Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File:                     DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier:          zJ4wz5oPVgYQbfcFaKOB+GEkcZK0H0k1z5KOEn7xOrI=
Subject key identifier:   26:46:39:A7:2A:B9:44:B8:58:35:09:9D:E3:7C:8C:80:24:1A:87:AE
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer:       /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial:       018F1F6DFAB19C84D44017C1D07FB6148360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number:          091A
Signing time:             Sat 27 Apr 2024 12:00:52 +0000
Manifest this update:     Sat 27 Apr 2024 12:00:52 +0000
Manifest next update:     Sun 28 Apr 2024 12:00:52 +0000
Files and hashes:         1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: gjQ0GDMGJs77RxE/3aiQHkvNOWga5kIn2NchESBMLkU=)
                          2: O6-dfOev8yaKn98fACfFT0Mkusg.roa (hash: mQAnPAiR/xbOAfOitYaHBp75M/UuTtzZc3tcukrCE4U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:6d:fa:b1:9c:84:d4:40:17:c1:d0:7f:b6:14:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
        Validity
            Not Before: Apr 27 12:00:52 2024 GMT
            Not After : Apr 28 12:00:52 2024 GMT
        Subject: CN=264639a72ab944b85835099de37c8c80241a87ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:cd:57:e3:84:08:c5:11:d4:19:e7:2e:f0:
                    ec:e0:6c:cf:3f:a7:7c:d9:f8:b0:3a:dd:ff:20:9e:
                    d5:fe:37:54:4b:a4:aa:e4:6f:05:30:93:50:f6:10:
                    5e:fd:6e:7e:3f:7c:a9:ec:06:ef:f4:1e:70:9d:04:
                    6e:8a:bb:af:4b:5a:ff:73:e2:63:01:5b:4d:43:45:
                    b1:95:45:ce:ca:98:1f:58:f7:a1:05:bb:a1:33:7f:
                    1a:9f:22:ec:ac:42:73:a4:c8:0f:2a:31:20:63:b3:
                    86:41:77:9d:b1:62:a3:aa:89:2a:08:a9:b8:7c:ce:
                    93:85:dc:d3:a7:db:b9:c1:3d:1e:4e:e1:dd:86:01:
                    82:ab:02:b4:76:02:2c:d7:ef:b9:60:85:d6:0d:13:
                    44:cc:41:7d:b0:b6:05:ad:3a:ca:ce:11:5f:5d:9c:
                    fa:f8:19:ff:d2:3d:01:a4:1d:9e:7c:61:a3:42:2a:
                    70:46:3f:9c:e9:41:3c:24:19:06:f3:60:97:95:95:
                    5d:64:89:09:98:44:92:08:c1:a3:10:52:53:09:c5:
                    e1:09:9d:4e:ad:40:de:2f:ba:e6:62:58:3c:a8:ed:
                    28:f2:7d:a6:ae:fa:b0:ec:fa:22:8c:3e:29:2e:af:
                    32:f6:25:59:9d:53:68:87:80:c0:e2:d7:00:61:45:
                    a0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:46:39:A7:2A:B9:44:B8:58:35:09:9D:E3:7C:8C:80:24:1A:87:AE
            X509v3 Authority Key Identifier:
                keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:a4:35:de:53:61:55:36:ff:10:7c:d0:08:30:a9:e3:f9:
         79:f3:1f:cd:e9:b2:ec:15:84:a1:95:1b:5e:92:ca:c2:7e:00:
         1d:77:ce:67:ff:8a:5b:1e:08:2e:9c:e6:06:d3:88:06:0d:14:
         89:bc:30:95:13:77:48:a6:27:f9:03:7d:e1:4f:95:08:d2:cc:
         46:dd:d0:2e:ab:6c:35:6e:03:be:40:e0:91:65:7c:c7:e8:af:
         77:c3:48:50:4c:33:90:a8:3c:5c:bf:c1:be:0e:cb:e1:9b:94:
         af:5f:4a:40:ac:53:45:e5:b3:2c:f4:4e:42:56:61:a4:24:5b:
         7d:56:ca:70:46:01:c5:c7:66:21:aa:f8:58:c7:6e:f3:f5:cf:
         b7:21:26:d6:3c:ad:19:72:3d:3d:9a:06:6b:11:c5:e3:9c:de:
         93:d2:92:5d:98:66:0d:57:21:6f:cf:89:ce:5e:77:34:31:a8:
         00:b9:23:63:ac:7f:31:a4:64:58:70:3b:66:75:55:d4:6c:51:
         4a:33:66:67:07:8a:ca:5c:d2:25:22:09:94:1d:28:ba:75:a5:
         ae:73:80:f9:3b:56:30:36:33:6d:55:f7:49:11:db:e8:b8:7a:
         47:b9:68:7a:70:e5:63:a0:3a:84:89:0f:d6:08:c8:69:3c:a6:
         06:7c:df:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8fbfqxnITUQBfB0H+2FINgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjQwNDI3MTIwMDUyWhcNMjQwNDI4MTIwMDUyWjAzMTEwLwYDVQQD
EygyNjQ2MzlhNzJhYjk0NGI4NTgzNTA5OWRlMzdjOGM4MDI0MWE4N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9/NV+OECMUR1BnnLvDs4GzPP6d8
2fiwOt3/IJ7V/jdUS6Sq5G8FMJNQ9hBe/W5+P3yp7Abv9B5wnQRuiruvS1r/c+Jj
AVtNQ0WxlUXOypgfWPehBbuhM38anyLsrEJzpMgPKjEgY7OGQXedsWKjqokqCKm4
fM6ThdzTp9u5wT0eTuHdhgGCqwK0dgIs1++5YIXWDRNEzEF9sLYFrTrKzhFfXZz6
+Bn/0j0BpB2efGGjQipwRj+c6UE8JBkG82CXlZVdZIkJmESSCMGjEFJTCcXhCZ1O
rUDeL7rmYlg8qO0o8n2mrvqw7PoijD4pLq8y9iVZnVNoh4DA4tcAYUWgKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZGOacquUS4WDUJneN8jIAkGoeuMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZykNd5T
YVU2/xB80AgwqeP5efMfzemy7BWEoZUbXpLKwn4AHXfOZ/+KWx4ILpzmBtOIBg0U
ibwwlRN3SKYn+QN94U+VCNLMRt3QLqtsNW4DvkDgkWV8x+ivd8NIUEwzkKg8XL/B
vg7L4ZuUr19KQKxTReWzLPROQlZhpCRbfVbKcEYBxcdmIar4WMdu8/XPtyEm1jyt
GXI9PZoGaxHF45zek9KSXZhmDVchb8+Jzl53NDGoALkjY6x/MaRkWHA7ZnVV1GxR
SjNmZweKylzSJSIJlB0ounWlrnOA+TtWMDYzbVX3SRHb6Lh6R7loenDlY6A6hIkP
1gjIaTymBnzf3w==
-----END CERTIFICATE-----
Generated at Sat Apr 27 14:06:52 2024 by rpki-client on console-ams.rpki-client.org