Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          LKDnsNmoJjB0O6o0ohv+15sB3V3pz6Mr4mmqYikaIUk=
Subject key identifier:   9A:2C:78:F9:83:F6:8E:D6:2A:4B:77:5C:0A:B7:5B:E0:50:4C:A9:30
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       018F565D42827BF75F1844C99961C1D2407F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          0E72
Signing time:             Wed 08 May 2024 04:01:43 +0000
Manifest this update:     Wed 08 May 2024 04:01:43 +0000
Manifest next update:     Thu 09 May 2024 04:01:43 +0000
Files and hashes:         1: KqmeXwhk_pB4xkGxpNTTDTeiS90.roa (hash: eMpxO11wdE075wjBA9FLiiVnMrmiLtPj0r0REiNl7bo=)
                          2: Kr3OD_h7e8gEnrr0E6V1z57rUtc.roa (hash: 7tenFVgQg127sPgJWl0tLSet7Ggs/jXOBxEe507pzMo=)
                          3: ONAEd8o7j4tRHoEobBg0FrNhnnQ.roa (hash: Uoa+6kwjK3viuK4uPnXGVGULuDkWcIcziKgOTQvX144=)
                          4: j-9MU_85sLVgjzUahP5sLow4JJI.roa (hash: ZRkxm4L7YArdRgut+t+xWRI7FmNQ10KPFZ+L/nOnRVA=)
                          5: xK41Ix21zUPN06W9_KMRvsPQA2Y.roa (hash: tw534xzF38TDRJqM4II5Y0cO+zBLyPJBIzLpjfKlvHA=)
                          6: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: ajIm6Dyttsdo6tatmwpS4MLqqGthmo1ZXAs7zvsCyN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:56:5d:42:82:7b:f7:5f:18:44:c9:99:61:c1:d2:40:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: May  8 04:01:43 2024 GMT
            Not After : May  9 04:01:43 2024 GMT
        Subject: CN=9a2c78f983f68ed62a4b775c0ab75be0504ca930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:fb:24:1a:3a:0a:14:da:38:42:95:e2:69:
                    de:6d:01:8a:b9:dc:8a:18:42:57:5d:f1:88:ec:9f:
                    78:96:47:3d:8e:ea:66:95:17:5b:41:01:6d:d4:a8:
                    84:90:2a:cc:80:01:c7:58:55:80:f3:71:64:a5:ed:
                    48:8c:5a:43:a9:95:e7:b5:ad:73:97:59:45:1e:e9:
                    e3:74:d4:c2:2f:55:65:b3:a9:ec:24:3a:cf:5d:8f:
                    c8:88:d2:85:87:bb:7b:24:85:28:7d:fc:cc:ca:b0:
                    b7:2f:b5:2c:47:7e:0e:af:5b:cb:87:19:9f:ce:b8:
                    40:40:35:0c:06:22:aa:35:ff:1d:83:f9:37:36:3a:
                    50:b6:9e:ca:45:0a:25:ba:3f:04:bf:f7:d2:ff:9d:
                    56:f2:0a:c1:9d:1f:fa:2e:b8:e8:3b:23:b7:f9:03:
                    4b:ab:15:b6:e1:73:fe:67:dc:75:13:52:1a:90:37:
                    23:3b:89:41:b3:08:fa:23:0d:91:9c:3c:f1:56:46:
                    c8:15:23:71:b9:68:ca:98:c8:65:a0:35:17:5f:2f:
