Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
File:                     yIYjh23RrY5iSiPdUossZMgKhSE.mft (raw, json)
Hash identifier:          p5mliPl8dbM7rDwvdead65tgaUSA8qF8p/U1fg8psVI=
Subject key identifier:   69:47:1D:2A:18:92:67:B8:89:52:87:B0:59:D0:96:BA:17:90:C4:84
Authority key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Certificate issuer:       /CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Certificate serial:       01901CD8558B3E9708BC3435BA692EBE0A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
Manifest number:          E6
Signing time:             Sat 15 Jun 2024 17:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:57 +0000
Files and hashes:         1: NkesC1O1X58aN3Q08Bk3Vir53vY.roa (hash: +Fu4hmCCF23TVq8nPR7W9xkukm0bntFTgUyGcWSuzQk=)
                          2: yIYjh23RrY5iSiPdUossZMgKhSE.crl (hash: JI+IQxDRT5hhREO5GzIR+fXukjyL8YB7NMxlv+OkH8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:55:8b:3e:97:08:bc:34:35:ba:69:2e:be:0a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
        Validity
            Not Before: Jun 15 17:00:57 2024 GMT
            Not After : Jun 16 17:00:57 2024 GMT
        Subject: CN=69471d2a189267b8895287b059d096ba1790c484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:0c:23:0f:ab:09:c3:0d:00:23:15:3f:22:
                    28:25:b3:57:c7:c1:b7:c9:33:bc:c9:84:26:92:d0:
                    f3:5b:eb:bb:86:00:c7:38:50:ce:81:93:fb:66:45:
                    38:c8:00:40:d9:49:ee:5f:b3:92:cc:c3:53:b5:4b:
                    cd:7d:5a:4c:54:50:bb:4b:71:78:98:b0:a6:d7:49:
                    ea:0c:12:da:1d:77:36:71:90:bf:7c:fa:92:6e:49:
                    00:59:88:a1:3e:1c:3e:7c:9a:88:d4:dd:73:34:5d:
                    e3:ad:35:7f:d2:d5:3f:7b:5d:0c:2b:54:d1:bd:e3:
                    cc:cc:63:5f:2b:93:95:ed:1f:1d:04:08:d5:d7:cb:
                    4e:b3:56:47:2f:67:1c:01:54:c3:52:2e:26:78:8a:
                    11:30:7f:f5:e5:46:b6:26:1b:e5:76:11:47:90:22:
                    f3:a0:aa:a6:68:83:b8:d2:d7:d2:e7:5c:3f:30:c2:
                    fc:7e:0e:9f:46:aa:c1:ab:6c:51:53:1f:b9:a0:4b:
                    ce:90:18:61:a5:37:3a:32:dd:7f:8c:f8:44:5c:2a:
                    8a:46:d1:f0:31:b0:fd:0b:a7:9b:82:14:22:bf:ac:
                    59:e8:8c:a1:d2:f6:da:bf:46:5c:9c:c4:a0:18:e6:
                    5d:12:3a:f7:d8:d4:7b:d7:4a:86:75:7e:41:ef:4a:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:47:1D:2A:18:92:67:B8:89:52:87:B0:59:D0:96:BA:17:90:C4:84
            X509v3 Authority Key Identifier:
                keyid:C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e6:97:0c:89:bd:7e:da:be:2a:c9:b9:be:23:ed:d6:9c:31:
