Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File:                     zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier:          4RhvuwgjOyLl/u5FOQq02L7IKZJg0zQ8FLr9d1HiiDc=
Subject key identifier:   EE:08:88:E2:DB:FB:9B:FC:E0:66:04:7F:25:2D:47:5E:F4:D3:AF:99
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer:       /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial:       01936A46D633BD5A12BD7B74FCC73E650C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number:          0168
Signing time:             Tue 26 Nov 2024 21:00:47 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:47 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:47 +0000
Files and hashes:         1: knSoepLGJSp-AcCQZkV1qY93TX0.roa (hash: UNoumTmvOXs23mYqEtBhu7K/0fDFevHJ7fthEimTcaU=)
                          2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: lpZ8nV1p3Kg6F3DzJS0WQHAd4llrRD2ZbDAiAVi3VWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:d6:33:bd:5a:12:bd:7b:74:fc:c7:3e:65:0c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
        Validity
            Not Before: Nov 26 21:00:47 2024 GMT
            Not After : Nov 27 21:00:47 2024 GMT
        Subject: CN=ee0888e2dbfb9bfce066047f252d475ef4d3af99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:c0:14:1c:53:c8:06:3b:74:ca:2a:f4:4b:
                    6f:f0:f6:13:7b:e5:9a:af:d6:cf:1b:5e:5b:16:c6:
                    eb:24:24:3f:08:21:4b:65:bd:30:8f:65:76:c1:25:
                    df:b6:46:78:fb:29:7d:41:1e:df:33:71:87:0b:c4:
                    33:1b:3e:2f:03:29:fb:9b:37:62:4c:5f:d6:f5:e1:
                    21:39:48:5c:e4:79:81:7a:91:51:42:b1:92:75:26:
                    6a:88:72:27:41:91:6f:d7:8c:d2:f6:f0:a4:18:8f:
                    25:0d:d9:0f:23:cd:9e:4c:5f:04:38:a7:91:6d:c3:
                    e5:e8:82:b6:51:6c:e1:c4:25:50:9f:62:e6:f8:98:
                    54:5a:f4:4a:15:29:a7:45:0e:b4:24:dc:1a:dc:59:
                    b3:64:b2:7b:d5:99:ea:d9:fc:32:e8:b5:1b:21:3d:
                    0d:f3:73:53:c8:04:70:47:9e:f2:38:db:5a:35:71:
                    1a:42:f5:84:6e:8d:2d:c0:85:7b:b7:84:8a:77:e4:
                    19:e9:2f:5b:ee:ba:82:df:20:f8:a7:05:29:9a:6d:
                    62:27:2f:da:2b:ca:6b:cc:91:fd:a0:06:89:0a:36:
                    52:25:a0:2b:b4:78:9a:60:9a:9c:29:5f:83:bd:e0:
                    81:1a:fe:b3:87:e3:81:55:d6:da:f2:ea:9a:4d:f2:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:88:E2:DB:FB:9B:FC:E0:66:04:7F:25:2D:47:5E:F4:D3:AF:99
            X509v3 Authority Key Identifier:
                keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e3:df:85:2b:94:f9:48:55:ee:43:a4:88:41:44:95:5f:57:
         b7:89:ef:40:e5:63:dc:d4:29:0e:22:bf:bf:39:b1:5a:4b:6a:
         b3:8f:68:84:d2:49:a3:02:c0:45:c5:cd:bb:4d:6f:50:ac:c8:
         66:5b:26:32:65:29:c8:be:6a:f6:00:05:7d:11:f7:7a:f7:9b:
         66:fb:3a:53:c9:81:e7:f2:27:d1:62:17:4b:f7:74:e0:9c:2a:
         32:cb:3d:cb:a3:48:f0:fe:51:64:d6:8b:5e:9a:cf:d2:bf:a8:
         a6:05:af:3d:9c:ee:e0:09:79:2b:a5:5f:3a:46:3b:c7:55:0d:
         85:8e:a2:b7:43:33:8b:26:c9:48:ab:3f:d8:13:67:43:41:d6:
         f5:59:31:09:d6:ff:26:e3:85:ad:9f:f4:cf:ae:57:19:09:1e:
         22:9c:ea:e6:85:b2:2f:b0:fd:81:de:7b:6c:20:79:f0:10:a8:
         7f:75:e2:93:38:0e:a3:a4:cb:87:60:2f:96:cb:ce:d2:d4:97:
         e2:81:a3:2b:5d:87:47:a8:bf:7c:66:fd:c5:18:6a:2a:7c:65:
         5d:c4:97:99:75:67:97:72:9d:be:83:ec:a1:95:b3:80:51:53:
         da:93:c0:fb:c8:a6:79:7b:95:ac:4d:7f:ac:77:75:5c:83:19:
         c5:d2:83:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRtYzvVoSvXt0/Mc+ZQyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi
ZWQxNjYwHhcNMjQxMTI2MjEwMDQ3WhcNMjQxMTI3MjEwMDQ3WjAzMTEwLwYDVQQD
EyhlZTA4ODhlMmRiZmI5YmZjZTA2NjA0N2YyNTJkNDc1ZWY0ZDNhZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPAFBxTyAY7dMoq9Etv8PYTe+Wa
r9bPG15bFsbrJCQ/CCFLZb0wj2V2wSXftkZ4+yl9QR7fM3GHC8QzGz4vAyn7mzdi
TF/W9eEhOUhc5HmBepFRQrGSdSZqiHInQZFv14zS9vCkGI8lDdkPI82eTF8EOKeR
bcPl6IK2UWzhxCVQn2Lm+JhUWvRKFSmnRQ60JNwa3FmzZLJ71Znq2fwy6LUbIT0N
83NTyARwR57yONtaNXEaQvWEbo0twIV7t4SKd+QZ6S9b7rqC3yD4pwUpmm1iJy/a
K8przJH9oAaJCjZSJaArtHiaYJqcKV+DveCBGv6zh+OBVdba8uqaTfIUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4IiOLb+5v84GYEfyUtR17006+ZMB8GA1UdIwQY
MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt
N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz
LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkePfhSuU
+UhV7kOkiEFElV9Xt4nvQOVj3NQpDiK/vzmxWktqs49ohNJJowLARcXNu01vUKzI
ZlsmMmUpyL5q9gAFfRH3evebZvs6U8mB5/In0WIXS/d04JwqMss9y6NI8P5RZNaL
XprP0r+opgWvPZzu4Al5K6VfOkY7x1UNhY6it0MziybJSKs/2BNnQ0HW9VkxCdb/
JuOFrZ/0z65XGQkeIpzq5oWyL7D9gd57bCB58BCof3XikzgOo6TLh2AvlsvO0tSX
4oGjK12HR6i/fGb9xRhqKnxlXcSXmXVnl3KdvoPsoZWzgFFT2pPA+8imeXuVrE1/
rHd1XIMZxdKDqA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:01 2024 by rpki-client on console-fra.rpki-client.org