Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          k4M0KKx2WvyqZS2fCMgbdLblQyi+dUdnSDpSquafp+I=
Subject key identifier:   1F:91:94:43:38:F0:BE:19:F6:16:9E:F7:F9:9E:49:57:09:7A:C5:F8
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       01903705A45769B048E00E17340B0A1AE9A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          11E2
Signing time:             Thu 20 Jun 2024 19:00:34 +0000
Manifest this update:     Thu 20 Jun 2024 19:00:34 +0000
Manifest next update:     Fri 21 Jun 2024 19:00:34 +0000
Files and hashes:         1: 1-6pAoK30q_BK5QxLLYcZy-2mzF4.roa (hash: w+ElshojtUKaJ/W6zm0By8yThd8F7ilZlbYxyWsuzt0=)
                          2: LDTaeJbQpJUwuNZLODwg-VIF4S8.roa (hash: 2fPn+YeLLs5OBIHHpMfc7pk16u1qIVvznkkfqHdNzLA=)
                          3: PJ8LbQ1PfHqEJdghLKapc7eVjB8.roa (hash: JF2IoKgKvas+BaecaE3HeKNUDvzAdviT1Uv0x/N/TcI=)
                          4: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: 1ncKRUh+KWMbGucGLJ08babZWZIfyrigmptLO0eLQdo=)
                          5: fpNnp2ZtGkveXVBWn2iFJHXX5Ck.roa (hash: obKil96p4t1rjLTXNHXF3OHf5k3sJOpZnAW8BlUpgEA=)
                          6: jOC5aLG5L1E_SCRoUhewjhYB7vE.roa (hash: j/XjDcqCUAnOM+mwHe77cIlVzx/ZGIGVWrtzojJpEjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:05:a4:57:69:b0:48:e0:0e:17:34:0b:0a:1a:e9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Jun 20 19:00:34 2024 GMT
            Not After : Jun 21 19:00:34 2024 GMT
        Subject: CN=1f91944338f0be19f6169ef7f99e4957097ac5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:ce:36:69:01:e0:81:d3:d6:2d:4d:8a:fd:
                    c5:63:2f:59:7a:5b:82:f9:19:6a:cc:7a:48:a7:c9:
                    08:99:c6:c8:e7:a6:79:91:c9:02:3d:64:38:2c:48:
                    fd:ed:08:e8:91:6d:ab:3a:f7:b9:47:9a:a0:a1:a7:
                    de:eb:24:6a:fc:7b:8a:81:31:6a:30:61:43:b9:ba:
                    f8:a8:64:c8:8a:c5:0f:f7:80:49:b1:1c:ad:51:58:
                    ae:e6:de:c2:cf:f1:30:8f:e1:a4:b2:1c:80:18:88:
                    88:35:58:43:36:c9:4f:d5:94:71:1f:c8:12:e5:f5:
                    f0:ed:0d:de:91:a1:7d:8d:c9:97:04:ea:5e:60:b6:
                    41:76:46:00:c7:f6:71:19:01:1b:26:8b:f0:19:d5:
                    62:44:79:43:b0:c6:61:2e:e9:e8:43:ff:2f:bf:86:
                    e2:1e:8c:32:ab:f9:4e:94:2d:82:1f:f3:27:29:cb:
                    59:67:53:c0:f7:96:34:97:c3:23:29:81:d7:1b:1c:
                    18:19:31:69:02:f8:b4:9c:89:bb:ac:8c:b0:86:02:
                    18:24:be:a9:56:66:4e:d5:ee:73:aa:57:aa:ff:fa:
