Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File:                     YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier:          es4mC/gj90WHrQ5/xAZMwjfQEo/+XcIuGfIi3pSHu8Y=
Subject key identifier:   66:CC:A6:EF:DB:4C:9A:1C:88:D8:07:8A:A5:54:CE:ED:F4:D2:FC:AE
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer:       /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial:       0193579B82F4363CDC2EBFC3C82E22661B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 06:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:29 +0000
Files and hashes:         1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: WEADe+8Wdc7WXHJLdKRtflBANC94IFkskg7TEEVowLU=)
                          2: qXsevtedXZWZWFcZadzS6utiX70.roa (hash: Lg1WZlsvbj24xWzE9ns2K90z1diAwWuX7KfR4MqPyyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:82:f4:36:3c:dc:2e:bf:c3:c8:2e:22:66:1b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
        Validity
            Not Before: Nov 23 06:00:29 2024 GMT
            Not After : Nov 24 06:00:29 2024 GMT
        Subject: CN=66cca6efdb4c9a1c88d8078aa554ceedf4d2fcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:22:5a:73:55:30:0e:09:87:48:59:13:73:
                    fe:cf:39:9a:1b:51:2b:f9:a0:3e:ec:1c:15:ad:ee:
                    f4:d4:e7:82:bd:3c:64:1c:79:35:c7:10:85:2c:3e:
                    a5:ae:af:a1:af:60:21:81:d9:9e:3e:b6:7e:bc:d5:
                    db:d7:3e:3a:fc:a4:c7:b1:e2:11:44:f0:28:6f:24:
                    33:a1:b8:18:a6:41:4d:97:a4:09:17:a7:52:01:70:
                    b3:d7:89:09:c4:50:4a:cd:9e:f9:1c:35:ab:41:ad:
                    db:62:93:bb:75:cd:97:0d:21:c2:79:7c:8a:44:81:
                    af:7b:fe:2f:db:f7:51:55:b7:c6:c4:3b:60:6f:d8:
                    a5:c7:66:b0:cf:20:78:7e:0a:38:70:8a:cd:2d:a0:
                    ab:94:87:64:3e:73:19:07:d0:2a:96:99:f6:d1:4f:
                    bd:88:96:93:80:44:02:f1:42:53:bf:1d:5b:be:8f:
                    6c:13:2a:4a:51:2e:ce:91:37:39:3b:06:28:8f:9b:
                    85:26:89:3b:03:be:c3:2d:7d:b3:71:da:c1:36:e5:
                    11:60:84:09:2b:07:f0:56:1f:5a:9b:67:58:4f:a6:
                    9f:5e:09:ea:4e:9f:a2:da:ad:3b:78:3f:43:0f:c5:
                    f5:c2:97:20:ef:b3:79:05:69:aa:53:01:03:0f:a0:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CC:A6:EF:DB:4C:9A:1C:88:D8:07:8A:A5:54:CE:ED:F4:D2:FC:AE
            X509v3 Authority Key Identifier:
                keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:94:b1:3d:62:cd:ac:c5:4d:06:df:22:68:c8:fb:ad:e5:ff:
         be:a9:65:3d:cb:a9:dc:ba:c3:8b:9c:d7:2c:77:a7:3f:07:95:
         ac:61:74:18:24:7f:92:e1:eb:6d:ec:ef:a5:d8:77:f2:5a:f0:
         bd:05:6c:0e:52:8d:88:83:f1:4d:26:1e:e7:bd:26:e4:a1:ed:
         9e:c0:13:b7:fa:3e:55:00:f7:0d:24:64:48:02:22:29:16:d2:
         04:46:47:f2:72:6f:e3:06:46:ca:05:9d:74:99:db:e1:83:a0:
         61:bb:cd:11:70:68:3d:b3:7b:f8:df:41:b0:48:ed:f7:df:eb:
         78:41:c3:6d:0b:dc:53:45:55:c2:2f:4b:0e:cb:68:b3:db:ee:
         85:45:81:d2:79:28:16:29:f9:b1:32:42:66:2f:3b:53:e1:a7:
         32:4b:62:9e:7d:7f:42:ef:7f:1e:18:73:4f:83:b1:e3:cd:97:
         26:61:4e:d0:cf:a9:85:e8:4e:9d:d0:61:cb:76:7c:f6:15:1e:
         15:fd:f5:92:4f:65:49:0a:26:eb:7f:4b:eb:ba:89:77:09:b9:
         ab:ca:0b:08:cf:22:c7:f8:2a:8f:d8:e2:74:f8:24:ec:2e:6d:
         29:7b:e3:46:d5:0d:4d:ca:4e:5a:ec:b8:a0:6b:39:3c:ac:43:
         97:53:09:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm4L0NjzcLr/DyC4iZhtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3
MGU2MmIwHhcNMjQxMTIzMDYwMDI5WhcNMjQxMTI0MDYwMDI5WjAzMTEwLwYDVQQD
Eyg2NmNjYTZlZmRiNGM5YTFjODhkODA3OGFhNTU0Y2VlZGY0ZDJmY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbAiWnNVMA4Jh0hZE3P+zzmaG1Er
+aA+7BwVre701OeCvTxkHHk1xxCFLD6lrq+hr2AhgdmePrZ+vNXb1z46/KTHseIR
RPAobyQzobgYpkFNl6QJF6dSAXCz14kJxFBKzZ75HDWrQa3bYpO7dc2XDSHCeXyK
RIGve/4v2/dRVbfGxDtgb9ilx2awzyB4fgo4cIrNLaCrlIdkPnMZB9Aqlpn20U+9
iJaTgEQC8UJTvx1bvo9sEypKUS7OkTc5OwYoj5uFJok7A77DLX2zcdrBNuURYIQJ
KwfwVh9am2dYT6afXgnqTp+i2q07eD9DD8X1wpcg77N5BWmqUwEDD6Bh6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbMpu/bTJociNgHiqVUzu300vyuMB8GA1UdIwQY
MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt
NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5
LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJSxPWLN
rMVNBt8iaMj7reX/vqllPcup3LrDi5zXLHenPweVrGF0GCR/kuHrbezvpdh38lrw
vQVsDlKNiIPxTSYe570m5KHtnsATt/o+VQD3DSRkSAIiKRbSBEZH8nJv4wZGygWd
dJnb4YOgYbvNEXBoPbN7+N9BsEjt99/reEHDbQvcU0VVwi9LDstos9vuhUWB0nko
Fin5sTJCZi87U+GnMktinn1/Qu9/HhhzT4Ox482XJmFO0M+phehOndBhy3Z89hUe
Ff31kk9lSQom639L67qJdwm5q8oLCM8ix/gqj9jidPgk7C5tKXvjRtUNTcpOWuy4
oGs5PKxDl1MJ+Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:26 2024 by rpki-client on console-fra.rpki-client.org