Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File:                     Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier:          1jdhqctv/DKqTwsfx3RCWX2aJx8pDRXpkxFnYBntYMM=
Subject key identifier:   79:9E:0E:0C:BA:F8:78:62:AF:84:7C:B1:FB:D0:3B:30:EE:69:0C:A5
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer:       /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial:       018F874B3A08F8095F1D9419680AD5E887C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number:          066B
Signing time:             Fri 17 May 2024 16:03:25 +0000
Manifest this update:     Fri 17 May 2024 16:03:25 +0000
Manifest next update:     Sat 18 May 2024 16:03:25 +0000
Files and hashes:         1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: Zb/nNWpyiUzgK0sMe08xti8+2Z+UYj3v/q8c3K3GJNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:3a:08:f8:09:5f:1d:94:19:68:0a:d5:e8:87:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
        Validity
            Not Before: May 17 16:03:25 2024 GMT
            Not After : May 18 16:03:25 2024 GMT
        Subject: CN=799e0e0cbaf87862af847cb1fbd03b30ee690ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:80:53:28:7b:d6:8a:d2:b9:0a:92:31:94:
                    51:fd:1f:30:c3:67:b9:91:fb:5f:a5:af:f6:53:ce:
                    bc:c6:3b:c5:83:13:8a:c2:cd:36:86:4f:9c:68:39:
                    f8:5e:4a:e2:31:06:85:b9:f9:6c:84:de:76:bc:a2:
                    84:55:eb:ff:28:08:b8:73:5d:da:6c:94:b5:72:44:
                    ab:de:e2:34:7f:9e:9c:6e:cf:bf:d8:cd:3e:39:48:
                    a4:a3:22:6c:1c:d6:38:80:d9:94:22:54:f9:4e:01:
                    f7:d3:69:ac:5a:cc:43:85:c5:74:70:5e:6a:7a:63:
                    5d:d3:dc:44:86:5d:85:22:12:66:c4:53:b1:47:8c:
                    ce:3b:1f:75:ed:3d:c5:f3:e5:ec:8b:5d:a1:78:ce:
                    aa:aa:e3:2e:7a:26:98:83:5d:1b:fa:91:16:3a:f6:
                    12:9c:2a:0c:cc:0a:e2:a5:48:76:c6:04:af:1a:a8:
                    04:81:8e:7b:ba:b1:bd:1b:31:56:31:44:30:1b:e4:
                    fe:c7:ab:f1:b2:a4:6d:bc:e6:9d:63:27:24:03:38:
                    68:6b:51:15:68:4a:43:66:b9:e8:b0:d1:c5:c0:c6:
                    02:8b:65:56:0b:af:7e:c8:85:cf:16:58:d8:51:06:
                    94:84:c6:6d:d9:0e:ac:fe:d1:10:10:a9:e4:e2:5c:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:0E:0C:BA:F8:78:62:AF:84:7C:B1:FB:D0:3B:30:EE:69:0C:A5
            X509v3 Authority Key Identifier:
                keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5d:bc:b1:0f:ff:91:05:4a:58:20:9a:29:62:e7:3a:12:07:
         19:b7:fd:ec:d2:27:7e:7d:e0:2e:8f:c6:05:85:23:86:81:f4:
         27:ec:65:01:f7:b7:04:cb:22:81:7f:d9:6e:5f:45:e5:e9:53:
         48:41:fd:d0:a4:af:c9:07:da:ee:81:48:2f:b2:8f:93:6f:e4:
         cd:4f:29:ce:bb:76:94:9d:54:07:36:40:06:0f:53:f2:75:89:
         6e:8f:a4:1f:eb:b5:2c:c8:8c:32:bc:56:c1:08:4f:e9:b8:ce:
         16:47:a8:64:31:5b:85:8b:dd:9f:27:dc:ef:a1:9d:a9:53:8b:
         d7:e8:6c:ba:78:48:23:9a:0b:d6:07:b5:11:5b:7c:6e:78:a0:
         2f:5c:fb:bc:09:2b:20:2a:e3:73:f9:15:81:ce:63:5f:78:ef:
         20:31:0d:b7:62:c4:ee:e5:06:3e:82:69:62:8f:6c:14:3d:e2:
         fe:6b:e9:6c:8b:07:7e:be:7c:83:2b:53:99:b2:51:cd:a3:64:
         50:6e:ac:ee:78:8b:d8:79:e5:5f:4f:d1:e9:b4:e2:19:29:98:
         55:82:1c:88:05:f5:d1:c3:73:97:d4:9b:52:82:2f:f2:6e:f9:
         d5:cc:7c:3b:2d:32:a5:e4:da:f0:d1:d7:9b:1e:44:79:a9:05:
         07:2d:f1:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSzoI+AlfHZQZaArV6IfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGUwZmQxODgzMjQ3NTY5NTk5NWY0NTA3ZjhmY2ZkYWYx
YzFjZTUwHhcNMjQwNTE3MTYwMzI1WhcNMjQwNTE4MTYwMzI1WjAzMTEwLwYDVQQD
Eyg3OTllMGUwY2JhZjg3ODYyYWY4NDdjYjFmYmQwM2IzMGVlNjkwY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+OAUyh71orSuQqSMZRR/R8ww2e5
kftfpa/2U868xjvFgxOKws02hk+caDn4XkriMQaFuflshN52vKKEVev/KAi4c13a
bJS1ckSr3uI0f56cbs+/2M0+OUikoyJsHNY4gNmUIlT5TgH302msWsxDhcV0cF5q
emNd09xEhl2FIhJmxFOxR4zOOx917T3F8+Xsi12heM6qquMueiaYg10b+pEWOvYS
nCoMzAripUh2xgSvGqgEgY57urG9GzFWMUQwG+T+x6vxsqRtvOadYyckAzhoa1EV
aEpDZrnosNHFwMYCi2VWC69+yIXPFljYUQaUhMZt2Q6s/tEQEKnk4ly77wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmeDgy6+Hhir4R8sfvQOzDuaQylMB8GA1UdIwQY
MBaAFGOOD9GIMkdWlZlfRQf4/P2vHBzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUt
YjRlMjVkNDBhMzgzLzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUtYjRlMjVkNDBhMzgz
LzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF28sQ//
kQVKWCCaKWLnOhIHGbf97NInfn3gLo/GBYUjhoH0J+xlAfe3BMsigX/Zbl9F5elT
SEH90KSvyQfa7oFIL7KPk2/kzU8pzrt2lJ1UBzZABg9T8nWJbo+kH+u1LMiMMrxW
wQhP6bjOFkeoZDFbhYvdnyfc76GdqVOL1+hsunhII5oL1ge1EVt8bnigL1z7vAkr
ICrjc/kVgc5jX3jvIDENt2LE7uUGPoJpYo9sFD3i/mvpbIsHfr58gytTmbJRzaNk
UG6s7niL2HnlX0/R6bTiGSmYVYIciAX10cNzl9SbUoIv8m751cx8Oy0ypeTa8NHX
mx5EeakFBy3xPw==
-----END CERTIFICATE-----
Generated at Fri May 17 17:51:00 2024 by rpki-client on console-ams.rpki-client.org