Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File:                     yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier:          trtPnXZoYqSr47nqcZgS4Pw3rfLNGyxQEDrZpjLA/JQ=
Subject key identifier:   AE:7A:A2:82:E6:59:53:84:99:FE:00:55:99:5E:D2:1B:6B:21:1B:F5
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer:       /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial:       018F885AFEB36F78FDEE023E8B788378E6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 21:00:15 +0000
Manifest this update:     Fri 17 May 2024 21:00:15 +0000
Manifest next update:     Sat 18 May 2024 21:00:15 +0000
Files and hashes:         1: mPu8paiLKcJR1E7QWfaXZ9WufK8.roa (hash: KfJSG1tj/Qb3yTVeeYawck7EtkKHqcjK+GsS8sV/MJ4=)
                          2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: 2rOfeR17H7XVpPZd69Y7CZ140u+AHRsW/JVqZcPMYNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:fe:b3:6f:78:fd:ee:02:3e:8b:78:83:78:e6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
        Validity
            Not Before: May 17 21:00:15 2024 GMT
            Not After : May 18 21:00:15 2024 GMT
        Subject: CN=ae7aa282e659538499fe0055995ed21b6b211bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3f:11:bb:1d:4c:9a:eb:f7:97:f8:05:2e:17:
                    8d:e9:35:c3:85:ab:10:98:25:b5:1d:da:6d:f2:55:
                    99:ac:9d:6d:80:0a:8a:98:d3:15:ec:92:9e:52:51:
                    16:32:61:6a:94:45:15:70:6e:3a:77:e5:df:d7:cd:
                    b0:7e:84:25:4d:26:d7:92:07:57:14:e3:f6:57:98:
                    62:eb:d5:1a:e9:6e:b9:f9:1d:45:01:26:d9:f1:41:
                    0a:d9:97:ec:51:6f:9a:cb:4f:0c:da:0d:c0:e8:7d:
                    b5:95:aa:7f:8f:7b:8b:a7:32:fe:ff:4f:35:6f:c4:
                    35:f8:eb:d7:33:78:4c:15:ff:fe:55:b7:b5:72:a4:
                    ce:61:18:b4:64:fc:88:ba:b5:24:34:e9:71:db:7c:
                    d5:38:e9:2e:ee:ed:4b:a9:1c:2f:77:8d:6d:3f:03:
                    80:08:d8:e4:78:2f:d0:e9:ec:96:74:31:ee:59:84:
                    39:53:84:37:db:45:22:ae:5c:d9:0f:a2:98:16:32:
                    0f:2d:79:3a:06:c9:c0:f4:0f:6e:d0:f9:22:f4:e5:
                    74:b7:5b:45:19:b3:fd:25:97:7a:58:79:de:f5:31:
                    9e:d4:77:09:19:3e:c5:85:ab:4d:cf:b8:54:97:85:
                    e0:98:ac:ee:f2:ab:02:e8:0d:42:ac:30:bd:f2:2e:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7A:A2:82:E6:59:53:84:99:FE:00:55:99:5E:D2:1B:6B:21:1B:F5
            X509v3 Authority Key Identifier:
                keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4f:1e:ca:ca:5c:b6:d3:46:f7:9c:87:67:86:e2:85:84:8b:
