Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File:                     yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier:          P/WbSsRyURAaA5pj95svsg3s1RJ26N1syO8rPa6xloQ=
Subject key identifier:   EB:02:E8:B5:1A:2A:80:FF:5B:45:DF:3C:15:C6:FE:06:12:88:92:8A
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer:       /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial:       0191FA106EB19C04B22E8FCFAF8DE26D522D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number:          0108
Signing time:             Mon 16 Sep 2024 09:01:06 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:06 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:06 +0000
Files and hashes:         1: oNKSjQWW3EC0af6lm9gPmzDQ-3Q.roa (hash: luxzxjbJBii2yhoueKZuwgwhWMMGVgP7z9Mj7uvcOL4=)
                          2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: u30KytKcZ6zKc3xexv0vBL/PJHLlTu6sl+J4Uevorro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:6e:b1:9c:04:b2:2e:8f:cf:af:8d:e2:6d:52:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
        Validity
            Not Before: Sep 16 09:01:06 2024 GMT
            Not After : Sep 17 09:01:06 2024 GMT
        Subject: CN=eb02e8b51a2a80ff5b45df3c15c6fe061288928a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:d2:08:bf:5e:ac:c7:2b:c7:bb:64:8a:33:
                    1f:cb:cd:2e:99:e8:84:65:91:9d:28:e8:ce:d9:4b:
                    b0:bd:4e:7d:4d:ee:3d:3c:90:2d:d5:cd:75:ad:6b:
                    7d:b3:42:7c:d3:ae:c2:44:8e:e9:24:17:88:77:84:
                    49:01:4b:1d:74:55:e9:b6:a6:b3:86:8e:ae:ed:5d:
                    96:71:1f:7d:ee:7e:9c:79:9a:ac:be:72:42:61:02:
                    c1:c5:47:5f:0c:98:29:1c:54:98:ed:7d:73:b2:d6:
                    64:36:63:9f:bd:90:94:1f:c2:a8:3d:b8:0d:78:d6:
                    96:a9:83:73:3e:ff:c4:31:05:28:13:43:21:a8:9b:
                    b9:c4:08:8a:9d:e7:35:82:df:a1:a8:6b:ed:38:7e:
                    ad:d6:b4:c8:e8:a0:37:31:28:64:4e:6d:50:02:ba:
                    18:77:08:58:5c:4c:32:c0:c1:7c:11:af:1c:b3:7e:
                    a0:a4:8c:fa:7f:b5:3f:e6:90:ed:75:41:e0:9b:ec:
                    59:b3:77:3b:e8:92:a1:f1:cd:d1:39:3a:28:cd:3b:
                    16:26:bc:51:40:85:a4:c8:d6:9f:7a:4e:71:81:da:
                    48:8f:3e:8e:30:95:30:e7:08:e7:05:39:be:1a:9c:
                    8c:4e:b7:87:01:1b:e3:88:75:74:7d:3f:29:d7:3a:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:E8:B5:1A:2A:80:FF:5B:45:DF:3C:15:C6:FE:06:12:88:92:8A
            X509v3 Authority Key Identifier:
                keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:47:bf:f3:88:7e:49:77:1e:1e:50:8f:1b:ea:6f:e1:30:48:
         72:fe:ac:6d:ef:90:98:86:e5:fa:f9:52:a2:20:b3:66:2d:90:
         cb:cc:33:98:ce:e0:94:17:f6:2a:0f:3c:1a:43:84:d1:26:61:
         71:be:f5:6f:62:62:b8:9a:aa:e6:de:61:8a:a1:da:aa:81:fa:
         21:c6:3e:a3:80:1a:67:56:b1:b8:88:53:89:b9:18:c1:4d:b4:
         7d:35:1a:07:c1:f6:a0:b3:2f:7b:76:27:fc:68:1f:3d:59:f3:
         06:5d:1a:20:c0:34:06:24:42:28:f3:a9:c5:ee:a2:54:61:7c:
         0a:4b:33:03:48:a2:af:66:84:13:d5:c1:f3:13:4a:b5:73:ea:
         97:78:a2:26:0d:4c:09:a6:d1:07:b4:a3:a2:bf:e0:aa:96:b3:
         3e:b7:04:08:ee:a3:7e:2c:81:eb:bc:51:49:40:b3:59:94:ba:
         6f:7d:11:ec:8c:e2:89:87:ac:61:89:4a:b6:55:5d:80:eb:ba:
         eb:c2:86:11:22:ab:59:db:5e:41:b9:0d:32:92:26:3d:5d:91:
         35:59:35:b5:3c:62:de:da:cf:d2:43:16:7f:f5:69:93:5f:62:
         5a:b3:36:f4:b7:9d:fc:f5:7a:18:51:d5:bb:ff:e9:96:d6:cd:
         8e:32:ce:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6EG6xnASyLo/Pr43ibVItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj
NjI3MTUwHhcNMjQwOTE2MDkwMTA2WhcNMjQwOTE3MDkwMTA2WjAzMTEwLwYDVQQD
EyhlYjAyZThiNTFhMmE4MGZmNWI0NWRmM2MxNWM2ZmUwNjEyODg5MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8XSCL9erMcrx7tkijMfy80umeiE
ZZGdKOjO2UuwvU59Te49PJAt1c11rWt9s0J8067CRI7pJBeId4RJAUsddFXptqaz
ho6u7V2WcR997n6ceZqsvnJCYQLBxUdfDJgpHFSY7X1zstZkNmOfvZCUH8KoPbgN
eNaWqYNzPv/EMQUoE0MhqJu5xAiKnec1gt+hqGvtOH6t1rTI6KA3MShkTm1QAroY
dwhYXEwywMF8Ea8cs36gpIz6f7U/5pDtdUHgm+xZs3c76JKh8c3ROToozTsWJrxR
QIWkyNafek5xgdpIjz6OMJUw5wjnBTm+GpyMTreHARvjiHV0fT8p1zq37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsC6LUaKoD/W0XfPBXG/gYSiJKKMB8GA1UdIwQY
MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt
MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi
LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0e/84h+
SXceHlCPG+pv4TBIcv6sbe+QmIbl+vlSoiCzZi2Qy8wzmM7glBf2Kg88GkOE0SZh
cb71b2JiuJqq5t5hiqHaqoH6IcY+o4AaZ1axuIhTibkYwU20fTUaB8H2oLMve3Yn
/GgfPVnzBl0aIMA0BiRCKPOpxe6iVGF8CkszA0iir2aEE9XB8xNKtXPql3iiJg1M
CabRB7Sjor/gqpazPrcECO6jfiyB67xRSUCzWZS6b30R7IziiYesYYlKtlVdgOu6
68KGESKrWdteQbkNMpImPV2RNVk1tTxi3trP0kMWf/Vpk19iWrM29Led/PV6GFHV
u//pltbNjjLOZw==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:13:05 2024 by rpki-client on console-fra.rpki-client.org