Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          7E7Hybcl5oWESb8OOH9cskUVEmKUcqowwRj6JyMN4E4=
Subject key identifier:   4D:4C:49:A6:89:60:64:25:B6:6C:53:D4:67:E3:35:31:FF:AD:7A:8E
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       01901DED9A579675758AF3532CE5AE4F3FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 22:03:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:49 +0000
Files and hashes:         1: FD3g9-opiplxcGFg0DLV3mpiLvo.roa (hash: Ge+7bD7Oi5u8EDZD+NmabA5wT2nLhyiWKjLIIeupRRE=)
                          2: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: WpCs7z9FFMw7y4O1MKZAqnPT2kHwrMpqxUfp52071sY=)
                          3: abPWT50cPtyTBZgNrGBKOQBTw5k.roa (hash: bYTH3Y6QfSw5EXSJPRDeQbLKzXq6AtnlrDUdcicOF/A=)
                          4: wLZ4tdq1mv7uF6FgUCl6C3LjOJE.roa (hash: xC5aUGaPaKSJeJn+l30PuciJV19+zIm95lga5Izdx1Q=)
                          5: xhsA_2cpMSBkV5U5o1doHhiIQ5Q.roa (hash: aBd6VWvbgdBzPaWkUyrRN+6jT9dgg9xm1ZzVtI4nF+A=)
                          6: yGlAAnzR0Ac36gBYhusymH0yYHs.roa (hash: SoMlDV4tNfDmsrOuZ9ODT8s9pKdQ7Kvs7fSidZk4kBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9a:57:96:75:75:8a:f3:53:2c:e5:ae:4f:3f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: Jun 15 22:03:49 2024 GMT
            Not After : Jun 16 22:03:49 2024 GMT
        Subject: CN=4d4c49a689606425b66c53d467e33531ffad7a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:7b:9e:aa:5a:ce:72:09:f6:fd:54:78:5b:
                    f9:e4:73:c9:61:b8:93:2e:aa:7b:e1:33:e6:d8:39:
                    fd:eb:38:6a:6b:58:11:5b:04:a9:59:70:d6:f3:1b:
                    00:97:67:d9:4c:19:a2:76:d0:bd:61:29:8f:dc:ed:
                    39:ea:df:23:2c:ca:3b:9d:12:e4:90:a3:c6:e9:af:
                    2e:1c:ba:5b:e7:c6:5d:dd:46:99:60:01:8d:21:9f:
                    b9:14:ad:bb:a0:bd:03:1f:cf:be:1a:fe:a9:df:39:
                    7b:8d:db:42:2b:3c:37:1d:0e:ec:19:ed:fc:ff:60:
                    67:0e:aa:e7:7d:20:19:30:2c:7e:ce:bc:32:9c:71:
                    4c:e1:3a:e0:b6:77:0a:45:f6:e4:9f:25:07:50:5a:
                    a7:55:54:11:a1:0e:0d:7a:d1:ab:a3:4b:ba:e7:72:
                    c9:48:3f:ae:9e:98:7c:cd:d6:c5:d7:5f:2f:78:98:
                    4d:c6:1a:1a:61:b9:77:32:95:93:88:31:9f:a3:67:
                    43:f0:17:dd:48:18:5e:0c:fe:5b:5f:1b:73:74:6b:
                    b1:04:ee:5b:74:31:87:ca:a5:bb:c9:01:7e:46:84:
                    a0:2b:14:f5:f9:93:13:e7:3f:4a:db:2f:42:96:04:
                    8f:82:6b:9b:9d:ba:21:ae:5b:45:ae:55:bf:5f:be:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4C:49:A6:89:60:64:25:B6:6C:53:D4:67:E3:35:31:FF:AD:7A:8E
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:d6:a7:26:62:5f:00:12:70:d9:ac:f3:40:cf:73:dc:26:
         2b:46:a9:ef:5a:a1:f9:66:f3:ec:26:da:1b:e8:e9:dd:2f:a0:
         28:b3:65:8c:16:45:33:2a:93:7d:eb:cc:67:27:f8:cb:00:93:
         9d:4a:9d:6b:a9:60:89:35:62:37:f3:ba:d2:9a:67:cf:9f:66:
         f1:ac:4c:a5:22:91:d4:b5:95:94:9d:c1:90:8a:81:96:c1:78:
         94:e2:46:a9:28:7c:e0:c3:8c:a2:78:89:95:0a:bc:17:d6:2d:
         cc:7e:ed:13:dc:eb:9a:96:1b:eb:54:1e:84:d4:8e:52:61:84:
         9e:1c:c2:de:29:b4:7d:b5:8a:c0:c4:8c:cc:ac:90:6b:ac:a8:
         08:df:51:20:61:9e:ea:30:0f:7e:1b:00:f1:72:2e:b6:51:c1:
         2d:37:b0:2b:5d:61:ba:c9:94:1e:e6:f6:05:31:76:b0:ec:aa:
         9f:b3:b9:c9:10:e1:ec:94:95:a9:7c:f4:e8:de:c8:98:42:0f:
         fa:44:cb:12:ec:ca:84:a3:82:55:48:8f:88:8d:a2:2a:81:6b:
         34:db:31:58:b9:88:26:c4:8d:00:a6:62:3b:b6:6c:96:b1:36:
         bf:43:6b:ab:46:6a:c3:14:d7:a4:55:92:14:b0:4f:23:2f:ff:
         b5:f5:79:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7ZpXlnV1ivNTLOWuTz+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw
ZTVjMTQwHhcNMjQwNjE1MjIwMzQ5WhcNMjQwNjE2MjIwMzQ5WjAzMTEwLwYDVQQD
Eyg0ZDRjNDlhNjg5NjA2NDI1YjY2YzUzZDQ2N2UzMzUzMWZmYWQ3YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX17nqpaznIJ9v1UeFv55HPJYbiT
Lqp74TPm2Dn96zhqa1gRWwSpWXDW8xsAl2fZTBmidtC9YSmP3O056t8jLMo7nRLk
kKPG6a8uHLpb58Zd3UaZYAGNIZ+5FK27oL0DH8++Gv6p3zl7jdtCKzw3HQ7sGe38
/2BnDqrnfSAZMCx+zrwynHFM4TrgtncKRfbknyUHUFqnVVQRoQ4NetGro0u653LJ
SD+unph8zdbF118veJhNxhoaYbl3MpWTiDGfo2dD8BfdSBheDP5bXxtzdGuxBO5b
dDGHyqW7yQF+RoSgKxT1+ZMT5z9K2y9ClgSPgmubnbohrltFrlW/X769LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1MSaaJYGQltmxT1GfjNTH/rXqOMB8GA1UdIwQY
MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt
MGJmYmFkNDg0OWNkLzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk
LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC3WpyZi
XwAScNms80DPc9wmK0ap71qh+Wbz7CbaG+jp3S+gKLNljBZFMyqTfevMZyf4ywCT
nUqda6lgiTViN/O60ppnz59m8axMpSKR1LWVlJ3BkIqBlsF4lOJGqSh84MOMoniJ
lQq8F9YtzH7tE9zrmpYb61QehNSOUmGEnhzC3im0fbWKwMSMzKyQa6yoCN9RIGGe
6jAPfhsA8XIutlHBLTewK11husmUHub2BTF2sOyqn7O5yRDh7JSVqXz06N7ImEIP
+kTLEuzKhKOCVUiPiI2iKoFrNNsxWLmIJsSNAKZiO7ZslrE2v0Nrq0ZqwxTXpFWS
FLBPIy//tfV5RQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:09:51 2024 by rpki-client on console-ams.rpki-client.org