8C:AC:F1:70
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer:       /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial:       01901BFDF4CF206CB3A07699CB1543D85EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:02:26 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:26 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:26 +0000
Files and hashes:         1: G2Wj46mw5_g0cKHY6L6WEAKqiMI.roa (hash: eaXQN8Cm+Wc2Zn5SMeu1hEVxllYo/L+hfe6E+J2yJGA=)
                          2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: L0Tdq0HOqR16pYLWgOSSF0i0Y+JBNX8OQrFlD55gn2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:f4:cf:20:6c:b3:a0:76:99:cb:15:43:d8:5e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
        Validity
            Not Before: Jun 15 13:02:26 2024 GMT
            Not After : Jun 16 13:02:26 2024 GMT
        Subject: CN=3ec066b6775d937b33c1735196d020df8cacf170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:81:a3:dc:79:5f:86:f7:19:5e:ab:41:bb:
                    a8:59:97:7b:bb:d7:c2:b3:c6:4c:06:e6:2e:b3:e4:
                    3a:dc:cd:8e:ad:8e:67:0c:5a:f2:da:8e:af:ed:80:
                    b9:d0:ff:e0:26:1f:6e:49:fa:8b:52:1b:5e:cc:79:
                    6f:5d:e2:e0:b2:83:78:3b:c8:85:a8:0d:e4:e8:1d:
                    66:7c:72:73:a1:06:ac:69:59:78:61:8b:6c:85:07:
                    3e:5f:f3:72:3e:03:d0:6f:b5:2b:9b:a7:4c:68:f2:
                    f2:1c:7b:91:a5:72:ac:40:52:8d:5b:5c:3d:fb:a2:
                    3c:4c:b4:47:02:00:71:bf:bd:22:ee:c2:6e:b8:01:
                    10:cb:76:36:17:8e:60:04:5a:6a:82:65:18:ae:21:
                    67:8d:5c:fe:19:56:b2:1d:95:46:11:a4:58:e2:1b:
                    9f:3b:6f:8b:bf:9c:12:45:18:54:d2:db:d3:0f:bf:
                    83:73:4e:5f:b0:bd:27:33:12:d3:59:49:02:c4:3e:
                    3e:c1:20:a8:7b:5e:49:49:b3:9b:c5:64:32:d3:d4:
                    db:aa:ca:9c:f5:9b:71:38:5d:66:c0:3b:9a:61:62:
                    20:38:28:55:61:41:e7:75:15:3d:ce:f7:3e:45:c1:
                    e6:c9:c3:6b:e6:eb:a2:98:59:62:27:ac:a9:b0:d2:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C0:66:B6:77:5D:93:7B:33:C1:73:51:96:D0:20:DF:8C:AC:F1:70
            X509v3 Authority Key Identifier:
                keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:c0:4f:e7:b7:46:61:a8:37:93:06:fb:5a:0a:e6:ff:c0:
         9c:68:a4:d9:9c:27:59:74:15:68:3f:4f:9b:23:aa:2c:7a:12:
         33:41:29:69:cd:2d:fe:12:4b:cb:26:e1:6d:90:3b:93:ad:17:
         1e:09:59:cd:68:c6:f2:90:4c:90:c3:75:42:60:d0:52:7e:58:
         a8:76:1c:fb:3b:97:d6:a3:bd:99:27:13:b1:96:13:4f:5f:b4:
         91:24:3b:40:c2:7a:7f:8a:16:22:0a:d3:b9:0c:8b:c6:e1:f4:
         68:4e:12:3d:54:00:cd:2b:57:89:0f:6a:58:8c:82:9d:07:77:
         9f:d5:e4:e7:73:ce:5b:75:6d:7e:39:10:13:54:b2:c9:c9:9a:
         3d:82:97:66:bc:3d:af:d8:7f:3e:9d:8f:cd:c9:d1:c3:cc:eb:
         65:98:2b:9d:c8:78:86:b5:f4:df:a8:da:cc:e5:71:b2:3f:45:
         61:97:44:54:c0:e9:09:31:92:cc:fa:af:a3:3d:a9:92:0f:ab:
         ba:42:8f:a5:ba:6c:87:54:59:6d:74:08:3c:02:9b:fd:23:d7:
         a0:ba:3a:42:9d:4a:39:01:34:8b:10:0e:dc:a6:ec:7b:bc:26:
         e6:d6:d5:67:5b:e6:b3:eb:00:2f:d4:7a:fc:e5:d6:da:f6:9d:
         ed:ea:af:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/fTPIGyzoHaZyxVD2F64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjRkNjgyM2VjYjI4YjRhMzVlNDBkYzExZWYyMjljYjIz
NzVjZGYwHhcNMjQwNjE1MTMwMjI2WhcNMjQwNjE2MTMwMjI2WjAzMTEwLwYDVQQD
EygzZWMwNjZiNjc3NWQ5MzdiMzNjMTczNTE5NmQwMjBkZjhjYWNmMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQyBo9x5X4b3GV6rQbuoWZd7u9fC
s8ZMBuYus+Q63M2OrY5nDFry2o6v7YC50P/gJh9uSfqLUhtezHlvXeLgsoN4O8iF
qA3k6B1mfHJzoQasaVl4YYtshQc+X/NyPgPQb7Urm6dMaPLyHHuRpXKsQFKNW1w9
+6I8TLRHAgBxv70i7sJuuAEQy3Y2F45gBFpqgmUYriFnjVz+GVayHZVGEaRY4huf
O2+Lv5wSRRhU0tvTD7+Dc05fsL0nMxLTWUkCxD4+wSCoe15JSbObxWQy09Tbqsqc
9ZtxOF1mwDuaYWIgOChVYUHndRU9zvc+RcHmycNr5uuimFliJ6ypsNL90wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7AZrZ3XZN7M8FzUZbQIN+MrPFwMB8GA1UdIwQY
MBaAFMm01oI+yyi0o15A3BHvIpyyN1zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQt
OWZhOTVhYTliMDc5LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQtOWZhOTVhYTliMDc5
LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO7AT+e3
RmGoN5MG+1oK5v/AnGik2ZwnWXQVaD9PmyOqLHoSM0Epac0t/hJLyybhbZA7k60X
HglZzWjG8pBMkMN1QmDQUn5YqHYc+zuX1qO9mScTsZYTT1+0kSQ7QMJ6f4oWIgrT
uQyLxuH0aE4SPVQAzStXiQ9qWIyCnQd3n9Xk53POW3VtfjkQE1SyycmaPYKXZrw9
r9h/Pp2PzcnRw8zrZZgrnch4hrX036jazOVxsj9FYZdEVMDpCTGSzPqvoz2pkg+r
ukKPpbpsh1RZbXQIPAKb/SPXoLo6Qp1KOQE0ixAO3Kbse7wm5tbVZ1vms+sAL9R6
/OXW2vad7eqv1w==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:57 2024 by rpki-client on console-fra.rpki-client.org