Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File:                     XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier:          ky2P72sQEoBaOiQUckTxmA/hNyeyke+jBI2az2G9e4o=
Subject key identifier:   DF:9B:49:BA:CE:F9:62:16:78:90:96:20:48:3F:4C:AC:CD:62:85:68
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer:       /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial:       018F87EDB953F4B081F4F5A8684892CC59F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number:          D0
Signing time:             Fri 17 May 2024 19:00:54 +0000
Manifest this update:     Fri 17 May 2024 19:00:54 +0000
Manifest next update:     Sat 18 May 2024 19:00:54 +0000
Files and hashes:         1: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: RtAp1yyO15WeoL7RJgmKoTwSpV7OhrEDzyesGYe7jvE=)
                          2: y1lMM_br3GByWkvxxJYnigHr1R4.roa (hash: ln2wKmTtx9TfldYZKxdvdrMI4VdJDtqKl7cnRZhpAbw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b9:53:f4:b0:81:f4:f5:a8:68:48:92:cc:59:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
        Validity
            Not Before: May 17 19:00:54 2024 GMT
            Not After : May 18 19:00:54 2024 GMT
        Subject: CN=df9b49bacef9621678909620483f4caccd628568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:a6:66:8f:fd:d1:3f:e2:35:cc:9d:f7:8d:
                    3f:47:f6:9e:09:dd:f9:e9:89:a3:06:f6:23:07:e4:
                    0e:61:ed:54:e9:49:9a:19:95:11:8f:16:e9:69:07:
                    c8:6f:93:46:bd:95:e2:92:f0:4d:f6:c8:07:43:ad:
                    d9:ad:db:99:30:bb:46:12:a9:a4:16:74:d5:cf:b5:
                    ab:d3:84:29:09:0a:57:44:df:b6:2c:fb:46:4a:c9:
                    f0:f6:3e:43:f6:99:32:cc:68:0b:e6:96:55:e2:83:
                    94:f7:10:46:3d:7b:56:8e:0f:42:9c:03:c1:fd:df:
                    96:62:e5:ac:5a:5d:aa:6d:ff:af:18:a3:e2:b8:e8:
                    e1:cd:22:f3:31:00:d7:bf:d0:0b:63:8d:f6:53:86:
                    1c:72:f6:97:6c:bb:da:c9:f9:a1:2a:7f:78:a3:70:
                    0c:b2:7c:74:0b:58:31:c6:89:5c:0c:27:55:ad:dc:
                    16:00:50:54:91:1c:5b:60:0e:2f:0a:04:62:85:31:
                    54:72:f4:d3:dd:bb:64:87:d2:78:88:0c:94:2c:9d:
                    b1:4e:b8:d3:a6:72:52:d8:cc:7d:fb:7a:4f:51:bf:
                    7f:e1:23:a2:cb:aa:ec:98:ea:3a:72:93:4e:0c:77:
                    b9:68:26:b4:3d:22:19:70:56:76:5f:53:f6:59:e4:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:49:BA:CE:F9:62:16:78:90:96:20:48:3F:4C:AC:CD:62:85:68
            X509v3 Authority Key Identifier:
                keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:63:87:0c:36:e2:25:77:c2:35:4f:bf:0e:42:12:2a:c0:f7:
         55:a5:7c:fc:5d:b7:ce:0c:45:43:09:f2:6b:85:0e:3f:bf:e8:
         76:05:3c:47:7e:9e:4d:0f:92:a3:ea:4d:bb:b9:e4:d4:9a:6c:
         a3:a2:7f:9a:ab:bc:f9:ef:7c:10:58:71:b3:9f:3a:1d:2a:a2:
         3e:b6:27:e4:41:a2:1c:d5:83:ff:c2:45:d5:cc:6d:da:87:16:
         78:da:94:85:13:a8:ef:26:b2:be:c6:16:92:5f:6e:cb:ce:8f:
         ca:0d:dc:6b:6a:e5:35:02:24:ba:64:6c:12:7a:0b:19:25:af:
         68:64:5f:a1:41:f9:99:e1:74:ec:4d:13:77:43:f7:cc:6e:03:
         45:cd:42:24:fa:5b:a4:91:fa:1d:bc:b0:6d:15:0a:53:e2:f6:
         d2:69:eb:ec:3d:00:4b:fe:41:49:4f:4b:83:08:cd:d3:f2:65:
         09:0a:91:69:63:f9:87:b7:f6:0d:cb:8e:c6:52:2c:1f:c3:74:
         31:20:1d:09:d4:c5:52:de:57:7b:27:41:c9:05:18:51:61:d7:
         60:63:90:b5:6b:fa:1b:c6:12:8a:53:07:51:d3:d8:9e:58:12:
         73:7b:3c:08:04:81:82:01:ca:14:85:c9:29:00:9d:31:cf:6a:
         21:fe:7b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7blT9LCB9PWoaEiSzFn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmJlNjJiZTc1M2JhOTkyOTM1NWI0Y2U5ODhiYWUxMmFm
NzI3MmEwHhcNMjQwNTE3MTkwMDU0WhcNMjQwNTE4MTkwMDU0WjAzMTEwLwYDVQQD
EyhkZjliNDliYWNlZjk2MjE2Nzg5MDk2MjA0ODNmNGNhY2NkNjI4NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1mmZo/90T/iNcyd940/R/aeCd35
6YmjBvYjB+QOYe1U6UmaGZURjxbpaQfIb5NGvZXikvBN9sgHQ63ZrduZMLtGEqmk
FnTVz7Wr04QpCQpXRN+2LPtGSsnw9j5D9pkyzGgL5pZV4oOU9xBGPXtWjg9CnAPB
/d+WYuWsWl2qbf+vGKPiuOjhzSLzMQDXv9ALY432U4YccvaXbLvayfmhKn94o3AM
snx0C1gxxolcDCdVrdwWAFBUkRxbYA4vCgRihTFUcvTT3btkh9J4iAyULJ2xTrjT
pnJS2Mx9+3pPUb9/4SOiy6rsmOo6cpNODHe5aCa0PSIZcFZ2X1P2WeTm/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+bSbrO+WIWeJCWIEg/TKzNYoVoMB8GA1UdIwQY
MBaAFF8r5ivnU7qZKTVbTOmIuuEq9ycqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2It
ZTUyMmNhZTYzNDcwLzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2ItZTUyMmNhZTYzNDcw
LzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGOHDDbi
JXfCNU+/DkISKsD3VaV8/F23zgxFQwnya4UOP7/odgU8R36eTQ+So+pNu7nk1Jps
o6J/mqu8+e98EFhxs586HSqiPrYn5EGiHNWD/8JF1cxt2ocWeNqUhROo7yayvsYW
kl9uy86Pyg3ca2rlNQIkumRsEnoLGSWvaGRfoUH5meF07E0Td0P3zG4DRc1CJPpb
pJH6HbywbRUKU+L20mnr7D0AS/5BSU9LgwjN0/JlCQqRaWP5h7f2DcuOxlIsH8N0
MSAdCdTFUt5XeydByQUYUWHXYGOQtWv6G8YSilMHUdPYnlgSc3s8CASBggHKFIXJ
KQCdMc9qIf57zw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:19:17 2024 by rpki-client on console-fra.rpki-client.org