Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File:                     Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier:          8cwECGOQ6pj4Tzg4WZ2aNexaT2vNTQKTFQSr6e+ptnA=
Subject key identifier:   B3:72:6B:12:1C:4C:D2:D6:C6:61:A7:9B:E4:D8:64:BC:7C:DB:A4:87
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer:       /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial:       018F86A36F18171B9B1D2BBEDFF592A133E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number:          0E7B
Signing time:             Fri 17 May 2024 13:00:08 +0000
Manifest this update:     Fri 17 May 2024 13:00:08 +0000
Manifest next update:     Sat 18 May 2024 13:00:08 +0000
Files and hashes:         1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: 3U45xqop1brXq9HYVo/4q3/xCi9ZQ9EZUEjRLYFdfLQ=)
                          2: ynJOzKhZqPgLO_94rsKMqHNrknE.roa (hash: +QB32yQ/kr3/CNhwqd/3RIlPeZwGXmco98nCOBC57rE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:6f:18:17:1b:9b:1d:2b:be:df:f5:92:a1:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
        Validity
            Not Before: May 17 13:00:08 2024 GMT
            Not After : May 18 13:00:08 2024 GMT
        Subject: CN=b3726b121c4cd2d6c661a79be4d864bc7cdba487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:15:cf:65:e6:59:bf:9d:a9:a6:eb:6c:3c:
                    a5:df:f8:a1:f4:d6:13:81:1a:80:36:be:cc:3d:2e:
                    ac:d9:cd:b9:d6:c8:48:89:53:b0:6f:37:98:71:18:
                    fd:e4:6a:72:4e:89:7f:0a:f9:4e:e5:b2:b5:7b:1c:
                    7a:52:82:9b:35:45:34:d1:91:88:70:5f:fa:f1:71:
                    ef:56:09:8f:04:bf:b4:1a:d3:8d:4c:d7:e8:7a:46:
                    ff:07:6c:f7:4c:03:8d:10:c6:4a:16:ec:1b:1b:5c:
                    d2:a5:93:2b:19:7e:98:be:5d:83:74:71:58:63:8e:
                    1d:e0:43:9f:d0:2e:98:a8:dd:d5:77:96:bd:b4:da:
                    ea:0a:ae:a0:09:0b:37:26:a9:72:df:6d:7b:52:1c:
                    12:97:2a:b7:f2:f8:18:1b:0d:8c:c9:de:f3:e1:c3:
                    5c:3f:23:45:4e:80:2e:96:c2:86:83:83:69:22:3c:
                    2a:00:d7:2f:16:ce:91:e0:27:43:42:20:6d:51:5d:
                    e0:d1:df:06:af:b3:85:2c:b9:f3:8d:84:50:fc:94:
                    78:32:89:20:2e:ac:b5:37:eb:6d:21:52:11:c2:e3:
                    3d:3a:ab:47:e4:70:f9:cf:dc:f1:42:d2:55:57:43:
                    6e:48:20:96:e1:2a:22:f2:37:2f:a1:06:ee:3e:14:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:72:6B:12:1C:4C:D2:D6:C6:61:A7:9B:E4:D8:64:BC:7C:DB:A4:87
            X509v3 Authority Key Identifier:
                keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:78:29:da:2a:50:89:1c:a2:c0:d8:42:b1:94:bf:16:61:46:
         2d:61:e6:f4:ce:a6:c8:6a:f1:47:58:da:ce:21:72:ea:0a:f6:
         a3:03:9a:b9:64:64:9c:d1:9d:32:64:64:49:df:42:9d:3c:84:
         c6:8e:9c:92:00:cb:ac:3e:ba:67:6b:00:92:fd:e2:60:63:cc:
         0a:68:85:1c:92:01:df:39:07:be:10:f9:5b:a9:2f:a3:87:f5:
         43:46:41:82:02:3d:98:2b:b0:4e:52:f8:4f:63:fa:c7:e4:52:
         dc:4b:78:d4:43:8d:c3:75:2d:e9:a9:66:a6:e5:44:8e:09:1e:
         5e:8a:70:28:f6:72:a3:a9:26:d4:49:15:78:58:4f:41:e8:42:
         e8:31:be:27:f2:26:8e:06:09:82:f8:66:fd:45:c2:67:3e:e6:
         34:73:f8:42:63:7c:fd:2e:b5:4c:b8:1f:ce:c0:e7:c6:e4:2f:
         04:d4:f7:bb:22:04:3a:b4:25:17:73:89:07:b6:22:7d:02:0b:
         4b:77:a3:c7:dc:46:a8:52:7d:4c:86:97:a7:1b:1b:b4:79:57:
         2b:12:f8:f7:6b:db:b2:2b:25:38:8e:d0:de:8f:fc:e6:ff:4e:
         90:a8:b3:37:df:9c:98:0d:24:62:46:34:a1:c0:77:02:48:c6:
         1f:55:a8:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go28YFxubHSu+3/WSoTPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzAzY2E1MGM0MzJhY2Q3ZjFjYmJhN2MwN2RhMjIwMjI5
OWNhNjMwHhcNMjQwNTE3MTMwMDA4WhcNMjQwNTE4MTMwMDA4WjAzMTEwLwYDVQQD
EyhiMzcyNmIxMjFjNGNkMmQ2YzY2MWE3OWJlNGQ4NjRiYzdjZGJhNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrwVz2XmWb+dqabrbDyl3/ih9NYT
gRqANr7MPS6s2c251shIiVOwbzeYcRj95GpyTol/CvlO5bK1exx6UoKbNUU00ZGI
cF/68XHvVgmPBL+0GtONTNfoekb/B2z3TAONEMZKFuwbG1zSpZMrGX6Yvl2DdHFY
Y44d4EOf0C6YqN3Vd5a9tNrqCq6gCQs3Jqly3217UhwSlyq38vgYGw2Myd7z4cNc
PyNFToAulsKGg4NpIjwqANcvFs6R4CdDQiBtUV3g0d8Gr7OFLLnzjYRQ/JR4Mokg
Lqy1N+ttIVIRwuM9OqtH5HD5z9zxQtJVV0NuSCCW4Soi8jcvoQbuPhT8WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNyaxIcTNLWxmGnm+TYZLx826SHMB8GA1UdIwQY
MBaAFGNwPKUMQyrNfxy7p8B9oiAimcpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNBOHBReERLczFfSEx1bndIMmlJQ0taeW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hZjMzNGEtZjliMy00MTlkLWI1OTAt
ZmIwZmIxYzA2Yzc0LzEvWTNBOHBReERLczFfSEx1bndIMmlJQ0taeW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9hZjMzNGEtZjliMy00MTlkLWI1OTAtZmIwZmIxYzA2Yzc0
LzEvWTNBOHBReERLczFfSEx1bndIMmlJQ0taeW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmngp2ipQ
iRyiwNhCsZS/FmFGLWHm9M6myGrxR1jaziFy6gr2owOauWRknNGdMmRkSd9CnTyE
xo6ckgDLrD66Z2sAkv3iYGPMCmiFHJIB3zkHvhD5W6kvo4f1Q0ZBggI9mCuwTlL4
T2P6x+RS3Et41EONw3Ut6almpuVEjgkeXopwKPZyo6km1EkVeFhPQehC6DG+J/Im
jgYJgvhm/UXCZz7mNHP4QmN8/S61TLgfzsDnxuQvBNT3uyIEOrQlF3OJB7YifQIL
S3ejx9xGqFJ9TIaXpxsbtHlXKxL492vbsislOI7Q3o/85v9OkKizN9+cmA0kYkY0
ocB3AkjGH1WoMQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:23:17 2024 by rpki-client on console-ams.rpki-client.org