Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File:                     Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier:          +qgb+pkBTVnHR3oicXNNdVZ1nSifP0UZnWFyNHr4DEQ=
Subject key identifier:   7D:6E:A9:73:93:71:16:52:70:C5:B1:C2:37:8B:14:31:E0:79:0C:A8
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer:       /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial:       018F8824AC928C6C8F9F23AD43625CFAEBE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number:          0D34
Signing time:             Fri 17 May 2024 20:00:55 +0000
Manifest this update:     Fri 17 May 2024 20:00:55 +0000
Manifest next update:     Sat 18 May 2024 20:00:55 +0000
Files and hashes:         1: YRlqRY2QVvxQhtkaD_-Au4AD-T0.roa (hash: OD8Edm2EjjjvP7K5EtqofbQQ1F45yYa9IpVBZNrts0c=)
                          2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: fUK+uUovN1kcUtZ/eBDd7VihbMkwrkPgNI+N7lZi1zM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:ac:92:8c:6c:8f:9f:23:ad:43:62:5c:fa:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
        Validity
            Not Before: May 17 20:00:55 2024 GMT
            Not After : May 18 20:00:55 2024 GMT
        Subject: CN=7d6ea9739371165270c5b1c2378b1431e0790ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:03:9b:16:b5:75:7c:f6:09:fb:fb:ac:e3:
                    55:8c:5b:17:63:19:37:d7:32:f9:bd:a9:49:09:16:
                    07:1a:01:cf:82:70:1a:48:86:29:96:dc:a9:28:94:
                    57:e0:d9:66:7b:71:99:fb:3a:8d:dc:2e:9e:af:60:
                    bc:27:c4:14:cf:a3:83:6f:47:fa:1d:71:19:db:16:
                    ef:17:7c:d6:d4:96:55:3f:7b:01:1c:8d:65:36:66:
                    9c:31:71:c4:37:3a:24:e3:08:91:b9:dc:66:ab:a7:
                    f6:b3:c2:9d:d4:13:9a:45:33:41:89:7d:cb:89:e6:
                    57:85:50:54:5d:e1:6b:8d:d8:63:c8:23:3b:b1:38:
                    28:fc:a9:b1:55:f3:3b:13:a5:6f:22:71:7c:1a:fb:
                    98:15:92:31:98:21:f9:a0:2d:2b:09:8f:75:ef:6c:
                    56:da:c7:58:e0:b4:ae:fb:71:69:9a:f1:6a:4f:62:
                    8a:5e:9c:5c:aa:a2:8b:b1:4d:21:ca:a2:46:d8:cd:
                    01:73:21:5b:36:04:2c:d7:54:48:86:30:e0:9b:76:
                    91:0d:bc:b2:ab:41:a8:bf:55:18:a7:16:f0:3a:11:
                    3f:68:19:fc:99:e0:d0:5a:e3:c3:05:44:7a:41:11:
                    36:d5:83:32:66:41:9e:8d:de:33:93:3a:9d:6e:2d:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:A9:73:93:71:16:52:70:C5:B1:C2:37:8B:14:31:E0:79:0C:A8
            X509v3 Authority Key Identifier:
                keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:18:db:70:38:83:96:9f:f3:8b:8e:4a:7f:0f:69:73:27:2b:
         bf:d9:60:72:46:40:db:36:e2:57:35:ab:3f:87:28:5a:9a:d9:
         98:fc:f8:57:65:75:c1:76:18:df:7c:ab:e9:51:aa:72:9e:30:
         f3:33:01:ce:fa:60:f6:15:7d:11:f6:42:1a:46:e4:46:c2:7d:
         34:b4:fe:41:fe:9f:6d:f4:5e:d8:ff:a0:0d:6d:9c:89:c8:51:
         24:c2:bd:20:87:40:b8:0f:a2:aa:79:d7:77:c8:02:f0:9e:f1:
         6f:99:f6:1c:8b:10:4f:42:39:43:e0:a7:dd:ce:34:51:fd:e9:
         17:42:70:96:e9:39:6e:9a:a8:d6:ee:fd:55:95:dd:d4:87:9d:
         3b:f5:a8:bf:51:a9:ac:52:28:ae:71:ad:c7:c0:34:3a:f3:70:
         07:6e:26:3b:f6:30:da:0c:d7:d7:40:4d:1e:63:22:5a:a4:ff:
         86:2c:17:99:20:fe:28:02:71:2a:4e:34:af:4e:43:b4:f3:17:
         7d:24:98:4e:c5:30:fb:9e:8d:03:dc:7a:1a:50:c5:86:18:8f:
         ca:90:49:fb:ac:2d:f6:16:db:cd:71:a7:e8:27:e5:50:34:b1:
         48:f4:de:cd:cc:94:a3:0b:f8:fa:33:11:79:b0:e4:44:ff:83:
         5e:43:ce:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJKySjGyPnyOtQ2Jc+uvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk
YjEwNGQwHhcNMjQwNTE3MjAwMDU1WhcNMjQwNTE4MjAwMDU1WjAzMTEwLwYDVQQD
Eyg3ZDZlYTk3MzkzNzExNjUyNzBjNWIxYzIzNzhiMTQzMWUwNzkwY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnYDmxa1dXz2Cfv7rONVjFsXYxk3
1zL5valJCRYHGgHPgnAaSIYpltypKJRX4Nlme3GZ+zqN3C6er2C8J8QUz6ODb0f6
HXEZ2xbvF3zW1JZVP3sBHI1lNmacMXHENzok4wiRudxmq6f2s8Kd1BOaRTNBiX3L
ieZXhVBUXeFrjdhjyCM7sTgo/KmxVfM7E6VvInF8GvuYFZIxmCH5oC0rCY9172xW
2sdY4LSu+3FpmvFqT2KKXpxcqqKLsU0hyqJG2M0BcyFbNgQs11RIhjDgm3aRDbyy
q0Gov1UYpxbwOhE/aBn8meDQWuPDBUR6QRE21YMyZkGejd4zkzqdbi39VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1uqXOTcRZScMWxwjeLFDHgeQyoMB8GA1UdIwQY
MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt
YTU4NmIwN2FkZDcyLzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy
LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRjbcDiD
lp/zi45Kfw9pcycrv9lgckZA2zbiVzWrP4coWprZmPz4V2V1wXYY33yr6VGqcp4w
8zMBzvpg9hV9EfZCGkbkRsJ9NLT+Qf6fbfRe2P+gDW2cichRJMK9IIdAuA+iqnnX
d8gC8J7xb5n2HIsQT0I5Q+Cn3c40Uf3pF0Jwluk5bpqo1u79VZXd1IedO/Wov1Gp
rFIornGtx8A0OvNwB24mO/Yw2gzX10BNHmMiWqT/hiwXmSD+KAJxKk40r05DtPMX
fSSYTsUw+56NA9x6GlDFhhiPypBJ+6wt9hbbzXGn6CflUDSxSPTezcyUowv4+jMR
ebDkRP+DXkPOSg==
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:32 2024 by rpki-client on console-ams.rpki-client.org