Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File:                     YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier:          eEfj8nEH6GIddhQzS8mrIPclICsKy4JR6d1S/LlWCfU=
Subject key identifier:   54:35:7E:46:60:8F:4A:D4:B7:15:DD:AA:91:53:CC:B4:0A:A1:29:9A
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer:       /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial:       019352AD4C28C522429DC11288BF5A3AE9DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 07:01:49 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:49 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:49 +0000
Files and hashes:         1: BDE_Y1J54qZ3PY51ktBQD0BFzd8.roa (hash: 2kw9S/uz7Jh5xhJ0qiUnrV7tvxNd0zP1OifQLFIKryI=)
                          2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: /1p6N2I/LLqbIOIO95Fv5h9lbgRLV9M1EEhmJa3K80c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:4c:28:c5:22:42:9d:c1:12:88:bf:5a:3a:e9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
        Validity
            Not Before: Nov 22 07:01:49 2024 GMT
            Not After : Nov 23 07:01:49 2024 GMT
        Subject: CN=54357e46608f4ad4b715ddaa9153ccb40aa1299a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:7e:ac:5b:c9:83:ae:6b:89:33:d5:c1:f4:
                    84:4d:07:c6:84:99:16:0b:5b:f6:34:b5:1b:7f:3b:
                    05:2e:c8:7c:cb:35:fb:b3:af:06:11:56:a5:4d:42:
                    aa:b8:53:a6:95:3f:17:26:07:f4:17:4c:60:d0:4b:
                    14:6b:7f:cb:ab:aa:f5:58:a4:ac:6c:dc:bd:aa:12:
                    d6:ff:7c:d4:04:49:8e:06:b4:bd:0e:cb:58:29:fc:
                    e5:6d:f6:5d:a9:ae:bb:ea:bf:01:bf:13:d8:24:1e:
                    12:91:dc:69:d1:4b:5a:d9:2d:3b:1b:da:07:fd:cf:
                    ff:f0:d2:ee:8c:ac:fa:88:a0:91:c7:2b:d4:f0:bc:
                    d4:e8:bc:40:85:75:ea:01:a2:3e:f7:f4:66:e5:34:
                    e4:be:b4:d3:1d:53:32:91:ca:de:22:3d:c2:76:64:
                    f5:8b:f8:28:5e:0c:65:53:03:f1:da:81:0c:67:bf:
                    d2:9b:35:5e:0e:b0:1c:ce:76:0e:54:dc:b8:8b:f3:
                    7f:35:16:6f:24:b4:20:d8:1d:f0:a5:d3:d5:b4:17:
                    56:2a:07:45:86:13:b9:35:6a:7f:11:7a:10:af:9a:
                    f7:15:ab:c0:67:e1:f3:4a:56:8f:21:9d:e7:80:a3:
                    6e:5b:db:ae:21:d4:13:fc:ca:55:6c:be:f3:f9:36:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:7E:46:60:8F:4A:D4:B7:15:DD:AA:91:53:CC:B4:0A:A1:29:9A
            X509v3 Authority Key Identifier:
                keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:25:00:0b:5d:e3:4b:9b:30:4a:1d:0a:56:82:b3:16:62:c6:
         a8:c8:66:a4:af:10:bf:c3:cb:c2:3f:dd:79:54:10:f7:4b:3b:
         0e:28:d6:d9:52:34:63:41:f6:d4:53:a4:c5:0a:0a:0b:35:2c:
         a3:23:b4:76:47:0e:42:61:f8:83:9c:39:97:1a:a5:05:dc:f2:
         d4:94:61:82:da:ff:1b:0b:92:31:4d:f2:ff:91:2c:11:7e:18:
         20:80:ad:4f:0f:29:38:69:61:46:49:9d:81:c7:f5:da:b4:f6:
         c3:24:0a:ce:ee:f2:67:4e:96:e7:06:bd:82:e0:ef:da:59:93:
         9a:58:66:43:3a:16:64:d8:c2:1d:59:fe:e8:26:75:6c:89:b2:
         b7:ce:45:83:9f:d3:14:1d:ec:55:35:a2:85:ae:d3:fd:7f:09:
         11:bb:8a:1e:01:43:d6:10:8b:df:2c:c9:23:44:28:b5:6a:8e:
         06:10:69:14:57:c6:72:83:6c:72:56:e5:b3:c4:67:13:a8:31:
         57:79:9e:48:64:55:46:b0:4f:3c:b1:71:14:d6:c9:3e:4c:9b:
         4d:cd:b9:e4:ee:13:d9:4c:14:b2:e6:ee:33:1a:89:94:ba:12:
         99:0a:58:ac:42:34:5d:6c:23:50:05:54:89:9d:9b:4e:ed:a9:
         7d:e1:d9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrUwoxSJCncESiL9aOuneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0
NGQ3OWEwHhcNMjQxMTIyMDcwMTQ5WhcNMjQxMTIzMDcwMTQ5WjAzMTEwLwYDVQQD
Eyg1NDM1N2U0NjYwOGY0YWQ0YjcxNWRkYWE5MTUzY2NiNDBhYTEyOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLl+rFvJg65riTPVwfSETQfGhJkW
C1v2NLUbfzsFLsh8yzX7s68GEValTUKquFOmlT8XJgf0F0xg0EsUa3/Lq6r1WKSs
bNy9qhLW/3zUBEmOBrS9DstYKfzlbfZdqa676r8BvxPYJB4Skdxp0Uta2S07G9oH
/c//8NLujKz6iKCRxyvU8LzU6LxAhXXqAaI+9/Rm5TTkvrTTHVMykcreIj3CdmT1
i/goXgxlUwPx2oEMZ7/SmzVeDrAcznYOVNy4i/N/NRZvJLQg2B3wpdPVtBdWKgdF
hhO5NWp/EXoQr5r3FavAZ+HzSlaPIZ3ngKNuW9uuIdQT/MpVbL7z+TbG2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ1fkZgj0rUtxXdqpFTzLQKoSmaMB8GA1UdIwQY
MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt
YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk
LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyUAC13j
S5swSh0KVoKzFmLGqMhmpK8Qv8PLwj/deVQQ90s7DijW2VI0Y0H21FOkxQoKCzUs
oyO0dkcOQmH4g5w5lxqlBdzy1JRhgtr/GwuSMU3y/5EsEX4YIICtTw8pOGlhRkmd
gcf12rT2wyQKzu7yZ06W5wa9guDv2lmTmlhmQzoWZNjCHVn+6CZ1bImyt85Fg5/T
FB3sVTWiha7T/X8JEbuKHgFD1hCL3yzJI0QotWqOBhBpFFfGcoNsclbls8RnE6gx
V3meSGRVRrBPPLFxFNbJPkybTc255O4T2UwUsubuMxqJlLoSmQpYrEI0XWwjUAVU
iZ2bTu2pfeHZNg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:18 2024 by rpki-client on console-ams.rpki-client.org