Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File:                     ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier:          rUZfvYMu06hSbx8yLGkK9gzR2MXNGZWr8sTj8TvxF3A=
Subject key identifier:   8E:C6:A9:E7:41:34:97:BA:F7:2E:E0:2C:86:9C:7D:9A:59:4B:6E:FC
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer:       /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial:       018F874969C2811547E5113870DBF4F3A09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:26 +0000
Manifest this update:     Fri 17 May 2024 16:01:26 +0000
Manifest next update:     Sat 18 May 2024 16:01:26 +0000
Files and hashes:         1: Ltsd_kTqhgloHRoy4QCIrAeYGxo.roa (hash: SvjCg8cBoBsw4Y3TYlkPYJ822wzTtiZiAuRk78GOquk=)
                          2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: 92jByfBeJpe3dHf7+5MdRic4xg5MB8Fz3Zek8tr5jOE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:69:c2:81:15:47:e5:11:38:70:db:f4:f3:a0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
        Validity
            Not Before: May 17 16:01:26 2024 GMT
            Not After : May 18 16:01:26 2024 GMT
        Subject: CN=8ec6a9e7413497baf72ee02c869c7d9a594b6efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:f5:6e:f1:74:87:05:33:3e:78:53:51:46:
                    e3:3e:92:62:70:21:46:81:de:c8:74:40:c5:9d:19:
                    9f:99:55:88:ac:6c:65:5e:00:ca:6a:86:73:d7:1d:
                    a7:40:1d:14:71:49:ee:0d:bf:cc:a1:2d:48:da:11:
                    67:33:27:d8:4b:eb:bb:42:b7:a4:a1:59:2d:44:0f:
                    fc:10:11:d1:5c:b0:bd:3d:8d:69:b7:f1:4f:be:af:
                    c4:85:7a:71:31:29:6e:33:9a:dc:af:32:3e:5f:d5:
                    8f:42:0c:9c:de:45:6d:ea:86:55:17:24:fc:ea:13:
                    f9:0a:fe:2d:33:24:51:9a:8b:47:58:bb:1e:5d:ae:
                    dd:31:58:d0:04:65:cb:66:cc:fa:a9:1a:f1:b5:cd:
                    09:34:a8:99:00:dc:3d:10:1b:1d:31:79:b5:45:09:
                    43:d6:73:12:4c:4b:14:2c:06:1b:35:c2:9b:0f:82:
                    f2:2c:b7:c6:d3:d9:6a:14:26:ce:25:56:68:37:c6:
                    78:36:6d:74:0f:79:1a:96:e1:65:97:c5:83:21:79:
                    a7:41:84:8e:f6:30:0b:2f:4f:dc:bc:7f:b6:af:05:
                    1f:37:39:17:61:a9:10:15:3d:be:8b:72:8b:c3:b4:
                    b4:bc:06:09:2f:2a:05:1c:d7:ea:da:87:2a:de:3e:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:A9:E7:41:34:97:BA:F7:2E:E0:2C:86:9C:7D:9A:59:4B:6E:FC
            X509v3 Authority Key Identifier:
                keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:78:04:a6:53:28:ac:ee:70:71:83:79:35:64:ba:37:f1:d3:
         72:28:03:b4:de:89:06:f2:db:43:26:4f:82:4a:f3:32:07:c2:
         4b:40:b2:a8:a1:52:59:0d:98:e2:01:48:7a:f7:0d:84:76:13:
         47:41:2c:5b:65:15:bf:9d:c0:ce:42:c9:64:c2:91:29:9f:4d:
         0c:84:df:71:95:a5:72:f2:47:9e:b8:a5:4c:07:db:df:bd:18:
         c6:67:5b:f4:0b:ed:bf:78:07:11:87:27:b8:22:04:53:84:a0:
         76:8e:f3:22:ea:1b:bf:e7:e8:b8:2b:bb:1d:cc:ad:ca:24:f9:
         2c:bf:bf:1e:f0:10:1b:61:97:35:93:1f:5f:3e:e6:a9:fa:d6:
         a8:60:2e:10:70:4d:6c:2d:96:a8:ba:43:4e:8d:8e:13:72:e6:
         90:8c:f9:57:3c:3e:7b:d6:1d:1a:32:0c:04:62:99:2a:52:cd:
         c9:a1:6e:af:fc:c6:66:1e:51:1b:e8:18:dd:2d:44:d0:d4:a9:
         09:05:b5:b6:1b:e3:2e:e2:a7:88:44:28:b7:67:40:8b:eb:68:
         91:86:bf:00:b8:92:fe:85:b9:be:82:fa:c3:5b:25:de:34:2a:
         46:2a:08:21:a6:b9:4e:08:da:69:46:0c:60:68:21:79:60:3d:
         72:aa:f7:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSWnCgRVH5RE4cNv086CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjRkYWJkOWJjNDY0ODVmNmE5MTYzNmVkZTc1M2RhMzhj
OGYzNjQwHhcNMjQwNTE3MTYwMTI2WhcNMjQwNTE4MTYwMTI2WjAzMTEwLwYDVQQD
Eyg4ZWM2YTllNzQxMzQ5N2JhZjcyZWUwMmM4NjljN2Q5YTU5NGI2ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqn1bvF0hwUzPnhTUUbjPpJicCFG
gd7IdEDFnRmfmVWIrGxlXgDKaoZz1x2nQB0UcUnuDb/MoS1I2hFnMyfYS+u7Qrek
oVktRA/8EBHRXLC9PY1pt/FPvq/EhXpxMSluM5rcrzI+X9WPQgyc3kVt6oZVFyT8
6hP5Cv4tMyRRmotHWLseXa7dMVjQBGXLZsz6qRrxtc0JNKiZANw9EBsdMXm1RQlD
1nMSTEsULAYbNcKbD4LyLLfG09lqFCbOJVZoN8Z4Nm10D3kaluFll8WDIXmnQYSO
9jALL0/cvH+2rwUfNzkXYakQFT2+i3KLw7S0vAYJLyoFHNfq2ocq3j56awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7GqedBNJe69y7gLIacfZpZS278MB8GA1UdIwQY
MBaAFMpk2r2bxGSF9qkWNu3nU9o4yPNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUt
NTAyOGMyNTliMjY3LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUtNTAyOGMyNTliMjY3
LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHgEplMo
rO5wcYN5NWS6N/HTcigDtN6JBvLbQyZPgkrzMgfCS0CyqKFSWQ2Y4gFIevcNhHYT
R0EsW2UVv53AzkLJZMKRKZ9NDITfcZWlcvJHnrilTAfb370Yxmdb9Avtv3gHEYcn
uCIEU4Sgdo7zIuobv+fouCu7HcytyiT5LL+/HvAQG2GXNZMfXz7mqfrWqGAuEHBN
bC2WqLpDTo2OE3LmkIz5Vzw+e9YdGjIMBGKZKlLNyaFur/zGZh5RG+gY3S1E0NSp
CQW1thvjLuKniEQot2dAi+tokYa/ALiS/oW5voL6w1sl3jQqRioIIaa5TgjaaUYM
YGgheWA9cqr3dw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:17:22 2024 by rpki-client on console-fra.rpki-client.org