Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File:                     ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier:          U9P2Zqq/oJrpdR/SiIGpccYQkGZpklH0c/ZbDarn1tU=
Subject key identifier:   BA:8F:25:46:3F:2D:01:96:2A:99:94:81:EA:D2:60:2A:AB:5A:4B:D7
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer:       /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial:       018FB6B52A86D42BF48F943D814757909EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number:          0AF9
Signing time:             Sun 26 May 2024 21:01:17 +0000
Manifest this update:     Sun 26 May 2024 21:01:17 +0000
Manifest next update:     Mon 27 May 2024 21:01:17 +0000
Files and hashes:         1: 9fxRoS56ITlpv5kobtrqSU-Y2V0.roa (hash: uM1nxC8BhuPDE1d6ITiaHe9I6AvxD6ZrdhGHRNfhfTw=)
                          2: JITisVs1C7mpm-hRov_sJ8_LNX4.roa (hash: Slt5dP86F9zI+osa46Zx8sJRumCngjdQIvt/L44qGkI=)
                          3: rh9325CH6qyAawj-3CdMLng75Ek.roa (hash: qfYdhCZv0V2yrX+ifFl2nX1wSkhdMmDl4kahWjgdXc8=)
                          4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: qmhdeU4hy3FB1ivfJNnaEBmWzUDRDrE+NZ+4oYY7bsc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:b5:2a:86:d4:2b:f4:8f:94:3d:81:47:57:90:9e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Validity
            Not Before: May 26 21:01:17 2024 GMT
            Not After : May 27 21:01:17 2024 GMT
        Subject: CN=ba8f25463f2d01962a999481ead2602aab5a4bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:79:da:58:41:75:59:fd:8c:f1:da:f2:df:
                    ac:3b:f5:4d:f4:01:04:13:b3:66:4f:75:7d:25:ce:
                    58:1d:6a:a6:a7:77:4b:96:32:f8:84:cd:65:fd:46:
                    85:e3:50:fb:98:e2:07:19:65:c7:4f:e3:1c:49:5b:
                    db:0a:0f:ef:01:7e:12:4a:bc:6c:3d:c7:65:0d:6b:
                    bf:87:58:9d:f3:0c:b5:c1:15:05:05:ff:3d:2e:5b:
                    39:f4:76:db:e0:bf:44:e1:c0:2c:99:10:4a:58:cd:
                    47:ff:36:93:a8:d5:31:1e:46:3c:bf:61:38:b9:67:
                    90:b2:3f:f1:f6:89:d2:9d:fa:3b:3e:87:ac:4a:e9:
                    0e:fa:d1:fd:28:42:5e:3c:e9:54:51:18:9b:c7:63:
                    52:da:6e:47:93:4b:b2:32:83:7b:1e:99:95:7b:eb:
                    81:36:33:41:87:8b:76:53:4a:35:77:2e:ab:16:9b:
                    dc:ae:6d:7e:f0:0c:b1:ad:ac:39:bb:e0:8d:a1:5f:
                    f8:52:9b:60:60:7e:7c:cf:bb:2a:43:b0:28:51:9d:
                    3c:9e:ff:7a:d5:5d:3b:47:a4:3a:07:7c:e7:a6:e5:
                    c6:a0:34:ec:77:9b:6e:bb:27:92:5d:e8:c1:86:6a:
                    df:95:06:ec:aa:9f:ae:09:48:df:b3:8a:f0:41:c7:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:25:46:3F:2D:01:96:2A:99:94:81:EA:D2:60:2A:AB:5A:4B:D7
            X509v3 Authority Key Identifier:
                keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0a:30:c6:0a:2f:ed:40:b9:30:b1:2d:9c:ab:5c:bf:fc:27:
         d9:c1:2d:32:c8:eb:8e:e8:dd:20:4e:43:77:b4:10:aa:81:08:
         4a:c2:fb:12:89:bd:2d:a9:22:62:94:bc:5d:08:3c:56:16:7c:
         a0:43:74:c7:9e:b9:e7:bc:c0:86:7b:21:9e:02:c0:be:5d:60:
         ac:56:38:3b:e6:ee:e0:67:d8:cc:3f:1b:03:de:38:f6:c6:f1:
         95:fd:03:bb:d3:41:1e:ef:9d:c4:ff:a6:8e:62:a8:27:49:e6:
         03:97:81:e2:32:26:70:e9:49:87:3c:fb:2d:e7:0a:a8:ca:c7:
         04:c2:41:63:93:bb:80:ee:47:5c:f4:f4:1d:07:b8:8e:66:a3:
         a3:bc:29:68:50:4f:42:15:fb:2b:69:bc:e3:2c:20:a6:b3:1f:
         17:d4:55:e5:0d:09:77:73:42:a8:e9:23:be:7d:14:b2:07:3d:
         34:88:5c:95:a0:85:e1:5a:cf:6e:3c:2b:28:c3:06:bc:18:26:
         26:44:0c:df:4e:91:7b:71:29:c7:71:1e:d0:5a:36:48:01:c9:
         d4:47:4c:8c:b4:11:3b:f8:32:13:00:c6:e3:f9:39:be:a9:37:
         84:5a:fc:ec:1d:45:da:8d:50:8e:1d:61:b6:9e:bd:54:f1:51:
         d4:1e:1a:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+2tSqG1Cv0j5Q9gUdXkJ7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3
Nzc3YjUwHhcNMjQwNTI2MjEwMTE3WhcNMjQwNTI3MjEwMTE3WjAzMTEwLwYDVQQD
EyhiYThmMjU0NjNmMmQwMTk2MmE5OTk0ODFlYWQyNjAyYWFiNWE0YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwt52lhBdVn9jPHa8t+sO/VN9AEE
E7NmT3V9Jc5YHWqmp3dLljL4hM1l/UaF41D7mOIHGWXHT+McSVvbCg/vAX4SSrxs
PcdlDWu/h1id8wy1wRUFBf89Lls59Hbb4L9E4cAsmRBKWM1H/zaTqNUxHkY8v2E4
uWeQsj/x9onSnfo7PoesSukO+tH9KEJePOlUURibx2NS2m5Hk0uyMoN7HpmVe+uB
NjNBh4t2U0o1dy6rFpvcrm1+8Ayxraw5u+CNoV/4UptgYH58z7sqQ7AoUZ08nv96
1V07R6Q6B3znpuXGoDTsd5tuuyeSXejBhmrflQbsqp+uCUjfs4rwQcfb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqPJUY/LQGWKpmUgerSYCqrWkvXMB8GA1UdIwQY
MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt
OTBmYjU3ZDQwY2E3LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3
LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgowxgov
7UC5MLEtnKtcv/wn2cEtMsjrjujdIE5Dd7QQqoEISsL7Eom9LakiYpS8XQg8VhZ8
oEN0x56557zAhnshngLAvl1grFY4O+bu4GfYzD8bA9449sbxlf0Du9NBHu+dxP+m
jmKoJ0nmA5eB4jImcOlJhzz7LecKqMrHBMJBY5O7gO5HXPT0HQe4jmajo7wpaFBP
QhX7K2m84ywgprMfF9RV5Q0Jd3NCqOkjvn0Usgc9NIhclaCF4VrPbjwrKMMGvBgm
JkQM306Re3Epx3Ee0Fo2SAHJ1EdMjLQRO/gyEwDG4/k5vqk3hFr87B1F2o1Qjh1h
tp69VPFR1B4apw==
-----END CERTIFICATE-----
Generated at Sun May 26 23:28:58 2024 by rpki-client on console-ams.rpki-client.org