Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File:                     Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier:          lY4qZ+GzvoTSrXkjBf7m2CjGw7qZSj+P2R03ahd3buY=
Subject key identifier:   CF:92:D9:63:04:63:5A:E8:09:7C:E1:4E:59:A8:93:A2:84:BD:22:17
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       018F85C7A47B7189BBFAA52F81EECA1519B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number:          0940
Signing time:             Fri 17 May 2024 09:00:04 +0000
Manifest this update:     Fri 17 May 2024 09:00:04 +0000
Manifest next update:     Sat 18 May 2024 09:00:04 +0000
Files and hashes:         1: 0tFeszzClTVrKtw1QNGR81ewwiA.roa (hash: ilOUScxICHdJ9j1UqTs9rFrwMtrCk7olMqEgWx9+OaY=)
                          2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: zTlGgoQEt/BnBNEUm74oXQeyF/Y562djGEUed9QVZ4Q=)
                          3: rQazSabJpfOzYJR3Eyfd-l3Qhsw.roa (hash: /RsJvbxEzpKVqgaoSerivbBNz00gKw0T9+DqcgmvkLk=)
                          4: veveTPZ0lvE313IInLmkTOC1Acs.roa (hash: SwWjCwp4JxCUqDhL1o0Fe/zVdnqbrAjYtGqroiZUDMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:c7:a4:7b:71:89:bb:fa:a5:2f:81:ee:ca:15:19:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: May 17 09:00:04 2024 GMT
            Not After : May 18 09:00:04 2024 GMT
        Subject: CN=cf92d96304635ae8097ce14e59a893a284bd2217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:08:33:76:8c:46:6b:15:aa:f4:23:4f:ea:
                    c8:3d:7b:8c:b8:98:55:26:e0:66:54:65:3f:2e:9f:
                    88:e5:4f:81:43:54:ab:41:e8:49:cc:a8:ae:79:b4:
                    92:5f:74:41:24:d0:eb:3b:b9:9d:e7:90:e1:3f:c4:
                    2e:d4:11:54:64:d9:cf:97:63:72:bd:f2:53:be:57:
                    0c:d3:1f:df:82:9a:c9:99:b2:13:dc:8e:22:95:80:
                    d6:e9:2b:08:37:2a:d0:00:07:d5:6c:65:30:cd:81:
                    df:68:bd:5a:7d:a8:af:2f:ff:90:59:c2:81:e7:7b:
                    dd:12:9a:e3:50:27:b0:72:40:8d:56:e0:43:1c:80:
                    c3:ff:b4:5c:0c:e0:fe:ae:06:a7:73:c9:70:fa:47:
                    7c:50:19:5c:e6:bc:6a:58:ee:74:1d:5e:64:6b:70:
                    d3:62:c0:f5:b1:8e:17:59:a2:52:41:62:be:2c:4c:
                    aa:f2:a9:eb:e7:12:bf:3a:e3:62:5d:f1:2a:9f:9d:
                    8c:1f:39:dc:f2:23:db:af:5d:27:9c:5f:0d:7a:b3:
                    7a:55:14:bf:58:9d:92:25:ed:24:28:39:c8:83:dd:
                    23:fa:06:21:86:ea:c4:3e:43:38:a9:b7:95:bc:7a:
                    89:7f:ed:b2:4b:52:fe:42:6b:b9:bc:06:30:b3:73:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:92:D9:63:04:63:5A:E8:09:7C:E1:4E:59:A8:93:A2:84:BD:22:17
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:bc:1d:1a:06:9c:d8:3b:eb:c1:5e:b8:60:9e:7c:86:8f:11:
         6d:61:3e:e4:7d:fa:d2:71:86:55:47:91:6b:81:db:b4:2d:d5:
         2f:7f:d9:c1:c3:11:8a:93:a2:33:ee:a9:c5:60:43:ae:f6:51:
         e7:a9:76:43:69:1d:60:08:e2:d5:38:8a:ca:54:b5:95:4e:c3:
         5b:20:5b:fd:8f:3d:88:25:e5:ff:33:49:91:e7:80:83:6b:d0:
         a9:b0:14:16:b1:04:00:11:bd:19:01:ca:7e:e1:f1:a9:e3:58:
         ba:1a:ba:40:35:ef:90:e6:0a:f3:42:5b:00:bc:bb:de:eb:fd:
         62:8f:1a:a8:97:96:4b:03:2d:3d:73:23:3a:cf:2c:e4:94:33:
         75:79:18:82:70:17:3f:48:ce:df:c0:10:bc:c8:f7:1f:ac:0c:
         64:99:bf:39:cf:22:af:de:8c:fb:21:78:34:f2:6e:a3:bc:4f:
         95:35:95:b8:1c:de:3b:e8:55:e1:79:fd:28:81:d6:c2:1a:e6:
         d8:c0:4e:c9:f9:23:34:54:8f:5b:bd:95:9c:e7:f4:98:67:9a:
         14:70:4f:a1:6b:ce:24:5b:6e:03:52:99:8d:a0:e3:e1:08:db:
         a0:c0:8d:49:02:d7:68:aa:96:12:e1:07:01:25:ce:28:6e:a6:
         9f:f1:3f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Fx6R7cYm7+qUvge7KFRm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy
NzIzYzMwHhcNMjQwNTE3MDkwMDA0WhcNMjQwNTE4MDkwMDA0WjAzMTEwLwYDVQQD
EyhjZjkyZDk2MzA0NjM1YWU4MDk3Y2UxNGU1OWE4OTNhMjg0YmQyMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo04IM3aMRmsVqvQjT+rIPXuMuJhV
JuBmVGU/Lp+I5U+BQ1SrQehJzKiuebSSX3RBJNDrO7md55DhP8Qu1BFUZNnPl2Ny
vfJTvlcM0x/fgprJmbIT3I4ilYDW6SsINyrQAAfVbGUwzYHfaL1afaivL/+QWcKB
53vdEprjUCewckCNVuBDHIDD/7RcDOD+rganc8lw+kd8UBlc5rxqWO50HV5ka3DT
YsD1sY4XWaJSQWK+LEyq8qnr5xK/OuNiXfEqn52MHznc8iPbr10nnF8NerN6VRS/
WJ2SJe0kKDnIg90j+gYhhurEPkM4qbeVvHqJf+2yS1L+Qmu5vAYws3Nk9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+S2WMEY1roCXzhTlmok6KEvSIXMB8GA1UdIwQY
MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt
ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl
LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrwdGgac
2DvrwV64YJ58ho8RbWE+5H360nGGVUeRa4HbtC3VL3/ZwcMRipOiM+6pxWBDrvZR
56l2Q2kdYAji1TiKylS1lU7DWyBb/Y89iCXl/zNJkeeAg2vQqbAUFrEEABG9GQHK
fuHxqeNYuhq6QDXvkOYK80JbALy73uv9Yo8aqJeWSwMtPXMjOs8s5JQzdXkYgnAX
P0jO38AQvMj3H6wMZJm/Oc8ir96M+yF4NPJuo7xPlTWVuBzeO+hV4Xn9KIHWwhrm
2MBOyfkjNFSPW72VnOf0mGeaFHBPoWvOJFtuA1KZjaDj4QjboMCNSQLXaKqWEuEH
ASXOKG6mn/E/zA==
-----END CERTIFICATE-----
Generated at Fri May 17 10:15:31 2024 by rpki-client on console-fra.rpki-client.org