                    45:d6:6a:dd:1e:34:50:a4:13:62:88:cb:22:6d:28:
                    00:b7:c3:b0:47:da:1f:65:de:bd:e6:59:d5:19:13:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:91:94:43:38:F0:BE:19:F6:16:9E:F7:F9:9E:49:57:09:7A:C5:F8
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:88:d4:e9:16:e4:d0:45:b4:94:08:33:7a:50:76:0a:b1:
         9e:aa:52:b5:aa:cd:07:55:95:43:34:78:e7:54:00:f6:f4:be:
         50:4a:b3:a8:83:fd:d9:28:99:f0:6e:9a:74:44:4f:e7:be:4e:
         0a:48:95:f3:8b:84:e2:a5:a7:4a:71:8a:d8:5f:64:39:57:d8:
         a8:bc:8b:66:fc:e2:cf:59:cf:71:26:6a:f9:3e:8d:74:b2:70:
         43:12:97:fc:e1:97:f0:97:6c:2e:50:e9:9e:06:20:48:8f:98:
         f8:5b:22:9f:f2:9f:b1:58:5e:2c:12:7f:4c:ec:b5:f6:f2:f0:
         83:58:35:cd:17:98:9d:b8:b5:86:50:bd:e4:c6:fa:96:20:08:
         38:0f:59:d2:c8:78:00:71:0f:f6:ae:b8:82:86:19:ff:7c:7d:
         46:7a:d6:00:3d:1e:31:2f:93:3a:1d:1a:e5:98:fb:8a:0a:76:
         24:b0:29:f9:7f:3f:ed:af:c5:8f:07:69:0e:fa:a0:43:a5:c3:
         41:a1:48:70:d2:59:fc:9a:e8:56:a4:ec:cc:19:28:74:f5:60:
         86:f3:4d:20:e5:bf:7a:27:6f:3c:e5:75:9c:f0:41:9e:19:d9:
         e2:75:9e:7a:4a:b1:cc:dd:69:5f:5f:00:62:a1:56:ae:b7:50:
         e0:c7:5a:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA3BaRXabBI4A4XNAsKGumkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi
MWE4NzcwHhcNMjQwNjIwMTkwMDM0WhcNMjQwNjIxMTkwMDM0WjAzMTEwLwYDVQQD
EygxZjkxOTQ0MzM4ZjBiZTE5ZjYxNjllZjdmOTllNDk1NzA5N2FjNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSfONmkB4IHT1i1Niv3FYy9ZeluC
+RlqzHpIp8kImcbI56Z5kckCPWQ4LEj97QjokW2rOve5R5qgoafe6yRq/HuKgTFq
MGFDubr4qGTIisUP94BJsRytUViu5t7Cz/Ewj+GkshyAGIiINVhDNslP1ZRxH8gS
5fXw7Q3ekaF9jcmXBOpeYLZBdkYAx/ZxGQEbJovwGdViRHlDsMZhLunoQ/8vv4bi
Howyq/lOlC2CH/MnKctZZ1PA95Y0l8MjKYHXGxwYGTFpAvi0nIm7rIywhgIYJL6p
VmZO1e5zqleq//pF1mrdHjRQpBNiiMsibSgAt8OwR9ofZd695lnVGRN5iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+RlEM48L4Z9hae9/meSVcJesX4MB8GA1UdIwQY
MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt
ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw
LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM62I1OkW
5NBFtJQIM3pQdgqxnqpStarNB1WVQzR451QA9vS+UEqzqIP92SiZ8G6adERP575O
CkiV84uE4qWnSnGK2F9kOVfYqLyLZvziz1nPcSZq+T6NdLJwQxKX/OGX8JdsLlDp
ngYgSI+Y+Fsin/KfsVheLBJ/TOy19vLwg1g1zReYnbi1hlC95Mb6liAIOA9Z0sh4
AHEP9q64goYZ/3x9RnrWAD0eMS+TOh0a5Zj7igp2JLAp+X8/7a/FjwdpDvqgQ6XD
QaFIcNJZ/JroVqTszBkodPVghvNNIOW/eidvPOV1nPBBnhnZ4nWeekqxzN1pX18A
YqFWrrdQ4MdaNg==
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:46:54 2024 by rpki-client on console-ams.rpki-client.org