Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File:                     YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier:          3AHAKEIt3S8kCB8Omq4H5wtGuzwjZJZOcJ66MfwyAvk=
Subject key identifier:   E5:1E:0A:17:A1:B1:48:28:0A:A1:0B:1C:4C:7F:D9:79:59:45:AE:08
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer:       /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial:       018FA81D84D3C88C14998444A8291AB0F8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number:          1118
Signing time:             Fri 24 May 2024 01:00:57 +0000
Manifest this update:     Fri 24 May 2024 01:00:57 +0000
Manifest next update:     Sat 25 May 2024 01:00:57 +0000
Files and hashes:         1: CByyN14Srd5Lp_DVW-eex3fB42g.roa (hash: w9AdVyyhzLx5l7NG2+WtPK1Weso1zpuvcflxMJpTl4w=)
                          2: Tu7t5UxfQZJb9IBinG_zvMo6NNI.roa (hash: tO2TP/Y6ttoMKa/hNM34Y2g4+LNlU3Prwjmy2KGs0pk=)
                          3: VRQ4PinBEDNLT-pfsEGxa28NSpw.roa (hash: UqvkLcy1aPLkeDt+lPoVDiuE9PXhcKRNAC1RRtan+4s=)
                          4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: s4Dok4r3R+qrS0IltlrLgRlBnZYTvBLITwymz/szr4M=)
                          5: viNX-WOKe3YtaIQroOMTXXaf5uc.roa (hash: ZSP/GncSw5fAKPNficO8G3O7T/THzJmiSiiivLmMtQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a8:1d:84:d3:c8:8c:14:99:84:44:a8:29:1a:b0:f8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
        Validity
            Not Before: May 24 01:00:57 2024 GMT
            Not After : May 25 01:00:57 2024 GMT
        Subject: CN=e51e0a17a1b148280aa10b1c4c7fd9795945ae08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:40:e5:d4:fe:39:db:fe:f2:cc:cf:e5:86:
                    75:6d:cf:6a:b0:5a:0f:8b:cd:09:c9:b7:f2:11:03:
                    3e:2f:f6:fa:d6:e2:32:58:36:6a:e3:fb:8d:c0:cb:
                    5a:ea:7e:e4:ec:8d:a9:fe:e3:b5:bd:65:92:d6:cb:
                    22:c3:70:6a:05:8d:8e:98:9a:85:93:ac:de:6e:0b:
                    1a:e8:ce:d7:75:ba:1e:49:be:13:3e:ee:55:82:c0:
                    36:05:b5:84:1b:d3:5d:5d:c5:18:96:36:18:bc:ae:
                    5e:eb:fb:0d:c2:ce:4d:48:63:d4:92:82:ea:af:10:
                    43:d8:0b:d1:6a:67:5b:cb:59:bc:68:c6:de:4e:8a:
                    1b:a4:c0:24:d2:6a:e5:39:97:aa:61:1e:9b:50:f0:
                    a2:b5:f7:5b:0e:ce:08:20:31:a6:a7:68:0f:fc:40:
                    32:82:b0:da:28:67:f5:bb:58:bf:37:44:c4:1c:6e:
                    28:85:1b:26:ce:ab:8b:3f:08:29:c7:bb:c1:2a:f0:
                    92:07:d1:64:62:2c:bf:44:39:2d:f4:e5:28:c3:5e:
                    97:2b:fb:5b:fe:e8:2f:8b:4c:13:42:4e:d6:f4:9e:
