Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File:                     mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier:          PjAW66cwiFpK8JSMCu0CmtJuRpVP2KauDqW66lEgU1c=
Subject key identifier:   8B:24:D2:BE:2B:19:E0:CC:C8:FA:96:97:1C:00:B7:86:56:F4:B8:EE
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer:       /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial:       01901CD834063E9276F6BAA4326018E13662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number:          04CA
Signing time:             Sat 15 Jun 2024 17:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:49 +0000
Files and hashes:         1: VX76WEc2y2FrRC6vZX6CjQUlQG0.roa (hash: ofedL2vyU4RMGZfb6sma7EixWxGJi8bAaVhL+JMuxFU=)
                          2: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: d+1fwV3xr8z4VmVxWeKQMopz4VFYF/iulrwh0o9T3R4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:34:06:3e:92:76:f6:ba:a4:32:60:18:e1:36:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
        Validity
            Not Before: Jun 15 17:00:49 2024 GMT
            Not After : Jun 16 17:00:49 2024 GMT
        Subject: CN=8b24d2be2b19e0ccc8fa96971c00b78656f4b8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:e1:16:3a:a7:f0:56:88:06:95:20:21:b1:
                    be:00:f9:01:2c:0d:53:33:3f:bd:e9:1a:32:50:0c:
                    dc:75:a7:3f:83:d6:03:d0:dd:b3:1b:d3:06:db:e1:
                    37:d6:eb:db:7b:d7:98:6f:56:a4:99:0f:66:31:aa:
                    8a:32:a9:22:5f:35:74:43:6b:0e:14:38:93:ca:e8:
                    c4:a6:72:4b:99:98:f4:68:51:a0:d0:20:b0:3e:d3:
                    b6:90:25:88:10:df:31:18:82:64:73:3a:b1:7e:0d:
                    88:ec:4a:65:e8:87:2b:11:43:f3:e8:8d:0e:1f:7f:
                    bd:ed:bf:1e:07:25:0c:d8:fa:60:73:e1:d9:3b:da:
                    9a:7a:36:1b:c4:f0:da:5e:0c:e7:b1:af:de:cd:c3:
                    bc:a6:ed:3c:47:b0:24:6f:fc:5d:1b:9f:24:e9:89:
                    02:92:34:e0:f6:5e:ee:7e:24:3f:2a:b7:ef:2f:64:
                    d2:78:7a:f2:0e:ba:d9:f2:96:8b:02:df:e9:9c:08:
                    37:8d:e5:4b:c4:0b:ae:6b:ee:ae:c5:33:c1:62:23:
                    2b:f9:b6:45:a7:ee:b8:9f:e5:fd:63:74:d2:3f:22:
                    49:19:83:08:d6:ef:92:78:1b:93:72:6b:85:c1:36:
                    d2:21:da:39:b2:b8:3f:51:70:68:19:49:c1:30:c0:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:24:D2:BE:2B:19:E0:CC:C8:FA:96:97:1C:00:B7:86:56:F4:B8:EE
            X509v3 Authority Key Identifier:
                keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:f5:b7:a4:65:32:fe:37:5f:c6:c5:2d:3e:a6:13:a2:79:
         77:a0:a6:05:91:a3:73:26:f3:b2:a0:b9:d7:0e:c1:76:b5:1b:
         c9:92:40:5b:3a:ec:4d:91:12:a0:f4:f9:cb:67:f7:e3:fd:d3:
         53:c5:2c:23:1b:99:a0:5b:9e:5f:56:16:ca:b9:bc:b2:32:9e:
         24:1d:5e:93:53:64:67:7d:76:65:43:34:6c:73:83:bc:5a:4a:
         4f:8a:d8:28:af:24:0d:0f:5f:54:0c:b1:56:09:7f:3d:b0:eb:
         5b:cf:70:43:af:cc:22:68:41:b8:6c:77:95:cc:21:5c:cb:d3:
         38:56:e8:06:39:82:08:89:23:df:a0:69:84:86:07:95:93:5a:
         fa:e6:c1:11:a3:bd:5b:aa:37:7b:70:3e:cd:87:f8:ab:f9:72:
         5f:c0:95:c9:b1:d0:cb:a4:1a:f6:e6:4d:0d:a3:a7:f6:a9:e5:
         58:d0:5b:96:18:1a:39:29:8f:48:c8:c2:b4:84:24:db:ed:6e:
         d5:5b:59:8b:71:d5:f8:42:25:e3:90:b6:4a:b6:02:6c:e3:ee:
         6d:6f:74:f1:97:e9:63:bd:38:d8:0e:33:ee:38:42:a7:0d:93:
         32:c5:f0:5d:9d:1f:43:bc:91:67:c8:73:98:dd:1c:3d:f5:b2:
         1d:e1:fb:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2DQGPpJ29rqkMmAY4TZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjBiMmM4ZDdiM2NhMTNjNTljNTMzNzJmMjVlMjAyYzg1
YWFkYzUwHhcNMjQwNjE1MTcwMDQ5WhcNMjQwNjE2MTcwMDQ5WjAzMTEwLwYDVQQD
Eyg4YjI0ZDJiZTJiMTllMGNjYzhmYTk2OTcxYzAwYjc4NjU2ZjRiOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2vhFjqn8FaIBpUgIbG+APkBLA1T
Mz+96RoyUAzcdac/g9YD0N2zG9MG2+E31uvbe9eYb1akmQ9mMaqKMqkiXzV0Q2sO
FDiTyujEpnJLmZj0aFGg0CCwPtO2kCWIEN8xGIJkczqxfg2I7Epl6IcrEUPz6I0O
H3+97b8eByUM2Ppgc+HZO9qaejYbxPDaXgznsa/ezcO8pu08R7Akb/xdG58k6YkC
kjTg9l7ufiQ/KrfvL2TSeHryDrrZ8paLAt/pnAg3jeVLxAuua+6uxTPBYiMr+bZF
p+64n+X9Y3TSPyJJGYMI1u+SeBuTcmuFwTbSIdo5srg/UXBoGUnBMMD2XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsk0r4rGeDMyPqWlxwAt4ZW9LjuMB8GA1UdIwQY
MBaAFJnwssjXs8oTxZxTNy8l4gLIWq3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGZmOTItMjIxZS00YTE2LThhZWYt
MTk0ZTBjNjUxZDczLzEvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NGZmOTItMjIxZS00YTE2LThhZWYtMTk0ZTBjNjUxZDcz
LzEvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4X1t6Rl
Mv43X8bFLT6mE6J5d6CmBZGjcybzsqC51w7BdrUbyZJAWzrsTZESoPT5y2f34/3T
U8UsIxuZoFueX1YWyrm8sjKeJB1ek1NkZ312ZUM0bHODvFpKT4rYKK8kDQ9fVAyx
Vgl/PbDrW89wQ6/MImhBuGx3lcwhXMvTOFboBjmCCIkj36BphIYHlZNa+ubBEaO9
W6o3e3A+zYf4q/lyX8CVybHQy6Qa9uZNDaOn9qnlWNBblhgaOSmPSMjCtIQk2+1u
1VtZi3HV+EIl45C2SrYCbOPubW908ZfpY7042A4z7jhCpw2TMsXwXZ0fQ7yRZ8hz
mN0cPfWyHeH7Lg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:17:29 2024 by rpki-client on console-ams.rpki-client.org