Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
File:                     yrjSpYc51mIvFaU8wb1U-dsIAcY.mft (raw, json)
Hash identifier:          JUH96VQdNhOKMivEZrEZZI4bedrybxQAQMoNhT+/YhQ=
Subject key identifier:   88:7E:2F:BE:BD:42:DD:4F:A5:17:9E:FA:FA:86:3D:7C:A9:65:DF:12
Authority key identifier: CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
Certificate issuer:       /CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Certificate serial:       0191F9A2D0E8D1D5446AFC077C1F12FE802B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
Manifest number:          F3
Signing time:             Mon 16 Sep 2024 07:01:22 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:22 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:22 +0000
Files and hashes:         1: yrjSpYc51mIvFaU8wb1U-dsIAcY.crl (hash: 0PsivomCpw5lI58YD5x3XDBqA2K2K6gSfFWS1wyFtv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:d0:e8:d1:d5:44:6a:fc:07:7c:1f:12:fe:80:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
        Validity
            Not Before: Sep 16 07:01:22 2024 GMT
            Not After : Sep 17 07:01:22 2024 GMT
        Subject: CN=887e2fbebd42dd4fa5179efafa863d7ca965df12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:f7:0d:9f:1b:51:b8:6f:80:18:81:78:7e:
                    1a:ce:e4:5b:41:63:0d:7f:67:fb:fc:c5:1f:dc:9e:
                    35:43:98:f8:79:2d:f9:7e:9b:24:e8:71:b7:c1:62:
                    a0:47:8f:d5:d9:72:73:a6:32:d3:52:a6:4f:4e:5b:
                    a4:af:60:69:3a:56:32:76:f2:04:72:a6:cb:9a:0a:
                    e2:c4:85:66:3b:69:29:5b:7c:09:8d:11:4e:a9:e8:
                    38:7b:39:b9:8b:bd:ac:9c:f2:79:dc:18:2a:19:ff:
                    b9:fc:73:f1:71:ce:6a:3e:ea:2e:cd:19:a3:72:6f:
                    04:ba:07:85:c9:61:5b:ab:56:45:9f:83:37:c3:be:
                    0b:47:ec:26:e8:41:a1:14:20:a1:a6:ac:61:e9:e2:
                    82:20:d5:40:6b:46:e9:df:3e:7d:29:2e:58:ca:d5:
                    d5:3b:24:72:f0:39:c5:8f:2b:21:1e:85:e2:5b:10:
                    5f:cf:e3:cc:f6:e5:82:5b:1c:99:4c:d7:d1:c1:c5:
                    ec:e9:03:78:77:74:43:2e:41:09:89:2a:c9:d9:54:
                    11:09:d2:b1:2e:12:94:7b:8d:56:75:e1:58:7f:17:
                    67:3e:f9:93:96:9e:c7:71:34:22:b8:f6:7e:5b:6f:
                    d9:7a:9f:bf:a0:b4:b3:5f:fe:ca:26:ba:21:c1:50:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7E:2F:BE:BD:42:DD:4F:A5:17:9E:FA:FA:86:3D:7C:A9:65:DF:12
            X509v3 Authority Key Identifier:
                keyid:CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:70:aa:02:b6:f6:ee:bf:e4:29:d3:70:98:7b:5e:a7:4b:
         09:57:94:e4:2a:1e:1f:56:27:16:74:32:fb:cf:d2:8f:34:c0:
         7c:7f:43:5d:f4:95:8b:09:19:58:71:12:9d:ea:1d:61:b4:45:
         2c:eb:7b:d5:9d:b0:97:5a:ed:fd:a0:2e:8e:38:91:ee:b5:64:
         82:3b:68:1d:a8:f3:8b:32:46:1a:b4:26:73:af:39:e9:f7:26:
         62:88:e0:21:d8:0b:1f:bf:d4:10:02:76:35:d3:ec:22:b1:2b:
         97:c8:8a:87:7c:86:8f:cd:13:07:b2:95:32:26:98:ab:86:c1:
         0a:9a:0a:92:02:53:65:32:45:d7:ae:3b:8a:8e:6b:25:3b:8b:
         89:66:95:11:7d:8f:05:0a:9b:26:7d:fa:6b:73:4f:81:34:60:
         10:94:03:f8:1a:26:bf:e0:3a:14:bb:90:f4:82:62:c1:8f:4e:
         ef:84:e9:61:19:c6:02:73:70:6b:f4:fd:92:a6:e3:eb:75:16:
         42:a6:88:47:87:6c:64:27:03:a7:de:c3:b9:79:d1:46:f1:29:
         5c:1a:28:da:0f:77:fe:18:a8:bd:a7:dd:12:b5:98:a4:3c:3b:
         a0:64:b5:0c:de:69:5b:26:63:b2:0c:e0:05:06:f2:d0:55:43:
         63:11:f4:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5otDo0dVEavwHfB8S/oArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjhkMmE1ODczOWQ2NjIyZjE1YTUzY2MxYmQ1NGY5ZGIw
ODAxYzYwHhcNMjQwOTE2MDcwMTIyWhcNMjQwOTE3MDcwMTIyWjAzMTEwLwYDVQQD
Eyg4ODdlMmZiZWJkNDJkZDRmYTUxNzllZmFmYTg2M2Q3Y2E5NjVkZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rz3DZ8bUbhvgBiBeH4azuRbQWMN
f2f7/MUf3J41Q5j4eS35fpsk6HG3wWKgR4/V2XJzpjLTUqZPTlukr2BpOlYydvIE
cqbLmgrixIVmO2kpW3wJjRFOqeg4ezm5i72snPJ53BgqGf+5/HPxcc5qPuouzRmj
cm8EugeFyWFbq1ZFn4M3w74LR+wm6EGhFCChpqxh6eKCINVAa0bp3z59KS5YytXV
OyRy8DnFjyshHoXiWxBfz+PM9uWCWxyZTNfRwcXs6QN4d3RDLkEJiSrJ2VQRCdKx
LhKUe41WdeFYfxdnPvmTlp7HcTQiuPZ+W2/Zep+/oLSzX/7KJrohwVA/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh+L769Qt1PpRee+vqGPXypZd8SMB8GA1UdIwQY
MBaAFMq40qWHOdZiLxWlPMG9VPnbCAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82NmNlY2YtYmRmYy00Mjc4LWFlMDMt
YWQxY2RlMWI4NTQyLzEveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82NmNlY2YtYmRmYy00Mjc4LWFlMDMtYWQxY2RlMWI4NTQy
LzEveXJqU3BZYzUxbUl2RmFVOHdiMVUtZHNJQWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQ1wqgK2
9u6/5CnTcJh7XqdLCVeU5CoeH1YnFnQy+8/SjzTAfH9DXfSViwkZWHESneodYbRF
LOt71Z2wl1rt/aAujjiR7rVkgjtoHajzizJGGrQmc6856fcmYojgIdgLH7/UEAJ2
NdPsIrErl8iKh3yGj80TB7KVMiaYq4bBCpoKkgJTZTJF1647io5rJTuLiWaVEX2P
BQqbJn36a3NPgTRgEJQD+Bomv+A6FLuQ9IJiwY9O74TpYRnGAnNwa/T9kqbj63UW
QqaIR4dsZCcDp97DuXnRRvEpXBoo2g93/hiovafdErWYpDw7oGS1DN5pWyZjsgzg
BQby0FVDYxH0dw==
-----END CERTIFICATE-----