Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File:                     YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier:          KHKQ1gfQEFEKlmPXOuykm1n8MFEZs5DHRdAk6E0OEDA=
Subject key identifier:   DC:36:ED:AF:2D:DC:41:CA:03:60:93:5D:93:F5:4F:E0:90:D3:7F:04
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer:       /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial:       01901DEC2315BE467BCFD5C5C451798CDBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number:          0EEB
Signing time:             Sat 15 Jun 2024 22:02:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:13 +0000
Files and hashes:         1: AN14bwW4EKx6ISjDFn7qyyP0Uu8.roa (hash: q0f0gcyicZQh4z9qrat8Fnsx24KfAR94XCmUgaUHp/Y=)
                          2: BNPtwDzN8CZ02dzXWpnX3apU4kw.roa (hash: JoW6iVNWt3BvLWl3ZNQfEFrcCthc4phpyvzgmuZEiXY=)
                          3: VT9Gef8afn3SGL8g2I5hSn_2dIo.roa (hash: pcpJ6UAJ7/dp+eBBZhfu10+txnE/b/FsAvrBGM3NfdQ=)
                          4: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: +Nf0Gs2mQI9IBwAV2+9r+QXUaK0h0r0q7po2z1Tz2uU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:23:15:be:46:7b:cf:d5:c5:c4:51:79:8c:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
        Validity
            Not Before: Jun 15 22:02:13 2024 GMT
            Not After : Jun 16 22:02:13 2024 GMT
        Subject: CN=dc36edaf2ddc41ca0360935d93f54fe090d37f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:4b:a3:f0:73:53:68:b6:82:b1:68:31:db:
                    5a:6c:e7:ac:03:4e:0a:b5:5c:b8:46:62:67:35:ac:
                    58:c9:57:c7:af:95:7c:d9:7a:57:6e:e5:3b:81:9a:
                    fe:d8:f5:3e:df:8e:27:14:de:b6:52:37:71:d4:7e:
                    3d:4b:65:05:88:b4:e8:9a:1c:7c:67:84:b5:2f:48:
                    3d:04:8b:1e:4c:62:9f:29:bc:ef:4d:ac:68:31:ab:
                    88:ad:51:49:9b:82:f4:2f:1c:c7:91:a5:ea:7c:c1:
                    dd:6f:85:2e:9f:f0:14:84:58:25:a4:5d:6e:ad:a3:
                    b3:c6:da:6e:bb:87:b2:ab:1c:1f:02:48:4f:91:4d:
                    5a:12:f8:36:08:ff:54:07:d6:01:3d:6b:6e:af:99:
                    ce:78:7e:8d:65:7d:19:42:0a:65:6c:00:ab:a5:58:
                    95:ce:5e:ef:a5:d8:ba:95:ad:29:f8:43:40:10:c8:
                    06:35:c8:68:b5:47:e2:9e:4e:34:aa:fd:9f:b4:36:
                    50:80:33:4c:0d:b0:51:43:66:3e:46:42:cb:25:fe:
                    4c:ce:a7:db:64:00:ed:4e:f2:b7:d7:b6:a3:be:64:
                    de:69:49:05:17:47:dc:88:95:31:14:f4:60:28:2f:
                    66:57:51:f6:83:77:fa:0c:ee:44:5e:0e:26:5c:ca:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:ED:AF:2D:DC:41:CA:03:60:93:5D:93:F5:4F:E0:90:D3:7F:04
            X509v3 Authority Key Identifier:
                keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:04:4f:43:ff:b0:b1:66:87:a0:01:0d:03:e9:be:d2:ed:7c:
         31:ff:c8:9f:95:3d:4f:64:e8:67:5e:f6:84:a6:84:3d:95:61:
         44:de:51:d6:75:47:e6:42:8c:ad:d8:7f:5f:12:65:79:1d:e5:
         82:52:a7:ae:5f:fb:b5:6a:76:be:ad:1b:64:34:71:a4:34:ea:
         45:c5:1c:19:5a:ee:89:01:91:ed:2f:77:3e:00:0d:12:6b:ea:
         47:e8:fd:a3:62:1b:d7:6e:47:af:17:af:f8:fd:3b:8c:4b:5d:
         bf:bc:74:36:69:85:d8:6d:55:53:71:d5:7c:54:50:44:26:83:
         91:a0:b1:83:00:99:ff:97:0d:33:e7:58:12:7a:13:a6:db:54:
         c0:9c:b6:17:8b:20:2c:fd:d1:38:7c:0e:8d:fe:86:84:80:0a:
         b8:85:d8:62:e3:98:9a:90:58:94:b7:93:02:eb:86:c7:81:51:
         75:f7:1f:b3:85:c4:f9:db:c1:99:12:a4:7d:f5:a7:b0:00:a0:
         9a:6d:7b:ed:ff:46:80:7b:13:83:31:54:3e:51:0a:f8:1b:c7:
         c5:1a:21:75:a0:51:af:9f:fb:98:d1:e5:f2:38:a1:e1:07:d5:
         6d:89:b5:ff:04:38:22:b3:99:47:9c:31:be:99:d5:14:ca:10:
         83:f5:e2:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7CMVvkZ7z9XFxFF5jNvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjQwNjE1MjIwMjEzWhcNMjQwNjE2MjIwMjEzWjAzMTEwLwYDVQQD
EyhkYzM2ZWRhZjJkZGM0MWNhMDM2MDkzNWQ5M2Y1NGZlMDkwZDM3ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWlLo/BzU2i2grFoMdtabOesA04K
tVy4RmJnNaxYyVfHr5V82XpXbuU7gZr+2PU+344nFN62Ujdx1H49S2UFiLTomhx8
Z4S1L0g9BIseTGKfKbzvTaxoMauIrVFJm4L0LxzHkaXqfMHdb4Uun/AUhFglpF1u
raOzxtpuu4eyqxwfAkhPkU1aEvg2CP9UB9YBPWtur5nOeH6NZX0ZQgplbACrpViV
zl7vpdi6la0p+ENAEMgGNchotUfink40qv2ftDZQgDNMDbBRQ2Y+RkLLJf5Mzqfb
ZADtTvK317ajvmTeaUkFF0fciJUxFPRgKC9mV1H2g3f6DO5EXg4mXMrctwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw27a8t3EHKA2CTXZP1T+CQ038EMB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQRPQ/+w
sWaHoAENA+m+0u18Mf/In5U9T2ToZ172hKaEPZVhRN5R1nVH5kKMrdh/XxJleR3l
glKnrl/7tWp2vq0bZDRxpDTqRcUcGVruiQGR7S93PgANEmvqR+j9o2Ib125Hrxev
+P07jEtdv7x0NmmF2G1VU3HVfFRQRCaDkaCxgwCZ/5cNM+dYEnoTpttUwJy2F4sg
LP3ROHwOjf6GhIAKuIXYYuOYmpBYlLeTAuuGx4FRdfcfs4XE+dvBmRKkffWnsACg
mm177f9GgHsTgzFUPlEK+BvHxRohdaBRr5/7mNHl8jih4QfVbYm1/wQ4IrOZR5wx
vpnVFMoQg/XiYA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:07:48 2024 by rpki-client on console-ams.rpki-client.org