         ec:d5:fe:fd:50:5e:37:9f:59:bf:fc:15:31:c1:0a:8d:92:23:
         a3:0a:24:bf:e8:eb:63:80:49:73:ee:15:65:cb:39:af:d0:01:
         c8:71:c4:ee:61:87:70:44:7f:b7:d2:7e:27:02:e4:6d:5a:1b:
         88:18:f8:fd:29:ad:88:2c:80:6b:7b:80:d8:a1:61:33:c5:51:
         d8:69:4f:d5:e9:48:e5:ad:20:56:e0:3b:54:3c:dc:24:36:bb:
         fe:7c:a8:36:6b:d9:bd:ce:7d:d5:c2:22:bf:4a:8f:86:e4:65:
         f7:5a:27:2f:95:6c:d8:0e:d3:e8:9a:9f:90:d7:1e:8c:e0:f1:
         e5:d8:14:ff:ac:fd:7b:89:fb:5f:16:e4:6a:07:14:c4:e5:ee:
         a3:2a:28:fd:e6:6b:26:05:3e:c0:8e:c6:4b:cb:ff:f0:a0:4a:
         62:0f:5e:18:6a:db:10:45:3c:d8:c7:83:92:8b:e9:da:7a:d2:
         54:eb:12:7e:36:76:c3:a6:b3:8c:a6:70:c3:01:f8:1b:b8:19:
         81:fd:de:05:57:a2:40:73:d7:07:13:a2:8a:55:ad:38:16:02:
         05:ee:9c:50:af:a1:86:9f:a3:84:4e:1a:90:60:8c:77:8b:6c:
         37:27:b6:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWv6zb3j97gI+i3iDeOa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZTJkMWYzMjU3Y2ZhZTBmZmU2NzNjMWY3NzUzNDY1MzMx
MmYwNmIwHhcNMjQwNTE3MjEwMDE1WhcNMjQwNTE4MjEwMDE1WjAzMTEwLwYDVQQD
EyhhZTdhYTI4MmU2NTk1Mzg0OTlmZTAwNTU5OTVlZDIxYjZiMjExYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z8Rux1Mmuv3l/gFLheN6TXDhasQ
mCW1Hdpt8lWZrJ1tgAqKmNMV7JKeUlEWMmFqlEUVcG46d+Xf182wfoQlTSbXkgdX
FOP2V5hi69Ua6W65+R1FASbZ8UEK2ZfsUW+ay08M2g3A6H21lap/j3uLpzL+/081
b8Q1+OvXM3hMFf/+Vbe1cqTOYRi0ZPyIurUkNOlx23zVOOku7u1LqRwvd41tPwOA
CNjkeC/Q6eyWdDHuWYQ5U4Q320UirlzZD6KYFjIPLXk6BsnA9A9u0Pki9OV0t1tF
GbP9JZd6WHne9TGe1HcJGT7FhatNz7hUl4XgmKzu8qsC6A1CrDC98i6BNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK56ooLmWVOEmf4AVZle0htrIRv1MB8GA1UdIwQY
MBaAFMji0fMlfPrg/+Zzwfd1NGUzEvBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU9MUjh5VjgtdURfNW5QQjkzVTBaVE1TOEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kMGU4MjQtZjdkMy00ZjBkLWJkZDQt
Yjk2MjhhMjRkOWQxLzEveU9MUjh5VjgtdURfNW5QQjkzVTBaVE1TOEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9kMGU4MjQtZjdkMy00ZjBkLWJkZDQtYjk2MjhhMjRkOWQx
LzEveU9MUjh5VjgtdURfNW5QQjkzVTBaVE1TOEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAik8eyspc
ttNG95yHZ4bihYSL7NX+/VBeN59Zv/wVMcEKjZIjowokv+jrY4BJc+4VZcs5r9AB
yHHE7mGHcER/t9J+JwLkbVobiBj4/SmtiCyAa3uA2KFhM8VR2GlP1elI5a0gVuA7
VDzcJDa7/nyoNmvZvc591cIiv0qPhuRl91onL5Vs2A7T6JqfkNcejODx5dgU/6z9
e4n7XxbkagcUxOXuoyoo/eZrJgU+wI7GS8v/8KBKYg9eGGrbEEU82MeDkovp2nrS
VOsSfjZ2w6azjKZwwwH4G7gZgf3eBVeiQHPXBxOiilWtOBYCBe6cUK+hhp+jhE4a
kGCMd4tsNye2yQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:43:18 2024 by rpki-client on console-fra.rpki-client.org