Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File:                     yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier:          J8oZY1sCGgfSEAWI8rfn/EDbO3ovwXtZHD/pYiEPXWM=
Subject key identifier:   3D:2C:44:89:20:50:97:7C:0F:DF:F6:8D:00:7C:21:3B:30:B2:BE:73
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer:       /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial:       018F882469023323B474E03D2D741DA30781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number:          0239
Signing time:             Fri 17 May 2024 20:00:38 +0000
Manifest this update:     Fri 17 May 2024 20:00:38 +0000
Manifest next update:     Sat 18 May 2024 20:00:38 +0000
Files and hashes:         1: Ic7zTnfXoP3buabFFxUlc9UBgkM.roa (hash: 0hLRM0jVZUVbwPst+dvZ7mxqrrgs+2jJp0cWSGuI2Rs=)
                          2: q1mxi9wkZAkCLp2oXpLLqcRik2I.roa (hash: RS6rg4j4ck/Vsiirmj7YzB4NSwXTAXebj7AC6jpH6Ek=)
                          3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: MzknrkYgUPT5O6YcyhtpeYYH05b03X5HAhhfkD0w1WQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:69:02:33:23:b4:74:e0:3d:2d:74:1d:a3:07:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
        Validity
            Not Before: May 17 20:00:38 2024 GMT
            Not After : May 18 20:00:38 2024 GMT
        Subject: CN=3d2c44892050977c0fdff68d007c213b30b2be73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:f5:a6:1d:32:84:23:8b:b5:4a:99:63:38:
                    0f:21:f6:55:0d:42:d7:53:fe:39:52:12:e3:bf:fb:
                    00:a5:60:d4:c4:67:08:34:ee:18:e3:07:b2:d6:56:
                    16:92:27:a9:4e:59:d1:81:68:5a:27:41:e1:4b:bf:
                    a2:5d:e0:3c:08:be:c8:22:c2:61:a6:89:2d:0c:cc:
                    0f:45:73:ea:94:c5:cc:46:47:54:28:7e:44:68:21:
                    12:40:02:1a:16:1a:62:e3:0d:ec:43:84:a4:1f:89:
                    69:d6:06:3c:25:35:79:b5:68:7a:90:ab:a6:25:f9:
                    04:d1:d2:8f:1b:3b:41:ba:5a:49:2e:47:f6:57:4c:
                    56:e2:f6:33:8c:5c:1a:86:fc:e7:54:a7:8f:3f:11:
                    a4:fe:ed:6f:ab:2c:6a:3c:e5:46:42:38:90:ac:a6:
                    a4:cb:78:c3:e8:1f:7b:0a:13:ad:97:8f:35:06:f3:
                    0a:b5:a9:b9:af:8b:2f:9c:0d:8c:cf:43:b8:f1:4e:
                    45:89:ad:31:e6:75:38:3a:aa:c2:be:0e:c2:26:d8:
                    5b:af:3e:e5:43:6c:2f:fe:f3:e8:66:72:78:a6:ce:
                    59:56:ef:b6:7b:1d:50:a4:c8:7b:00:ef:25:f8:58:
                    f5:aa:5e:1f:12:7f:c0:54:d1:15:af:27:d1:f3:95:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2C:44:89:20:50:97:7C:0F:DF:F6:8D:00:7C:21:3B:30:B2:BE:73
            X509v3 Authority Key Identifier:
                keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:d6:0e:e5:10:37:31:aa:b4:0f:4c:29:0c:f9:73:bf:99:
         1a:01:c9:28:7a:8f:35:8d:2b:85:66:2c:39:0b:88:80:90:35:
         37:82:a0:27:4c:9a:9d:53:54:b8:c4:eb:9b:e3:14:5a:8b:e0:
         47:49:3a:fa:9d:db:ac:b8:93:c8:30:42:c0:01:13:7d:e3:2b:
         ab:2b:fb:6f:b6:ef:f0:4f:13:79:a1:29:c4:b0:b6:8d:2d:1a:
         a9:c8:18:f4:d9:1d:2d:b8:4f:c4:35:c3:03:52:7d:d5:65:a4:
         48:e2:80:c3:bf:83:55:31:f0:b2:50:36:db:b8:d3:85:bf:3a:
         ee:d1:6f:48:5a:22:09:a7:04:41:80:14:11:f6:7c:68:26:71:
         6d:dc:19:5a:c6:06:d9:32:d8:59:15:16:63:66:b0:bd:4f:27:
         47:36:98:ed:ca:f5:06:8d:19:5d:f7:d0:91:a5:4e:b4:c9:81:
         cc:48:b9:40:4c:7e:bc:10:76:49:a5:2b:36:d8:a5:60:d2:79:
         91:c2:09:e5:8c:c1:a8:b5:bd:4d:56:af:ad:5c:22:86:a3:f8:
         85:64:10:55:8b:24:2d:4f:19:a1:a4:36:a3:57:ff:76:9a:e2:
         2e:72:37:ac:13:c5:e8:0b:6f:69:5e:9c:3b:1f:fc:01:7a:69:
         21:11:1a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJGkCMyO0dOA9LXQdoweBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNThhZWI0MTI5ZjhlMmM5YmM0MmNkMTkxODVjOGQ3ZjBl
NmVhZjkwHhcNMjQwNTE3MjAwMDM4WhcNMjQwNTE4MjAwMDM4WjAzMTEwLwYDVQQD
EygzZDJjNDQ4OTIwNTA5NzdjMGZkZmY2OGQwMDdjMjEzYjMwYjJiZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkz1ph0yhCOLtUqZYzgPIfZVDULX
U/45UhLjv/sApWDUxGcINO4Y4wey1lYWkiepTlnRgWhaJ0HhS7+iXeA8CL7IIsJh
poktDMwPRXPqlMXMRkdUKH5EaCESQAIaFhpi4w3sQ4SkH4lp1gY8JTV5tWh6kKum
JfkE0dKPGztBulpJLkf2V0xW4vYzjFwahvznVKePPxGk/u1vqyxqPOVGQjiQrKak
y3jD6B97ChOtl481BvMKtam5r4svnA2Mz0O48U5Fia0x5nU4OqrCvg7CJthbrz7l
Q2wv/vPoZnJ4ps5ZVu+2ex1QpMh7AO8l+Fj1ql4fEn/AVNEVryfR85Ub3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0sRIkgUJd8D9/2jQB8ITswsr5zMB8GA1UdIwQY
MBaAFMpYrrQSn44sm8Qs0ZGFyNfw5ur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2Mt
YWVmMWIzNGEyODdkLzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2MtYWVmMWIzNGEyODdk
LzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQzWDuUQ
NzGqtA9MKQz5c7+ZGgHJKHqPNY0rhWYsOQuIgJA1N4KgJ0yanVNUuMTrm+MUWovg
R0k6+p3brLiTyDBCwAETfeMrqyv7b7bv8E8TeaEpxLC2jS0aqcgY9NkdLbhPxDXD
A1J91WWkSOKAw7+DVTHwslA227jThb867tFvSFoiCacEQYAUEfZ8aCZxbdwZWsYG
2TLYWRUWY2awvU8nRzaY7cr1Bo0ZXffQkaVOtMmBzEi5QEx+vBB2SaUrNtilYNJ5
kcIJ5YzBqLW9TVavrVwihqP4hWQQVYskLU8ZoaQ2o1f/dpriLnI3rBPF6AtvaV6c
Ox/8AXppIREa5A==
-----END CERTIFICATE-----
Generated at Fri May 17 20:59:29 2024 by rpki-client on console-fra.rpki-client.org