Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File:                     yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier:          ipuxZLWp81coa20mHwKNqCG6yULCTYyFakWctTVi/MM=
Subject key identifier:   97:53:B3:CC:15:D8:1C:49:B7:BD:85:1B:1E:5B:8B:75:8D:4F:DE:B2
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer:       /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial:       018F874A27C2B240E40029C78CB163360F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number:          0E0B
Signing time:             Fri 17 May 2024 16:02:15 +0000
Manifest this update:     Fri 17 May 2024 16:02:15 +0000
Manifest next update:     Sat 18 May 2024 16:02:15 +0000
Files and hashes:         1: 22SVnuvj0xWyz_V6mn4eZHGW6dU.roa (hash: GFiDhx58X2VSo0AdGxHCBOxI94vWMZpsJD39Xvn31xU=)
                          2: I5I-yqyly4uilMkSjsc9Bls9uOo.roa (hash: 4mzykZF6JiXPpIXRtIL27Fc5FKRTlwpG6UieC4glMwE=)
                          3: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: YSs2sbziGcC0wNX38+p6NdF03fPE4ZLsGYnQ1tPcr0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:27:c2:b2:40:e4:00:29:c7:8c:b1:63:36:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
        Validity
            Not Before: May 17 16:02:15 2024 GMT
            Not After : May 18 16:02:15 2024 GMT
        Subject: CN=9753b3cc15d81c49b7bd851b1e5b8b758d4fdeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:43:b6:05:6b:ac:37:6f:09:20:59:89:b7:
                    9b:da:12:15:e6:4d:e0:68:a0:ab:30:cc:98:df:99:
                    ce:dd:96:f5:f1:c2:db:fd:3e:f3:49:ee:1f:46:bf:
                    ff:f3:d5:14:c7:47:41:52:44:2b:40:e1:7c:e8:da:
                    5e:52:8f:65:65:5a:24:85:7a:e8:78:c3:9f:64:9e:
                    59:0e:f0:a3:b6:1f:65:4d:4c:16:b5:c1:6d:62:be:
                    df:56:3f:0d:fe:5f:58:00:cd:34:5f:c1:b4:34:a1:
                    da:6b:77:3d:d6:20:f6:73:ba:5c:70:99:ef:eb:66:
                    59:4c:43:07:53:0c:b9:d8:d6:28:0e:72:4e:32:56:
                    14:56:9e:cb:72:74:85:5c:7f:11:0a:2b:68:2e:ae:
                    b1:b1:25:17:f7:73:3f:c9:8a:1c:42:b4:b5:11:0e:
                    7d:c1:91:ab:e1:dc:01:87:34:4a:4e:f7:87:d3:fc:
                    ca:38:a7:47:cb:9d:8a:a9:19:88:d1:14:af:ac:51:
                    95:57:13:ac:79:3e:0d:c6:fb:f6:84:a8:9c:e1:6e:
                    09:58:b5:c3:fa:9d:46:1f:fd:71:d5:91:5b:51:5c:
                    80:0d:81:32:b3:02:b8:96:7e:4c:28:bb:37:39:bb:
                    50:e4:0f:0f:99:ef:00:92:25:a7:44:aa:98:04:28:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:53:B3:CC:15:D8:1C:49:B7:BD:85:1B:1E:5B:8B:75:8D:4F:DE:B2
            X509v3 Authority Key Identifier:
                keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:20:3e:e8:eb:6c:34:00:09:96:86:bd:62:4a:e5:e1:12:16:
         85:27:92:e2:a5:e0:bd:c7:0a:b4:94:56:18:e4:9f:9e:2b:69:
         b7:9e:f2:89:95:20:b6:f7:2b:ba:8e:8f:c8:bd:cf:70:08:1c:
         5f:f2:54:1d:f7:33:f5:63:8f:94:8c:02:c5:0f:09:3d:ae:04:
         e7:1a:63:78:6c:85:7b:49:8b:57:6f:26:e1:bf:4e:bb:ed:6e:
         73:e4:4e:2a:30:63:e5:2d:f0:1f:65:ee:88:20:f5:fc:0d:89:
         c0:b7:31:db:e4:3e:05:f7:42:f5:37:14:ba:5e:6f:ca:04:d5:
         33:ba:03:0f:f6:5e:6e:77:d5:4c:8d:5c:3a:c0:84:03:9b:94:
         3f:8d:2b:14:44:37:49:a4:3f:55:60:db:bf:30:03:9b:c1:d7:
         df:fd:f3:ad:2c:67:5e:d6:ff:65:bb:01:ea:a0:3c:27:e5:de:
         2b:12:af:d3:fb:c8:c1:48:11:88:db:d6:a7:6b:40:f6:cf:68:
         74:fd:bb:95:67:3e:a7:b0:a3:16:55:65:32:6c:07:40:44:e7:
         5d:5d:a2:e3:4c:c3:43:3b:20:37:a8:24:db:3e:ec:06:8b:59:
         df:21:55:af:d0:0b:84:dd:77:55:b4:23:24:45:b8:d3:24:68:
         b3:13:85:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSifCskDkACnHjLFjNg9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjIwNmY1MDZjODI2ZWIxMDU3ZTVjMjY5YjM3MTBlMzhh
YjY5NmMwHhcNMjQwNTE3MTYwMjE1WhcNMjQwNTE4MTYwMjE1WjAzMTEwLwYDVQQD
Eyg5NzUzYjNjYzE1ZDgxYzQ5YjdiZDg1MWIxZTViOGI3NThkNGZkZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8dDtgVrrDdvCSBZibeb2hIV5k3g
aKCrMMyY35nO3Zb18cLb/T7zSe4fRr//89UUx0dBUkQrQOF86NpeUo9lZVokhXro
eMOfZJ5ZDvCjth9lTUwWtcFtYr7fVj8N/l9YAM00X8G0NKHaa3c91iD2c7pccJnv
62ZZTEMHUwy52NYoDnJOMlYUVp7LcnSFXH8RCitoLq6xsSUX93M/yYocQrS1EQ59
wZGr4dwBhzRKTveH0/zKOKdHy52KqRmI0RSvrFGVVxOseT4Nxvv2hKic4W4JWLXD
+p1GH/1x1ZFbUVyADYEyswK4ln5MKLs3ObtQ5A8Pme8AkiWnRKqYBCgg/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdTs8wV2BxJt72FGx5bi3WNT96yMB8GA1UdIwQY
MBaAFMgiBvUGyCbrEFflwmmzcQ44q2lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMt
NjFiMGM3ZmYyZTRlLzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMtNjFiMGM3ZmYyZTRl
LzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSA+6Ots
NAAJloa9Ykrl4RIWhSeS4qXgvccKtJRWGOSfnitpt57yiZUgtvcruo6PyL3PcAgc
X/JUHfcz9WOPlIwCxQ8JPa4E5xpjeGyFe0mLV28m4b9Ou+1uc+ROKjBj5S3wH2Xu
iCD1/A2JwLcx2+Q+BfdC9TcUul5vygTVM7oDD/ZebnfVTI1cOsCEA5uUP40rFEQ3
SaQ/VWDbvzADm8HX3/3zrSxnXtb/ZbsB6qA8J+XeKxKv0/vIwUgRiNvWp2tA9s9o
dP27lWc+p7CjFlVlMmwHQETnXV2i40zDQzsgN6gk2z7sBotZ3yFVr9ALhN13VbQj
JEW40yRosxOFyg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:41:32 2024 by rpki-client on console-fra.rpki-client.org