Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File:                     YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier:          gpcUi27p/Iu06rh6RbIU1NokBpWHunkIAe9zO96JhVA=
Subject key identifier:   59:28:D6:B4:E4:65:AB:30:46:B0:AB:A6:89:C7:91:09:C2:3A:24:F0
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer:       /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial:       01901BFE8AEE1CA559B2F69B488C7E7554D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 13:03:04 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:04 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:04 +0000
Files and hashes:         1: 7M2GulaXs8u9bhmxeEqqIDK1WfI.roa (hash: Fh1DGq3vQlBNacKMMdtlpJTIxFqesezw3arkJ5wceKk=)
                          2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: pOPJitsjHr62Z7eo/4J29M9ZSo9HO7uBWrx2/OOzu1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:8a:ee:1c:a5:59:b2:f6:9b:48:8c:7e:75:54:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
        Validity
            Not Before: Jun 15 13:03:04 2024 GMT
            Not After : Jun 16 13:03:04 2024 GMT
        Subject: CN=5928d6b4e465ab3046b0aba689c79109c23a24f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:1e:34:44:3f:3e:51:23:04:69:5a:d8:29:
                    50:7c:e1:41:aa:9d:d5:42:c6:84:aa:e9:d3:4a:92:
                    90:6f:55:ce:8c:8f:0d:4e:46:98:d5:5e:28:b5:ef:
                    b6:2e:09:d7:2e:65:53:81:42:16:1e:3f:8f:20:13:
                    42:63:9d:76:3e:c6:32:83:f8:ec:f6:2c:ce:42:5b:
                    3f:ef:7e:4d:bd:3f:39:57:e1:87:b7:8f:e0:19:d3:
                    04:1f:83:70:20:ce:d5:a1:79:eb:61:be:a2:fc:66:
                    52:97:58:15:56:04:99:76:06:26:9c:fa:f4:7a:e1:
                    ba:92:bb:58:7e:26:1e:79:55:0e:13:01:28:ee:c2:
                    53:a2:f0:c9:06:2f:be:7d:72:f1:e0:79:ac:60:15:
                    f1:a0:2e:cd:6a:0d:22:6d:dc:a9:93:59:bb:65:fc:
                    11:3a:08:8a:bb:69:18:24:ec:bb:07:44:d2:d0:e4:
                    85:2b:5a:b6:da:ed:d6:af:62:42:d3:7d:e1:c5:9c:
                    70:f0:99:35:13:a6:bb:38:02:49:da:ed:1c:02:f4:
                    f0:87:f8:19:25:b1:e7:a0:e4:c8:ec:94:01:1c:c6:
                    dc:5f:70:30:6f:ef:e1:cd:bd:6b:c2:fa:b6:1c:21:
                    64:ca:b3:55:7f:c7:04:5b:e4:b3:3d:94:f6:f5:74:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:28:D6:B4:E4:65:AB:30:46:B0:AB:A6:89:C7:91:09:C2:3A:24:F0
            X509v3 Authority Key Identifier:
                keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:60:cc:5d:cb:9a:44:77:27:62:2f:0b:da:17:23:e1:64:19:
         04:5f:46:42:d0:e4:a6:c5:a3:19:c1:86:1d:15:28:01:f0:a9:
         5b:68:94:56:53:4f:6a:8b:c3:98:64:28:1b:8f:e3:1f:85:cd:
         d5:70:9b:6a:91:ae:a6:7b:98:b7:cd:12:78:73:4c:1c:6a:44:
         76:66:16:7d:1c:3a:14:7f:1e:12:90:15:36:0b:f0:19:bc:16:
         b3:07:bc:01:00:44:c1:4c:a5:e4:03:ca:43:7f:95:4f:a7:c4:
         37:f7:1a:18:c8:56:71:c4:31:8a:88:f6:ba:b4:a9:f6:b9:73:
         d4:11:d8:55:9d:22:fc:99:84:95:db:7d:2c:78:0e:40:58:61:
         a3:e0:e0:4f:53:cb:45:65:24:73:68:af:9e:2c:3d:29:3f:3f:
         bb:31:53:41:b9:8f:3d:20:37:b1:70:b1:ef:a2:5b:82:5b:1a:
         d1:a6:5c:40:b4:31:c2:c6:eb:9d:7c:5b:6e:5c:bc:34:65:6e:
         71:4a:9e:ad:49:4e:c7:06:eb:35:40:d1:08:c4:9d:0d:f6:6c:
         8f:62:60:6f:aa:0e:2b:2d:58:cd:aa:ac:03:fe:6f:fb:c5:8f:
         2a:b1:ec:cd:95:93:b5:90:ed:97:e0:dd:1d:a6:1b:8d:be:86:
         7e:da:0c:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/oruHKVZsvabSIx+dVTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZjYwM2YzYTU1YTI5ZTY2MTdmMDk2YjNhNjliZmYwYTM5
MmE5MjgwHhcNMjQwNjE1MTMwMzA0WhcNMjQwNjE2MTMwMzA0WjAzMTEwLwYDVQQD
Eyg1OTI4ZDZiNGU0NjVhYjMwNDZiMGFiYTY4OWM3OTEwOWMyM2EyNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIUeNEQ/PlEjBGla2ClQfOFBqp3V
QsaEqunTSpKQb1XOjI8NTkaY1V4ote+2LgnXLmVTgUIWHj+PIBNCY512PsYyg/js
9izOQls/735NvT85V+GHt4/gGdMEH4NwIM7VoXnrYb6i/GZSl1gVVgSZdgYmnPr0
euG6krtYfiYeeVUOEwEo7sJTovDJBi++fXLx4HmsYBXxoC7Nag0ibdypk1m7ZfwR
OgiKu2kYJOy7B0TS0OSFK1q22u3Wr2JC033hxZxw8Jk1E6a7OAJJ2u0cAvTwh/gZ
JbHnoOTI7JQBHMbcX3Awb+/hzb1rwvq2HCFkyrNVf8cEW+SzPZT29XT/iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFko1rTkZaswRrCrponHkQnCOiTwMB8GA1UdIwQY
MBaAFGL2A/OlWinmYX8Jazppv/CjkqkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMt
NDFmMzlhOGMwOWRkLzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMtNDFmMzlhOGMwOWRk
LzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGDMXcua
RHcnYi8L2hcj4WQZBF9GQtDkpsWjGcGGHRUoAfCpW2iUVlNPaovDmGQoG4/jH4XN
1XCbapGupnuYt80SeHNMHGpEdmYWfRw6FH8eEpAVNgvwGbwWswe8AQBEwUyl5APK
Q3+VT6fEN/caGMhWccQxioj2urSp9rlz1BHYVZ0i/JmEldt9LHgOQFhho+DgT1PL
RWUkc2ivniw9KT8/uzFTQbmPPSA3sXCx76Jbglsa0aZcQLQxwsbrnXxbbly8NGVu
cUqerUlOxwbrNUDRCMSdDfZsj2Jgb6oOKy1YzaqsA/5v+8WPKrHszZWTtZDtl+Dd
HaYbjb6GftoMCw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:52:36 2024 by rpki-client on console-ams.rpki-client.org