                    60:8d:54:d9:5a:06:6e:44:bd:ce:78:3b:84:c7:9e:
                    a5:65:f5:4b:82:33:23:a9:40:5e:c5:b0:aa:bc:b4:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1E:0A:17:A1:B1:48:28:0A:A1:0B:1C:4C:7F:D9:79:59:45:AE:08
            X509v3 Authority Key Identifier:
                keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:76:4d:9a:6c:c8:e7:82:ac:90:4e:2f:bb:73:63:47:a6:
         42:2b:31:cf:87:cb:49:83:4c:61:04:09:29:d4:01:3f:62:92:
         71:e9:69:b5:c2:04:e0:ad:33:78:0f:dd:d1:00:a4:a5:b5:9c:
         3e:03:52:e2:fb:c8:b1:29:a5:33:a9:19:42:1e:41:e9:5d:03:
         7c:6b:85:0e:8b:e1:78:c3:3a:1e:68:46:0f:71:de:2b:3d:7b:
         6b:61:70:e6:92:7f:5c:19:ef:0a:37:47:cb:68:56:f3:24:a5:
         db:32:b0:ad:cb:6a:3d:8e:e5:1d:30:56:8a:ec:6d:2f:b9:f6:
         4b:e2:e7:00:a8:91:06:43:cb:5f:dd:85:20:f3:51:de:59:23:
         6f:d9:ae:93:2f:9f:46:0e:80:14:a9:81:de:d8:4c:84:04:90:
         db:c1:17:ba:88:1b:81:68:25:d3:c3:d2:e9:1a:e1:9d:6d:b0:
         79:c6:bf:f3:43:01:81:90:f5:c6:61:29:3f:da:10:ac:d3:53:
         15:28:da:c7:41:61:19:f5:60:f6:05:e1:43:02:57:ab:34:ed:
         5a:d8:12:48:e3:04:c3:93:8f:b4:ff:af:47:d2:78:1b:c2:4a:
         7b:64:71:3d:33:96:65:fe:80:94:be:4b:d3:3e:17:43:f0:e7:
         3f:56:8d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+oHYTTyIwUmYREqCkasPjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi
M2JlN2QwHhcNMjQwNTI0MDEwMDU3WhcNMjQwNTI1MDEwMDU3WjAzMTEwLwYDVQQD
EyhlNTFlMGExN2ExYjE0ODI4MGFhMTBiMWM0YzdmZDk3OTU5NDVhZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPRA5dT+Odv+8szP5YZ1bc9qsFoP
i80JybfyEQM+L/b61uIyWDZq4/uNwMta6n7k7I2p/uO1vWWS1ssiw3BqBY2OmJqF
k6zebgsa6M7XdboeSb4TPu5VgsA2BbWEG9NdXcUYljYYvK5e6/sNws5NSGPUkoLq
rxBD2AvRamdby1m8aMbeToobpMAk0mrlOZeqYR6bUPCitfdbDs4IIDGmp2gP/EAy
grDaKGf1u1i/N0TEHG4ohRsmzquLPwgpx7vBKvCSB9FkYiy/RDkt9OUow16XK/tb
/ugvi0wTQk7W9J5gjVTZWgZuRL3OeDuEx56lZfVLgjMjqUBexbCqvLRlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUeChehsUgoCqELHEx/2XlZRa4IMB8GA1UdIwQY
MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt
NWE2NGE1ZmM4YTY0LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0
LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvl2TZps
yOeCrJBOL7tzY0emQisxz4fLSYNMYQQJKdQBP2KScelptcIE4K0zeA/d0QCkpbWc
PgNS4vvIsSmlM6kZQh5B6V0DfGuFDovheMM6HmhGD3HeKz17a2Fw5pJ/XBnvCjdH
y2hW8ySl2zKwrctqPY7lHTBWiuxtL7n2S+LnAKiRBkPLX92FIPNR3lkjb9muky+f
Rg6AFKmB3thMhASQ28EXuogbgWgl08PS6RrhnW2weca/80MBgZD1xmEpP9oQrNNT
FSjax0FhGfVg9gXhQwJXqzTtWtgSSOMEw5OPtP+vR9J4G8JKe2RxPTOWZf6AlL5L
0z4XQ/DnP1aNfg==
-----END CERTIFICATE-----
Generated at Fri May 24 02:04:24 2024 by rpki-client on console-fra.rpki-client.org