Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File:                     yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier:          RvQXspIrMA5/m8yt3vyOaWddLb07BLzZe8wdJOr4Jqg=
Subject key identifier:   03:65:8D:12:FF:96:6B:68:DC:56:FD:4B:BD:A8:77:A3:30:22:EF:51
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer:       /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial:       01901D4632B4D5B94DAA447FC8BA72295CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number:          0E5A
Signing time:             Sat 15 Jun 2024 19:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:58 +0000
Files and hashes:         1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: CWAtn5+D2p0x2xGZWRT7nePpRVWX0e8EzU4sK5wlvKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:32:b4:d5:b9:4d:aa:44:7f:c8:ba:72:29:5c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
        Validity
            Not Before: Jun 15 19:00:58 2024 GMT
            Not After : Jun 16 19:00:58 2024 GMT
        Subject: CN=03658d12ff966b68dc56fd4bbda877a33022ef51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:83:4b:22:ec:fc:5a:4a:c7:b3:8d:5c:2e:
                    e5:22:69:22:44:0d:57:d0:79:23:b4:2d:6d:c7:f0:
                    8d:e8:e4:7f:b5:e5:8d:34:41:40:b8:db:e0:cc:13:
                    31:90:b1:ba:59:23:14:f9:1a:d6:8c:a8:4b:8a:cc:
                    b5:a4:ba:b4:67:e9:a0:e6:32:aa:6b:5e:ea:a7:29:
                    06:62:f9:f2:12:f7:9a:3a:ef:8e:4f:57:d0:06:bd:
                    1a:9f:a7:b7:9d:e3:5d:f9:6f:ff:ef:ef:3b:1d:e0:
                    c6:ed:6f:96:06:de:c8:55:8f:04:66:1e:19:9a:75:
                    93:db:7a:c4:92:e2:b5:9e:41:28:11:21:ad:8b:d0:
                    aa:4f:e9:7f:eb:1a:1f:8f:19:50:e1:e8:f3:04:ae:
                    2e:09:f3:ad:5a:e7:44:80:38:dc:22:64:58:f9:f3:
                    2c:2e:51:ce:15:f5:42:3e:c4:7f:cf:af:f0:64:0d:
                    73:eb:8c:7f:ad:e3:99:88:98:5e:bf:20:23:9e:fc:
                    95:c0:c5:24:4f:97:48:47:c0:26:e2:a1:c8:4e:9d:
                    17:83:63:a0:b2:7f:01:89:00:1d:43:2d:9e:ea:e9:
                    72:dd:47:c7:5c:7c:bf:44:bf:b7:d5:25:41:3b:c2:
                    55:c2:91:ae:95:6b:0b:d4:4b:60:41:0f:cf:d5:2e:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:8D:12:FF:96:6B:68:DC:56:FD:4B:BD:A8:77:A3:30:22:EF:51
            X509v3 Authority Key Identifier:
                keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:c2:3e:2f:50:a8:31:36:1b:92:f8:61:ba:fd:23:84:39:
         08:84:d8:2b:dc:42:26:a5:1c:90:d0:8e:bd:b4:f4:1b:4d:cd:
         97:ce:3c:03:56:77:7e:2a:c9:f8:75:3a:71:c4:9e:00:a7:a6:
         cc:16:60:95:a3:ab:04:f3:92:77:9d:1a:4a:cd:00:25:6b:34:
         e7:bd:ab:60:94:4b:ea:94:c7:9d:63:91:28:da:6b:94:77:04:
         5a:aa:89:40:72:2d:bc:ae:9b:ba:f7:a8:32:88:9b:46:f1:2b:
         f6:a2:13:76:90:4d:45:bc:a0:13:e5:0b:bd:91:0c:ff:55:30:
         7c:97:da:6f:2d:92:b0:9d:a7:4d:ce:6d:3a:23:59:ce:fa:00:
         fd:1d:cf:a9:f0:21:7e:06:b7:95:f2:af:11:41:40:14:27:e2:
         5f:a8:f5:c8:4e:6f:91:4f:58:f8:40:89:cc:31:d2:0b:73:f4:
         cd:c8:ad:1d:d3:83:f9:ab:16:65:a1:92:79:a1:43:f8:07:bf:
         f3:5f:80:06:94:3c:f8:77:f1:ef:5d:41:4b:a4:ae:60:81:90:
         30:ce:7c:19:af:53:2c:db:73:22:bf:8a:6e:6a:93:99:e3:d2:
         58:29:1c:ca:01:8d:cf:c7:c8:55:5b:46:ba:ef:1f:b2:ed:54:
         3c:00:9f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRjK01blNqkR/yLpyKVyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjY4YjUyOTM5MzAxOGQ0YmM5ZmM1NDA3MzAzMGEwM2Q5
Mjk3MjEwHhcNMjQwNjE1MTkwMDU4WhcNMjQwNjE2MTkwMDU4WjAzMTEwLwYDVQQD
EygwMzY1OGQxMmZmOTY2YjY4ZGM1NmZkNGJiZGE4NzdhMzMwMjJlZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo+DSyLs/FpKx7ONXC7lImkiRA1X
0HkjtC1tx/CN6OR/teWNNEFAuNvgzBMxkLG6WSMU+RrWjKhLisy1pLq0Z+mg5jKq
a17qpykGYvnyEveaOu+OT1fQBr0an6e3neNd+W//7+87HeDG7W+WBt7IVY8EZh4Z
mnWT23rEkuK1nkEoESGti9CqT+l/6xofjxlQ4ejzBK4uCfOtWudEgDjcImRY+fMs
LlHOFfVCPsR/z6/wZA1z64x/reOZiJhevyAjnvyVwMUkT5dIR8Am4qHITp0Xg2Og
sn8BiQAdQy2e6uly3UfHXHy/RL+31SVBO8JVwpGulWsL1EtgQQ/P1S71twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANljRL/lmto3Fb9S72od6MwIu9RMB8GA1UdIwQY
MBaAFMsmi1KTkwGNS8n8VAcwMKA9kpchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYt
ZjI3MDA4NjRjMTg3LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYtZjI3MDA4NjRjMTg3
LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGvCPi9Q
qDE2G5L4Ybr9I4Q5CITYK9xCJqUckNCOvbT0G03Nl848A1Z3firJ+HU6ccSeAKem
zBZglaOrBPOSd50aSs0AJWs0572rYJRL6pTHnWORKNprlHcEWqqJQHItvK6buveo
MoibRvEr9qITdpBNRbygE+ULvZEM/1UwfJfaby2SsJ2nTc5tOiNZzvoA/R3PqfAh
fga3lfKvEUFAFCfiX6j1yE5vkU9Y+ECJzDHSC3P0zcitHdOD+asWZaGSeaFD+Ae/
81+ABpQ8+Hfx711BS6SuYIGQMM58Ga9TLNtzIr+KbmqTmePSWCkcygGNz8fIVVtG
uu8fsu1UPACfqg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:37:46 2024 by rpki-client on console-fra.rpki-client.org