                    ad:1a:8d:08:b7:1d:cf:c5:ae:a1:b8:35:38:42:1e:
                    c0:ad:95:14:5c:bf:62:b7:de:b9:af:a1:d7:b2:c3:
                    d7:d4:59:e9:e9:5d:d1:cd:ff:eb:c0:78:15:45:cf:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:78:F9:83:F6:8E:D6:2A:4B:77:5C:0A:B7:5B:E0:50:4C:A9:30
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:bd:7d:ba:25:20:35:3b:a9:65:7e:d1:87:cd:ad:2d:aa:d3:
         0b:1c:7c:bd:f8:4c:3e:fa:25:05:c0:ea:f9:aa:65:0c:06:8c:
         70:2b:36:c6:bc:39:cc:99:56:22:bd:5f:0b:c3:42:6a:d9:42:
         d4:c3:5a:f3:b4:76:1c:9e:66:e5:0a:48:6c:c3:7f:0e:58:ef:
         cb:95:48:74:f4:0b:07:73:ad:a8:89:70:e3:2d:68:7e:bc:0f:
         f0:f6:4d:30:e2:a3:b8:70:f3:c0:1c:ed:79:d5:64:ee:12:e3:
         68:81:35:f6:30:c5:0f:63:94:c6:ae:c7:55:0c:d4:ff:6a:d5:
         26:8a:2f:8f:e3:6b:fb:c7:3f:39:66:41:93:56:7e:e3:5f:83:
         e2:6f:e1:32:b1:e6:2a:e6:88:e2:bd:e8:d0:6e:13:ed:e7:8a:
         90:04:bc:2b:17:c8:74:15:33:4d:69:20:58:0b:6b:ed:fd:cc:
         bc:4b:77:8e:ec:c5:3d:85:86:90:0d:fa:49:34:38:50:db:57:
         10:dd:9e:23:17:aa:07:4d:b0:25:1d:ac:ac:dc:be:c3:9c:c7:
         72:2a:54:7d:a3:a9:99:6b:06:ce:fe:a0:e4:81:ca:05:89:32:
         f7:f2:73:21:a6:d3:ca:d5:38:1d:8e:89:eb:9f:ce:cc:67:1f:
         b3:11:b3:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9WXUKCe/dfGETJmWHB0kB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjQwNTA4MDQwMTQzWhcNMjQwNTA5MDQwMTQzWjAzMTEwLwYDVQQD
Eyg5YTJjNzhmOTgzZjY4ZWQ2MmE0Yjc3NWMwYWI3NWJlMDUwNGNhOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi37JBo6ChTaOEKV4mnebQGKudyK
GEJXXfGI7J94lkc9jupmlRdbQQFt1KiEkCrMgAHHWFWA83Fkpe1IjFpDqZXnta1z
l1lFHunjdNTCL1Vls6nsJDrPXY/IiNKFh7t7JIUoffzMyrC3L7UsR34Or1vLhxmf
zrhAQDUMBiKqNf8dg/k3NjpQtp7KRQoluj8Ev/fS/51W8grBnR/6LrjoOyO3+QNL
qxW24XP+Z9x1E1IakDcjO4lBswj6Iw2RnDzxVkbIFSNxuWjKmMhloDUXXy+tGo0I
tx3Pxa6huDU4Qh7ArZUUXL9it965r6HXssPX1Fnp6V3Rzf/rwHgVRc8BswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJosePmD9o7WKkt3XAq3W+BQTKkwMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsr19uiUg
NTupZX7Rh82tLarTCxx8vfhMPvolBcDq+aplDAaMcCs2xrw5zJlWIr1fC8NCatlC
1MNa87R2HJ5m5QpIbMN/Dljvy5VIdPQLB3OtqIlw4y1ofrwP8PZNMOKjuHDzwBzt
edVk7hLjaIE19jDFD2OUxq7HVQzU/2rVJoovj+Nr+8c/OWZBk1Z+41+D4m/hMrHm
KuaI4r3o0G4T7eeKkAS8KxfIdBUzTWkgWAtr7f3MvEt3juzFPYWGkA36STQ4UNtX
EN2eIxeqB02wJR2srNy+w5zHcipUfaOpmWsGzv6g5IHKBYky9/JzIabTytU4HY6J
65/OzGcfsxGzhQ==
-----END CERTIFICATE-----
Generated at Wed May 8 07:33:38 2024 by rpki-client on console-fra.rpki-client.org