Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File:                     YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier:          aAzJeGeRHz7P/Qr5GEiBF/ep8QfqlrrFLez1qdwr0YM=
Subject key identifier:   EE:E3:CD:82:71:38:60:40:FE:BC:90:E6:09:EE:FB:8C:28:DF:A5:3C
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer:       /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial:       01901EFDBF6287069B046AD7E91E7752DB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number:          11CA
Signing time:             Sun 16 Jun 2024 03:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:04 +0000
Files and hashes:         1: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: A4EJJ12j14ZK+NjpZXEH3vigAv8U2+El2pclfJcWF30=)
                          2: ir3MFa14Y0CqCALcmrhq3IejZO4.roa (hash: byvQulwEAhU0ItUU8tUsBWdWwL+Y1ph+6UT5KvEXi7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:bf:62:87:06:9b:04:6a:d7:e9:1e:77:52:db:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
        Validity
            Not Before: Jun 16 03:01:04 2024 GMT
            Not After : Jun 17 03:01:04 2024 GMT
        Subject: CN=eee3cd8271386040febc90e609eefb8c28dfa53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:2e:02:28:36:84:0e:80:c8:76:3e:cb:a4:
                    8a:d9:17:f6:a2:fc:d9:ea:af:52:64:03:2b:d0:6c:
                    8a:f6:08:a1:ed:9f:5d:c4:b2:c3:0d:6b:93:ae:ec:
                    0d:33:bc:20:a7:05:d6:3d:c9:17:a7:ab:cc:df:0a:
                    f8:2f:14:85:2f:bf:d0:19:c7:e7:48:43:45:dd:66:
                    9f:a4:2d:4c:2e:3e:2f:5f:59:b0:33:2a:02:e3:27:
                    0c:bc:c7:4c:06:01:2c:3d:06:ac:79:d1:dd:dc:de:
                    17:e0:9b:c7:63:52:5b:26:86:2d:77:49:fc:96:0c:
                    66:e1:ea:6d:a7:3b:f8:d9:e4:1e:92:b2:92:6a:51:
                    f4:14:ae:85:43:31:0d:72:6a:9d:e3:c1:10:5c:ef:
                    43:2c:ba:37:3f:79:d7:22:b9:f4:21:1e:e1:ca:e1:
                    16:74:40:5d:6c:ec:60:98:6d:df:69:56:7a:ef:c0:
                    fb:e5:44:cd:ca:9f:e3:3b:80:6e:8e:51:44:50:d0:
                    03:aa:de:2b:83:52:92:3d:09:e6:a1:cd:8f:0c:91:
                    d4:f5:97:8c:53:48:c8:ff:42:1c:97:ab:5f:6c:87:
                    38:c9:fb:73:0c:ba:f3:d8:c4:29:b0:03:f6:a9:0e:
                    40:0d:16:c0:41:57:01:49:c2:bb:92:5b:13:a8:29:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E3:CD:82:71:38:60:40:FE:BC:90:E6:09:EE:FB:8C:28:DF:A5:3C
            X509v3 Authority Key Identifier:
                keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:9e:ab:cd:f1:66:e4:b0:70:1d:c5:63:cc:99:9b:c1:33:
         36:31:71:67:bb:8c:a8:7e:79:77:f7:ec:04:74:7e:5c:22:de:
         71:41:8d:d3:3c:24:c6:cc:26:af:1b:12:41:9b:92:53:d0:13:
         f3:22:c3:4d:35:39:35:e3:92:15:23:00:f4:87:84:ab:ec:20:
         15:f6:b9:c5:af:21:31:5f:ca:39:b6:86:63:9a:8b:15:2e:fb:
         5b:c2:f5:6d:e7:7d:03:f2:5f:d6:55:11:6a:9a:f7:c5:b4:0a:
         84:a9:df:c7:3b:00:77:03:c0:a6:a0:64:94:2d:fa:46:1e:fe:
         4d:72:21:20:e4:77:50:f5:76:22:3d:61:7f:66:3b:64:41:52:
         6e:49:3d:24:1f:30:e2:e8:f3:54:a8:8e:2b:71:b3:e6:0a:30:
         cd:12:36:b9:64:41:a5:b1:b1:d9:a4:df:d0:fa:a1:e0:10:56:
         f2:e1:10:fe:c1:4f:89:4d:be:92:8e:8b:7c:99:af:84:ff:21:
         1e:bc:72:9c:38:0d:42:6a:7d:2a:41:f0:a6:63:c0:6e:d3:18:
         86:2b:11:0d:e0:d9:b0:dd:fe:50:6c:6f:1f:9f:ee:b0:2a:85:
         f6:b0:bc:9e:82:2a:68:67:19:e5:e3:09:48:b4:ea:18:2b:61:
         82:98:16:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/b9ihwabBGrX6R53Uts4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjE5NWQxMzA1MGZmM2M0NjhhMTQ5Nzc4NzEwYjUzNTgy
MjUxZDkwHhcNMjQwNjE2MDMwMTA0WhcNMjQwNjE3MDMwMTA0WjAzMTEwLwYDVQQD
EyhlZWUzY2Q4MjcxMzg2MDQwZmViYzkwZTYwOWVlZmI4YzI4ZGZhNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4MuAig2hA6AyHY+y6SK2Rf2ovzZ
6q9SZAMr0GyK9gih7Z9dxLLDDWuTruwNM7wgpwXWPckXp6vM3wr4LxSFL7/QGcfn
SENF3WafpC1MLj4vX1mwMyoC4ycMvMdMBgEsPQasedHd3N4X4JvHY1JbJoYtd0n8
lgxm4eptpzv42eQekrKSalH0FK6FQzENcmqd48EQXO9DLLo3P3nXIrn0IR7hyuEW
dEBdbOxgmG3faVZ678D75UTNyp/jO4BujlFEUNADqt4rg1KSPQnmoc2PDJHU9ZeM
U0jI/0Icl6tfbIc4yftzDLrz2MQpsAP2qQ5ADRbAQVcBScK7klsTqCn4JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7jzYJxOGBA/ryQ5gnu+4wo36U8MB8GA1UdIwQY
MBaAFGGxldEwUP88RooUl3hxC1NYIlHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2It
YmFjNDcyYWI3YjZhLzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2ItYmFjNDcyYWI3YjZh
LzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgGeq83x
ZuSwcB3FY8yZm8EzNjFxZ7uMqH55d/fsBHR+XCLecUGN0zwkxswmrxsSQZuSU9AT
8yLDTTU5NeOSFSMA9IeEq+wgFfa5xa8hMV/KObaGY5qLFS77W8L1bed9A/Jf1lUR
apr3xbQKhKnfxzsAdwPApqBklC36Rh7+TXIhIOR3UPV2Ij1hf2Y7ZEFSbkk9JB8w
4ujzVKiOK3Gz5gowzRI2uWRBpbGx2aTf0Pqh4BBW8uEQ/sFPiU2+ko6LfJmvhP8h
HrxynDgNQmp9KkHwpmPAbtMYhisRDeDZsN3+UGxvH5/usCqF9rC8noIqaGcZ5eMJ
SLTqGCthgpgWwQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:54 2024 by rpki-client on console-fra.rpki-client.org