Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File:                     yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier:          EPnX7tc1c9s8NhuOP/ixKok9dNHxjcUpjSlakzD3Qr4=
Subject key identifier:   B3:B5:1A:0E:D7:93:D4:D3:65:E7:07:7B:2E:85:9C:9C:67:65:F6:A1
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer:       /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial:       019357D2B6BDFDC35AE5305D1762CE54B9D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 07:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:47 +0000
Files and hashes:         1: LyJQYW-HRHOciT-t3zzt2mtKvqo.roa (hash: hA/DgIKeeSXSTUSUNkruxjP/YBMVAxilDv/z/u3aUeM=)
                          2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: 2FJB8/nAEzkOfNlV0hoM53z5JMWrGMGR/YLJpyUYUrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:b6:bd:fd:c3:5a:e5:30:5d:17:62:ce:54:b9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
        Validity
            Not Before: Nov 23 07:00:47 2024 GMT
            Not After : Nov 24 07:00:47 2024 GMT
        Subject: CN=b3b51a0ed793d4d365e7077b2e859c9c6765f6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:82:52:79:69:1c:14:99:c3:63:d4:2c:a9:
                    fe:8e:41:07:e4:bd:25:72:ce:ae:c8:87:ef:26:62:
                    8e:bf:14:d7:69:5c:9b:70:0a:71:74:b7:ff:37:ad:
                    f0:e4:a8:9b:9e:0b:dd:26:ba:2a:b2:8f:98:9d:ea:
                    69:52:d4:fd:61:12:74:33:be:bc:3c:2f:eb:f2:7c:
                    07:15:27:6d:64:79:d1:9d:62:82:d4:aa:2a:70:4d:
                    a7:12:3a:77:c3:86:84:8e:80:8a:be:6b:17:71:0e:
                    35:f9:7a:22:71:42:57:ff:d5:fc:26:ed:79:0f:4b:
                    19:6d:22:f5:37:40:92:5c:40:2e:f4:c1:44:b0:b0:
                    16:ce:12:11:c0:74:d1:ed:55:7c:7b:64:5f:50:9f:
                    85:83:4e:be:af:c8:59:4f:fb:8c:2f:b8:5f:a9:ec:
                    ef:95:69:cc:8a:3f:ce:5e:cb:f5:3d:e2:f8:b1:c9:
                    c0:0b:b1:2c:3f:4c:aa:42:80:0c:5a:46:05:56:68:
                    fe:5b:2e:e2:c8:a1:74:68:ea:ba:bb:3a:86:b6:4f:
                    8d:a9:99:fe:25:48:52:73:93:7d:1b:cd:b0:cb:7a:
                    bd:40:80:50:6a:89:4d:ae:d9:70:ce:49:f9:0d:45:
                    1c:c5:b9:06:fc:14:03:58:05:ee:2f:a7:ab:b5:b4:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B5:1A:0E:D7:93:D4:D3:65:E7:07:7B:2E:85:9C:9C:67:65:F6:A1
            X509v3 Authority Key Identifier:
                keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:00:9c:60:38:44:db:b6:15:55:b2:52:19:03:e0:cc:e0:
         e9:77:48:ce:a5:e3:f2:c9:da:ee:ea:a0:cb:8a:d9:80:b5:7f:
         e2:e2:5d:88:ef:6d:d3:d6:e8:43:58:bc:c5:01:90:d2:ab:cd:
         3f:73:29:a0:46:72:c1:63:89:2b:e1:1c:30:63:1b:97:64:01:
         ce:0d:fb:7d:b8:d6:ba:c9:56:12:ff:c9:cd:2e:7a:24:30:50:
         1c:86:51:0e:ea:0e:59:cc:3c:2c:7a:29:fe:fe:14:3b:3c:ef:
         54:6e:0f:e6:81:4c:74:65:42:cd:ba:c0:87:22:a9:33:5a:7d:
         fa:6d:66:00:f6:76:2e:71:92:b7:a4:ef:dc:32:7c:dc:c1:f4:
         9c:bb:e2:2e:f6:c5:4c:59:e1:a0:bd:e8:fb:ba:e2:b8:18:d7:
         6d:28:a7:f3:2c:58:e0:77:55:57:c8:1b:68:91:db:28:57:c3:
         85:1a:f3:26:62:45:a6:40:73:8f:88:e8:df:40:66:8c:3e:f3:
         18:8e:96:5e:be:aa:cf:8a:ed:8c:59:8c:39:12:c9:f1:6a:10:
         b6:98:8c:85:86:e0:58:07:ef:e0:50:82:3f:86:86:dd:db:c1:
         3b:75:63:35:9b:a8:a6:97:da:72:d8:01:d2:95:ca:30:14:5e:
         6c:2a:9d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0ra9/cNa5TBdF2LOVLnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzJhYWVjODczM2Q0NWY3YTAwMDM1MTAxODBiNGFlMmQ0
YmJlOGUwHhcNMjQxMTIzMDcwMDQ3WhcNMjQxMTI0MDcwMDQ3WjAzMTEwLwYDVQQD
EyhiM2I1MWEwZWQ3OTNkNGQzNjVlNzA3N2IyZTg1OWM5YzY3NjVmNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYKCUnlpHBSZw2PULKn+jkEH5L0l
cs6uyIfvJmKOvxTXaVybcApxdLf/N63w5KibngvdJroqso+YneppUtT9YRJ0M768
PC/r8nwHFSdtZHnRnWKC1KoqcE2nEjp3w4aEjoCKvmsXcQ41+XoicUJX/9X8Ju15
D0sZbSL1N0CSXEAu9MFEsLAWzhIRwHTR7VV8e2RfUJ+Fg06+r8hZT/uML7hfqezv
lWnMij/OXsv1PeL4scnAC7EsP0yqQoAMWkYFVmj+Wy7iyKF0aOq6uzqGtk+NqZn+
JUhSc5N9G82wy3q9QIBQaolNrtlwzkn5DUUcxbkG/BQDWAXuL6ertbSQAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO1Gg7Xk9TTZecHey6FnJxnZfahMB8GA1UdIwQY
MBaAFMlyquyHM9RfegADUQGAtK4tS76OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhLcTdJY3oxRjk2QUFOUkFZQzByaTFMdm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kNmVhZmItYjMyOS00ZTEyLTgyNWMt
ZWI1YjlhN2RhODZiLzEveVhLcTdJY3oxRjk2QUFOUkFZQzByaTFMdm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kNmVhZmItYjMyOS00ZTEyLTgyNWMtZWI1YjlhN2RhODZi
LzEveVhLcTdJY3oxRjk2QUFOUkFZQzByaTFMdm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitIAnGA4
RNu2FVWyUhkD4Mzg6XdIzqXj8sna7uqgy4rZgLV/4uJdiO9t09boQ1i8xQGQ0qvN
P3MpoEZywWOJK+EcMGMbl2QBzg37fbjWuslWEv/JzS56JDBQHIZRDuoOWcw8LHop
/v4UOzzvVG4P5oFMdGVCzbrAhyKpM1p9+m1mAPZ2LnGSt6Tv3DJ83MH0nLviLvbF
TFnhoL3o+7riuBjXbSin8yxY4HdVV8gbaJHbKFfDhRrzJmJFpkBzj4jo30BmjD7z
GI6WXr6qz4rtjFmMORLJ8WoQtpiMhYbgWAfv4FCCP4aG3dvBO3VjNZuoppfactgB
0pXKMBRebCqdFA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:33 2024 by rpki-client on console-fra.rpki-client.org