Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File:                     yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier:          CgxUnNkoWwRJrVk+rn9cpz31xLrZAzgHyR5bOZuO1lU=
Subject key identifier:   71:D6:10:A9:9A:A0:E6:2F:F6:DF:44:E2:43:53:8D:90:1E:A4:F5:F8
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer:       /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial:       019356899786B2B818E9AC7024D519A5A207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number:          0319
Signing time:             Sat 23 Nov 2024 01:01:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:18 +0000
Files and hashes:         1: tzyKlyRknVzoOtD5Rm3-ypzIAFk.roa (hash: VDe/57UCwA+z4M/nsrgjI1Mugo0q8Jtsrp2Rozd8f1c=)
                          2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: 7bznLzFrPWCNVmo9yEWaNDYHsA3hRaMhLiAdV++iHNk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:97:86:b2:b8:18:e9:ac:70:24:d5:19:a5:a2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
        Validity
            Not Before: Nov 23 01:01:18 2024 GMT
            Not After : Nov 24 01:01:18 2024 GMT
        Subject: CN=71d610a99aa0e62ff6df44e243538d901ea4f5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:57:aa:25:63:4f:55:da:10:bd:11:46:cf:
                    01:b3:66:d5:69:2c:c7:3f:3d:32:84:ed:b4:e4:13:
                    f4:ce:c9:3d:ad:68:86:33:65:a4:ea:7d:fe:fb:f4:
                    cf:a2:f0:a2:d7:c7:21:7a:f7:18:1a:18:95:ff:2e:
                    4d:08:bf:65:ff:4d:5d:60:f4:a1:d8:42:b8:bd:d5:
                    82:93:dd:f0:09:d4:c5:3a:51:4d:11:cc:6b:af:b2:
                    9f:db:59:b6:35:6c:7d:10:a3:82:93:ad:7e:52:0d:
                    42:07:9d:be:5e:38:99:d7:b6:7a:21:a0:e5:1f:0e:
                    63:46:d9:e5:63:be:cc:ef:ee:9a:22:29:37:40:93:
                    56:6c:b6:0d:85:7f:e1:18:4a:a5:40:7a:eb:cb:2c:
                    5c:2d:10:a4:15:fc:7b:4c:1e:41:f5:83:52:35:9f:
                    32:a9:1d:c7:97:13:f3:2f:5b:76:42:8e:b3:ef:d8:
                    38:35:66:65:91:84:d7:26:0d:79:a8:ea:0a:87:44:
                    13:45:93:a0:01:9f:a9:a2:29:77:4c:f1:23:7b:b9:
                    72:fc:e5:ac:e7:ae:82:b5:d2:6a:95:01:5e:63:9b:
                    57:0f:38:9c:0a:5d:d2:ee:23:de:32:58:f8:ca:b2:
                    96:e4:c3:85:5c:46:f6:b8:bd:23:4b:80:26:09:c4:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:10:A9:9A:A0:E6:2F:F6:DF:44:E2:43:53:8D:90:1E:A4:F5:F8
            X509v3 Authority Key Identifier:
                keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:83:51:53:6f:ad:1e:8e:7c:1b:b5:b8:46:59:2c:39:67:51:
         33:04:59:c5:88:a5:4f:2b:7a:87:69:6e:8e:12:25:52:0f:6f:
         a0:a2:25:ec:5a:8e:82:10:be:84:d8:3d:d4:7f:e4:45:06:52:
         bd:54:21:d2:ce:36:84:a2:62:b9:f6:8a:bf:3c:be:3f:76:90:
         94:0e:27:db:b8:2b:97:f3:5a:96:0a:5d:e2:a8:a4:41:fe:9b:
         55:08:9a:79:7e:46:55:92:44:a6:9d:13:0d:cb:43:59:a9:6f:
         b2:8b:2b:05:fb:f6:da:38:6f:a5:11:6e:5f:24:f2:72:28:53:
         ed:9f:f0:d9:77:a1:92:d7:8e:c3:1c:8a:94:ce:97:1c:66:6a:
         bf:af:8f:32:ce:f1:cd:ce:a1:a8:bf:e9:7e:53:f7:82:37:4c:
         89:3c:b1:3a:80:47:9e:5f:5c:b3:b1:21:b8:29:8c:d4:5f:b8:
         61:1a:eb:7e:2c:86:0a:58:5e:05:9f:1f:7e:13:00:e5:d3:74:
         57:8b:32:20:7b:28:2d:44:99:3f:96:34:39:7b:94:65:bb:4c:
         19:09:f8:f6:b5:87:00:62:74:0d:4d:e3:62:ed:1a:47:d4:31:
         0f:d0:51:bf:5e:df:ee:f3:86:cd:2d:83:91:b8:53:56:04:a4:
         04:a5:18:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiZeGsrgY6axwJNUZpaIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU3MzE2Yjg0MWQ3NzNkY2I3OWFkZThhOGYzZTcyNTlm
MTEyYWIwHhcNMjQxMTIzMDEwMTE4WhcNMjQxMTI0MDEwMTE4WjAzMTEwLwYDVQQD
Eyg3MWQ2MTBhOTlhYTBlNjJmZjZkZjQ0ZTI0MzUzOGQ5MDFlYTRmNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1ZXqiVjT1XaEL0RRs8Bs2bVaSzH
Pz0yhO205BP0zsk9rWiGM2Wk6n3++/TPovCi18chevcYGhiV/y5NCL9l/01dYPSh
2EK4vdWCk93wCdTFOlFNEcxrr7Kf21m2NWx9EKOCk61+Ug1CB52+XjiZ17Z6IaDl
Hw5jRtnlY77M7+6aIik3QJNWbLYNhX/hGEqlQHrryyxcLRCkFfx7TB5B9YNSNZ8y
qR3HlxPzL1t2Qo6z79g4NWZlkYTXJg15qOoKh0QTRZOgAZ+poil3TPEje7ly/OWs
566CtdJqlQFeY5tXDzicCl3S7iPeMlj4yrKW5MOFXEb2uL0jS4AmCcSSAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHWEKmaoOYv9t9E4kNTjZAepPX4MB8GA1UdIwQY
MBaAFMslcxa4Qddz3Lea3oqPPnJZ8RKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWekZyaEIxM1BjdDVyZWlvOC1jbG54RXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTJjOTAtMGVlYi00ZmMyLWE3ZTEt
YmExNGU3NjU0OGU4LzEveXlWekZyaEIxM1BjdDVyZWlvOC1jbG54RXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTJjOTAtMGVlYi00ZmMyLWE3ZTEtYmExNGU3NjU0OGU4
LzEveXlWekZyaEIxM1BjdDVyZWlvOC1jbG54RXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoINRU2+t
Ho58G7W4RlksOWdRMwRZxYilTyt6h2lujhIlUg9voKIl7FqOghC+hNg91H/kRQZS
vVQh0s42hKJiufaKvzy+P3aQlA4n27grl/Nalgpd4qikQf6bVQiaeX5GVZJEpp0T
DctDWalvsosrBfv22jhvpRFuXyTycihT7Z/w2XehkteOwxyKlM6XHGZqv6+PMs7x
zc6hqL/pflP3gjdMiTyxOoBHnl9cs7EhuCmM1F+4YRrrfiyGClheBZ8ffhMA5dN0
V4syIHsoLUSZP5Y0OXuUZbtMGQn49rWHAGJ0DU3jYu0aR9QxD9BRv17f7vOGzS2D
kbhTVgSkBKUYYQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:31 2024 by rpki-client on console-ams.rpki-client.org