Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File:                     _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier:          8TmLgN06qNj6gYt94kzTP+yVgNDeRxIlg33i9Uk1HXI=
Subject key identifier:   D7:0E:14:F1:DF:71:F8:7E:6F:31:62:C3:26:A7:55:5A:4D:82:29:8A
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer:       /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial:       01935688EB6B09361322B221875957B4C2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number:          017B
Signing time:             Sat 23 Nov 2024 01:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:33 +0000
Files and hashes:         1: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: r2pK5hUpoKMyvx3hfQz9u+YqmKobCgrOI12m66q+5yM=)
                          2: r2iL_vycBtnZcrKFB53C0L4TLSA.roa (hash: svOIFUas+I90031d6I9m9byTmGQM3OA9A8xZ3lEKiCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:eb:6b:09:36:13:22:b2:21:87:59:57:b4:c2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
        Validity
            Not Before: Nov 23 01:00:33 2024 GMT
            Not After : Nov 24 01:00:33 2024 GMT
        Subject: CN=d70e14f1df71f87e6f3162c326a7555a4d82298a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:05:bb:63:04:93:a9:b8:65:70:69:e7:b4:
                    e9:34:cc:68:11:b9:ed:f9:df:51:c5:a2:8a:57:cf:
                    d8:54:ab:40:6a:66:d4:44:7b:b7:3b:f5:ec:9e:0e:
                    c6:48:23:79:f8:c8:ee:21:e9:54:81:ea:13:19:5b:
                    d2:37:54:fe:a5:ee:b6:29:f0:81:7b:9b:ed:1d:8c:
                    e7:cf:33:01:d8:f4:37:03:c8:5c:c0:8b:f7:51:30:
                    f0:34:5f:44:65:c8:e3:a6:e0:ff:1a:6a:2f:36:5b:
                    77:8a:cb:60:a2:9c:3a:89:2d:c6:89:4b:59:01:c6:
                    85:51:a5:2e:89:46:4f:7b:5a:5e:ba:0a:b3:48:8e:
                    5e:0c:0a:d1:4b:e0:50:92:99:8c:fa:a3:ee:67:4d:
                    25:da:51:85:c1:2e:0b:94:9c:c7:04:fb:74:aa:2a:
                    b7:ad:c4:1a:71:81:3e:f2:2f:f6:45:1a:f5:4b:89:
                    81:91:db:85:fd:25:1f:71:a1:cc:29:dd:a1:25:7d:
                    49:fb:20:66:ec:21:04:08:d3:1f:79:9e:20:c9:4c:
                    47:53:9a:a0:3c:be:8b:9e:7e:92:06:1b:c0:c9:6f:
                    30:e6:98:43:41:a0:ca:a2:9d:55:cb:ac:0b:fc:8b:
                    bb:5e:aa:7b:b5:67:f1:74:06:2b:12:0d:ce:44:41:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0E:14:F1:DF:71:F8:7E:6F:31:62:C3:26:A7:55:5A:4D:82:29:8A
            X509v3 Authority Key Identifier:
                keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:02:1b:8a:1f:f8:ae:ce:e5:8b:61:6d:c0:25:b4:4b:d1:9a:
         b2:8e:51:ac:97:a2:d9:57:c7:48:1a:b4:2b:0e:7b:e9:99:bb:
         4c:5f:29:90:82:e0:41:c4:70:1a:5e:82:9a:d3:fd:19:78:d7:
         8f:d9:e7:c5:9a:ae:55:19:dd:b6:c9:50:8f:cd:65:9a:8d:c9:
         cb:92:2c:a6:0b:66:79:c7:75:a7:32:14:8b:75:80:72:48:ee:
         33:e6:a7:5d:8b:fb:e7:74:08:2c:b0:9a:32:86:b1:be:7c:51:
         d8:8c:9f:8b:5e:70:dd:07:af:69:b5:19:f6:fc:2a:21:d6:c3:
         73:4c:3d:c9:02:0b:bd:85:db:7c:00:47:9b:24:37:39:9c:e3:
         d3:f5:12:dd:c3:2b:12:10:e5:94:da:e8:e1:e8:90:5e:b9:6a:
         94:29:75:e9:43:c9:95:8a:b0:69:de:15:ef:88:cf:9d:d0:1c:
         a9:51:7d:a3:f1:35:f5:ec:59:d1:5e:fa:48:1b:bb:08:0f:92:
         c6:0e:b0:78:bd:3a:9a:bb:34:ce:61:dd:12:71:d4:cb:fa:d7:
         45:0e:87:8f:34:03:01:65:5b:63:8b:06:19:0c:26:09:cb:25:
         01:9d:95:a5:5c:f0:9d:ba:c2:f3:3b:93:9d:5e:0d:dc:1d:66:
         84:7f:87:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiOtrCTYTIrIhh1lXtMLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw
NGU3ZGUwHhcNMjQxMTIzMDEwMDMzWhcNMjQxMTI0MDEwMDMzWjAzMTEwLwYDVQQD
EyhkNzBlMTRmMWRmNzFmODdlNmYzMTYyYzMyNmE3NTU1YTRkODIyOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVUFu2MEk6m4ZXBp57TpNMxoEbnt
+d9RxaKKV8/YVKtAambURHu3O/Xsng7GSCN5+MjuIelUgeoTGVvSN1T+pe62KfCB
e5vtHYznzzMB2PQ3A8hcwIv3UTDwNF9EZcjjpuD/GmovNlt3istgopw6iS3GiUtZ
AcaFUaUuiUZPe1peugqzSI5eDArRS+BQkpmM+qPuZ00l2lGFwS4LlJzHBPt0qiq3
rcQacYE+8i/2RRr1S4mBkduF/SUfcaHMKd2hJX1J+yBm7CEECNMfeZ4gyUxHU5qg
PL6Lnn6SBhvAyW8w5phDQaDKop1Vy6wL/Iu7Xqp7tWfxdAYrEg3OREEANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcOFPHfcfh+bzFiwyanVVpNgimKMB8GA1UdIwQY
MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt
Y2FmMmY3YTViNWY0LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0
LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwIbih/4
rs7li2FtwCW0S9Gaso5RrJei2VfHSBq0Kw576Zm7TF8pkILgQcRwGl6CmtP9GXjX
j9nnxZquVRndtslQj81lmo3Jy5Ispgtmecd1pzIUi3WAckjuM+anXYv753QILLCa
MoaxvnxR2Iyfi15w3QevabUZ9vwqIdbDc0w9yQILvYXbfABHmyQ3OZzj0/US3cMr
EhDllNro4eiQXrlqlCl16UPJlYqwad4V74jPndAcqVF9o/E19exZ0V76SBu7CA+S
xg6weL06mrs0zmHdEnHUy/rXRQ6HjzQDAWVbY4sGGQwmCcslAZ2VpVzwnbrC8zuT
nV4N3B1mhH+HJA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:23 2024 by rpki-client on console-fra.rpki-client.org