Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File:                     YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier:          fyOakNxrr/4CkSNgjUOGjWqtQqSY+8cG6Qn///TJ4cs=
Subject key identifier:   55:2C:EA:08:E8:55:70:DB:4D:95:CD:8E:51:52:A4:B6:38:F7:4D:B2
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer:       /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial:       018F8F6FA7C86982159314599A6E9C12FEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 06:00:10 +0000
Manifest this update:     Sun 19 May 2024 06:00:10 +0000
Manifest next update:     Mon 20 May 2024 06:00:10 +0000
Files and hashes:         1: 3IZT_q9np-bsnycB_W2wN_7HTnw.roa (hash: U2uZdsQBN/FogVAjv2xmiwaTa/hjSUeLHVGfOkRhNqs=)
                          2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: D/7GgvN16HWkM9Fpg6UOfJfK7rNfLfZzh/VKauvn8gQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:6f:a7:c8:69:82:15:93:14:59:9a:6e:9c:12:fe:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
        Validity
            Not Before: May 19 06:00:10 2024 GMT
            Not After : May 20 06:00:10 2024 GMT
        Subject: CN=552cea08e85570db4d95cd8e5152a4b638f74db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:dc:ab:2f:81:46:3b:5e:70:87:db:db:61:
                    ef:4f:4d:36:f4:b4:6f:bb:13:6a:d7:40:dc:9a:72:
                    44:d9:1d:84:b4:56:a1:ef:5f:b9:bb:5f:1f:f0:d4:
                    45:68:ca:3e:26:41:ff:db:c3:6b:21:f4:7e:d0:c4:
                    1f:e9:e7:54:5e:9d:0a:14:f1:29:db:2a:5a:d7:c1:
                    90:ec:b5:e9:12:3c:91:e2:9b:c2:64:a2:d6:fc:89:
                    48:6c:04:d0:89:36:31:f6:79:49:70:71:3c:8b:03:
                    a0:89:ea:a0:33:43:d1:22:fb:29:bb:c1:51:af:a4:
                    af:58:15:00:f3:fe:52:59:64:32:c1:94:7c:4f:1e:
                    4c:59:13:0c:ef:26:7b:ac:7d:e1:6b:2f:2e:f9:d8:
                    57:55:01:99:d5:2d:61:98:a0:70:01:80:5c:58:a7:
                    0b:1b:e3:5a:f0:7c:de:05:42:28:e4:3b:47:5c:5f:
                    46:d6:6e:1e:5d:b4:9e:e9:63:ec:60:57:a0:77:7d:
                    ee:89:db:aa:c5:29:00:e8:2d:fa:42:42:b1:c1:96:
                    0e:23:0b:07:e5:f8:e6:8c:b0:c9:92:65:3b:c9:5c:
                    0d:09:57:4b:d7:e1:3f:fa:ed:bf:fa:8e:0d:3c:bb:
                    ea:d2:05:e5:3a:84:59:8f:db:2e:52:e7:08:aa:dd:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2C:EA:08:E8:55:70:DB:4D:95:CD:8E:51:52:A4:B6:38:F7:4D:B2
            X509v3 Authority Key Identifier:
                keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:38:41:ac:d6:cf:6c:7e:48:99:ba:25:70:94:bb:ed:6d:
         3b:66:f1:4f:35:be:ce:13:db:97:fe:3f:ed:8a:03:69:ae:7c:
         4b:6a:b5:4b:cc:15:0a:d3:ff:7d:bf:b6:ef:52:a1:88:cf:a3:
         23:49:b6:be:08:6c:78:4d:37:82:7a:f4:0d:b7:2e:bd:cb:b2:
         11:04:45:9f:c5:46:5d:cc:c0:19:05:df:03:24:78:3d:db:7c:
         92:5c:7b:94:db:62:d7:a2:f1:73:a9:8e:ac:4a:23:6d:06:07:
         1a:a7:1e:47:bb:35:e6:f7:64:15:bb:46:5d:79:25:cb:eb:cc:
         0a:48:07:25:3d:00:f1:3b:a7:c4:0b:40:d8:27:6f:6b:25:a8:
         45:7f:1f:c4:6e:42:84:4e:c7:af:3a:f2:7e:86:f0:cf:4c:68:
         7d:9c:e1:12:ae:0c:ed:64:70:63:03:71:d8:83:cb:4c:75:3c:
         81:82:0c:cc:77:65:0d:54:09:df:c0:cb:67:aa:72:9f:a8:3b:
         34:c3:af:85:c2:d6:42:33:12:b4:a2:16:67:85:00:28:07:da:
         9d:2e:48:fc:43:4b:84:d3:bd:3b:94:f3:52:49:51:14:32:0d:
         75:6f:ae:58:e6:7a:a3:25:1c:2f:ff:bb:99:13:54:a3:dc:28:
         bf:10:d9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Pb6fIaYIVkxRZmm6cEv7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw
NmM1YTEwHhcNMjQwNTE5MDYwMDEwWhcNMjQwNTIwMDYwMDEwWjAzMTEwLwYDVQQD
Eyg1NTJjZWEwOGU4NTU3MGRiNGQ5NWNkOGU1MTUyYTRiNjM4Zjc0ZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjbcqy+BRjtecIfb22HvT0029LRv
uxNq10DcmnJE2R2EtFah71+5u18f8NRFaMo+JkH/28NrIfR+0MQf6edUXp0KFPEp
2ypa18GQ7LXpEjyR4pvCZKLW/IlIbATQiTYx9nlJcHE8iwOgieqgM0PRIvspu8FR
r6SvWBUA8/5SWWQywZR8Tx5MWRMM7yZ7rH3hay8u+dhXVQGZ1S1hmKBwAYBcWKcL
G+Na8HzeBUIo5DtHXF9G1m4eXbSe6WPsYFegd33uiduqxSkA6C36QkKxwZYOIwsH
5fjmjLDJkmU7yVwNCVdL1+E/+u2/+o4NPLvq0gXlOoRZj9suUucIqt2INwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUs6gjoVXDbTZXNjlFSpLY4902yMB8GA1UdIwQY
MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt
MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm
LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKg4QazW
z2x+SJm6JXCUu+1tO2bxTzW+zhPbl/4/7YoDaa58S2q1S8wVCtP/fb+271KhiM+j
I0m2vghseE03gnr0DbcuvcuyEQRFn8VGXczAGQXfAyR4Pdt8klx7lNti16Lxc6mO
rEojbQYHGqceR7s15vdkFbtGXXkly+vMCkgHJT0A8TunxAtA2CdvayWoRX8fxG5C
hE7Hrzryfobwz0xofZzhEq4M7WRwYwNx2IPLTHU8gYIMzHdlDVQJ38DLZ6pyn6g7
NMOvhcLWQjMStKIWZ4UAKAfanS5I/ENLhNO9O5TzUklRFDINdW+uWOZ6oyUcL/+7
mRNUo9wovxDZJA==
-----END CERTIFICATE-----
Generated at Sun May 19 07:49:30 2024 by rpki-client on console-fra.rpki-client.org