Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File:                     RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier:          Ce5DWKSklEICc2zu6XJ6KCp44ubq1v+waihHc/FA37Q=
Subject key identifier:   4F:03:B8:C6:E8:6C:C7:15:EF:C4:8F:27:0C:2F:F5:FB:1D:21:4B:E3
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer:       /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial:       018F8823FD3732595CFD74E187E41B528605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number:          03A0
Signing time:             Fri 17 May 2024 20:00:10 +0000
Manifest this update:     Fri 17 May 2024 20:00:10 +0000
Manifest next update:     Sat 18 May 2024 20:00:10 +0000
Files and hashes:         1: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: nbheNjtLgGSUQ5FDUPIqEfMoN8OR+DVa+LY+QW9SQFk=)
                          2: xHS7CIl-tV4ZtB1NDtzIs-bmxhI.roa (hash: ZQRf0rvS23J/Ou6PR7e9zLVCqg2raqCC4fcyfjlN8k0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:fd:37:32:59:5c:fd:74:e1:87:e4:1b:52:86:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
        Validity
            Not Before: May 17 20:00:10 2024 GMT
            Not After : May 18 20:00:10 2024 GMT
        Subject: CN=4f03b8c6e86cc715efc48f270c2ff5fb1d214be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:6c:b8:6c:61:1b:87:37:9e:be:29:49:b2:
                    3d:b3:69:51:67:77:5d:c9:fa:cf:66:84:51:a4:41:
                    fb:11:7b:41:af:2d:75:c0:13:2c:12:a6:a8:43:8d:
                    0c:60:ff:cf:78:3c:9e:0d:be:46:27:96:67:5e:4a:
                    68:59:f3:58:20:2b:c9:27:e4:75:de:99:ff:30:9c:
                    1e:49:6c:96:26:29:9f:00:34:f9:6f:f7:c4:9d:be:
                    e5:f6:04:ba:ff:dc:64:db:2b:83:fe:95:2e:6a:e1:
                    8e:22:b7:85:18:da:6d:a0:c4:74:0a:38:92:f5:83:
                    fc:66:03:72:3a:a9:f6:36:80:4c:a0:48:d6:c4:b4:
                    8f:a7:60:d9:15:cf:4f:59:5a:b8:7d:0a:88:93:c9:
                    5a:ab:2d:44:ff:69:e2:2d:a6:d6:a6:83:b2:bc:c3:
                    15:38:c8:03:5c:25:b7:78:3d:d3:01:f6:9d:2d:c9:
                    ae:66:fb:9a:3b:16:5e:b7:e0:30:e4:5d:48:d4:65:
                    3a:05:c5:fb:6b:3b:22:3e:fb:36:42:6c:51:9a:a3:
                    ff:c9:b5:88:76:2d:55:78:05:07:16:49:33:0f:cf:
                    09:70:08:58:c9:da:78:f1:d1:db:3b:0e:6e:1f:3f:
                    ad:74:b4:a4:87:96:80:e8:1c:e3:41:ba:ba:14:02:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:03:B8:C6:E8:6C:C7:15:EF:C4:8F:27:0C:2F:F5:FB:1D:21:4B:E3
            X509v3 Authority Key Identifier:
                keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:62:a5:dd:8d:ec:7e:1c:ac:5c:94:ad:de:85:a8:b9:01:
         4b:ca:0b:08:98:d7:57:27:0f:ec:2e:cc:34:3a:01:f7:06:21:
         48:f1:88:28:3c:e5:a0:0a:7f:53:bd:29:33:26:0e:5b:f9:cb:
         b1:5a:3e:cd:26:f6:4a:f5:9d:2d:6a:0c:c7:a9:d2:3c:13:ca:
         f2:5d:00:74:71:61:04:60:a6:54:bd:0e:94:ef:de:be:17:46:
         6a:0b:de:cc:1b:d4:4a:49:ff:13:c3:76:51:fe:70:b2:28:83:
         49:ca:33:9a:1c:79:5f:d3:12:46:af:66:c6:6c:e2:ba:b8:7a:
         02:51:22:e3:85:89:1c:cc:cd:94:55:72:8e:a3:4c:e3:08:b4:
         ca:bc:52:de:71:6d:46:32:f7:63:89:68:0b:96:97:ca:25:e7:
         94:6e:c1:16:c1:e7:7e:07:d7:94:d9:72:c7:c5:0d:31:c4:14:
         4a:27:32:9e:e0:87:45:3a:94:1f:f0:da:e8:fe:fc:0f:b2:28:
         91:3b:f3:0e:ba:09:6a:f1:c7:3b:f5:14:ee:58:bd:bd:87:ac:
         f1:f0:1e:90:6f:41:d2:f3:a5:90:40:a9:0f:91:05:18:60:dd:
         87:9f:85:35:05:f0:b9:42:8a:bc:b3:5a:7e:32:2f:f6:c3:bc:
         7e:19:e9:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II/03Mllc/XThh+QbUoYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MmNiMjg4MjA5OTAwZDFhZjFhOTk4YmIwMzllYzc1N2U0
OTNkZDUwHhcNMjQwNTE3MjAwMDEwWhcNMjQwNTE4MjAwMDEwWjAzMTEwLwYDVQQD
Eyg0ZjAzYjhjNmU4NmNjNzE1ZWZjNDhmMjcwYzJmZjVmYjFkMjE0YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3xsuGxhG4c3nr4pSbI9s2lRZ3dd
yfrPZoRRpEH7EXtBry11wBMsEqaoQ40MYP/PeDyeDb5GJ5ZnXkpoWfNYICvJJ+R1
3pn/MJweSWyWJimfADT5b/fEnb7l9gS6/9xk2yuD/pUuauGOIreFGNptoMR0CjiS
9YP8ZgNyOqn2NoBMoEjWxLSPp2DZFc9PWVq4fQqIk8laqy1E/2niLabWpoOyvMMV
OMgDXCW3eD3TAfadLcmuZvuaOxZet+Aw5F1I1GU6BcX7azsiPvs2QmxRmqP/ybWI
di1VeAUHFkkzD88JcAhYydp48dHbOw5uHz+tdLSkh5aA6BzjQbq6FAJ9yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8DuMbobMcV78SPJwwv9fsdIUvjMB8GA1UdIwQY
MBaAFEcssoggmQDRrxqZi7A57HV+ST3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYt
YWE5MDJkYmFlOTI4LzEvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYtYWE5MDJkYmFlOTI4
LzEvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIxipd2N
7H4crFyUrd6FqLkBS8oLCJjXVycP7C7MNDoB9wYhSPGIKDzloAp/U70pMyYOW/nL
sVo+zSb2SvWdLWoMx6nSPBPK8l0AdHFhBGCmVL0OlO/evhdGagvezBvUSkn/E8N2
Uf5wsiiDScozmhx5X9MSRq9mxmziurh6AlEi44WJHMzNlFVyjqNM4wi0yrxS3nFt
RjL3Y4loC5aXyiXnlG7BFsHnfgfXlNlyx8UNMcQUSicynuCHRTqUH/Da6P78D7Io
kTvzDroJavHHO/UU7li9vYes8fAekG9B0vOlkECpD5EFGGDdh5+FNQXwuUKKvLNa
fjIv9sO8fhnpnQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:59:27 2024 by rpki-client on console-fra.rpki-client.org