         c3:9b:35:f8:57:ac:a3:dc:db:e2:91:4e:a0:1e:11:8e:bf:c6:
         ad:bb:91:e0:ca:99:f5:9a:90:81:69:76:9c:46:eb:67:95:33:
         87:bc:85:97:1a:eb:cb:b0:21:ca:ca:9e:8e:d0:a8:66:5d:01:
         79:1e:d5:3c:0b:64:ee:41:d1:36:b7:ca:67:c0:90:34:e2:e0:
         35:06:2a:b8:db:9a:2f:17:6c:35:28:80:37:02:75:4a:24:25:
         4a:43:f8:f7:45:e8:88:db:55:b4:70:b3:f2:d5:f4:f3:a1:7b:
         0c:5c:06:58:c6:ec:97:ae:15:fc:dd:d5:a1:3f:1b:39:7a:58:
         fc:b4:5c:da:95:e9:3b:02:6f:64:67:76:d5:a3:62:3c:78:e3:
         5c:70:84:9c:c6:eb:02:c3:e1:82:2f:b3:99:f9:01:2a:47:37:
         82:8a:f2:ae:47:72:c2:87:80:20:3e:55:96:85:1c:8a:7d:c8:
         f5:79:d1:22:1f:1f:e8:0f:39:01:57:5b:72:f1:90:ae:68:15:
         fe:0f:42:99:1c:4d:04:f5:b6:21:fb:fe:3f:04:e4:74:28:98:
         e3:79:16:d0:4a:57:53:ef:f7:45:43:fb:0e:54:c0:2b:a5:1c:
         7a:f1:00:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2FWLPpcIvDQ1umkuvgpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ODYyMzg3NmRkMWFkOGU2MjRhMjNkZDUyOGIyYzY0Yzgw
YTg1MjEwHhcNMjQwNjE1MTcwMDU3WhcNMjQwNjE2MTcwMDU3WjAzMTEwLwYDVQQD
Eyg2OTQ3MWQyYTE4OTI2N2I4ODk1Mjg3YjA1OWQwOTZiYTE3OTBjNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EkMIw+rCcMNACMVPyIoJbNXx8G3
yTO8yYQmktDzW+u7hgDHOFDOgZP7ZkU4yABA2UnuX7OSzMNTtUvNfVpMVFC7S3F4
mLCm10nqDBLaHXc2cZC/fPqSbkkAWYihPhw+fJqI1N1zNF3jrTV/0tU/e10MK1TR
vePMzGNfK5OV7R8dBAjV18tOs1ZHL2ccAVTDUi4meIoRMH/15Ua2JhvldhFHkCLz
oKqmaIO40tfS51w/MML8fg6fRqrBq2xRUx+5oEvOkBhhpTc6Mt1/jPhEXCqKRtHw
MbD9C6ebghQiv6xZ6Iyh0vbav0ZcnMSgGOZdEjr32NR710qGdX5B70oS1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlHHSoYkme4iVKHsFnQlroXkMSEMB8GA1UdIwQY
MBaAFMiGI4dt0a2OYkoj3VKLLGTICoUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUlZamgyM1JyWTVpU2lQZFVvc3NaTWdLaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xODI1ZDEtN2MwMS00OTE1LWE0NDQt
MmViNTEyNjFkZGJhLzEveUlZamgyM1JyWTVpU2lQZFVvc3NaTWdLaFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xODI1ZDEtN2MwMS00OTE1LWE0NDQtMmViNTEyNjFkZGJh
LzEveUlZamgyM1JyWTVpU2lQZFVvc3NaTWdLaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOaXDIm9
ftq+Ksm5viPt1pwxw5s1+Feso9zb4pFOoB4Rjr/GrbuR4MqZ9ZqQgWl2nEbrZ5Uz
h7yFlxrry7AhysqejtCoZl0BeR7VPAtk7kHRNrfKZ8CQNOLgNQYquNuaLxdsNSiA
NwJ1SiQlSkP490XoiNtVtHCz8tX086F7DFwGWMbsl64V/N3VoT8bOXpY/LRc2pXp
OwJvZGd21aNiPHjjXHCEnMbrAsPhgi+zmfkBKkc3goryrkdywoeAID5VloUcin3I
9XnRIh8f6A85AVdbcvGQrmgV/g9CmRxNBPW2Ifv+PwTkdCiY43kW0EpXU+/3RUP7
DlTAK6UcevEAfA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:27:28 2024 by rpki-client on console-ams.rpki-client.org