Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File:                     yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier:          nfHVpy5ULilgZYk3+Xk4qefjSe9L0vFnEjSzX/BTM4g=
Subject key identifier:   87:38:3B:43:9C:8B:DD:AD:86:49:4B:0D:A3:DE:C2:57:22:A7:7D:55
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer:       /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial:       019355085A6EA093EBBF05C375BA4A04C243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 18:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:30 +0000
Files and hashes:         1: EmcUcl_6Dhby46seFgpu1CWyPws.roa (hash: TLxUIg6DoFe+DYf4/43NLMSXkovCRrZ7/4ANlkDgpJQ=)
                          2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: YpXJWJlQCssOLOJoL7MROL1MsyCxqzqXhEgwfqV5J60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:5a:6e:a0:93:eb:bf:05:c3:75:ba:4a:04:c2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
        Validity
            Not Before: Nov 22 18:00:30 2024 GMT
            Not After : Nov 23 18:00:30 2024 GMT
        Subject: CN=87383b439c8bddad86494b0da3dec25722a77d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:66:c1:02:50:5e:8d:23:b2:4b:81:a2:9c:
                    37:a9:81:72:0b:2b:9c:de:e3:64:40:f4:f8:c1:6f:
                    91:46:10:4a:fe:ba:9e:96:18:b6:bf:2c:26:75:32:
                    54:a1:7d:54:51:4a:96:b7:b7:f5:b7:75:c9:38:c4:
                    b7:43:5f:af:c3:c0:7a:af:de:f3:63:38:4b:44:cf:
                    d4:d5:b8:ac:d9:f7:2f:42:42:83:fa:09:64:2c:86:
                    81:36:bb:0e:06:09:7d:7b:90:aa:52:cf:c5:95:c4:
                    a9:82:df:b0:60:0e:5e:eb:12:ed:4b:01:cb:8f:2c:
                    b5:a7:ae:6c:95:5b:5c:4c:1c:c8:f5:2a:e6:d6:b0:
                    e4:4a:cf:ed:85:b2:8f:ee:61:67:01:ed:21:38:59:
                    68:39:5c:4f:2b:a2:b9:88:00:45:85:03:08:21:ae:
                    93:ee:41:c9:4a:b3:1c:94:97:e1:57:30:99:93:24:
                    81:21:a9:52:e0:2d:fe:c4:33:9f:83:b9:e5:ee:7a:
                    42:96:0e:bf:90:f1:3b:80:be:cc:66:78:02:ca:ea:
                    1c:60:a8:30:f4:3e:07:65:44:d6:50:28:36:8c:8b:
                    2e:c7:b3:29:42:b2:ee:1a:eb:30:3e:63:0a:2a:cc:
                    bc:dd:ca:32:10:d6:5a:d4:4c:ad:7e:40:b2:b0:b5:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:3B:43:9C:8B:DD:AD:86:49:4B:0D:A3:DE:C2:57:22:A7:7D:55
            X509v3 Authority Key Identifier:
                keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:8a:e7:de:c3:c3:94:01:13:42:67:bf:06:17:e8:f7:95:
         24:54:6f:c8:19:e1:40:94:bb:1e:4f:36:12:06:2e:9f:ef:05:
         8c:49:5c:c4:3d:55:72:8d:27:24:22:44:06:0a:1a:5c:c5:81:
         26:db:71:16:c9:d1:26:5c:51:76:0b:d0:b8:9b:96:c9:b4:26:
         8a:23:4d:5c:d2:b3:1a:11:81:db:42:fd:6b:4a:19:b5:9c:72:
         56:c8:56:47:3a:ea:74:68:37:76:9b:5c:66:b9:b3:cb:90:81:
         5f:49:4e:d8:4b:ce:6d:b9:d6:fe:58:9d:a3:0d:e7:ef:9e:63:
         ae:d0:17:6f:fe:7f:47:ce:c9:59:16:46:29:79:d2:ea:91:2f:
         b7:23:cb:91:96:d1:34:12:69:b8:5e:d5:58:8d:5b:f0:8b:1c:
         ca:d1:b2:7c:71:5c:02:d3:2c:79:8f:e7:18:86:81:fe:3f:85:
         f2:f5:5c:2a:ea:7c:2b:2a:4b:f9:08:c4:ec:70:65:b1:12:4f:
         13:bb:3e:d6:10:1f:c2:22:f6:a1:51:cf:65:b3:e8:32:cb:8d:
         9c:58:1b:ef:d6:ee:7c:04:3b:99:6e:bf:d9:54:0d:4a:4f:c3:
         23:a0:84:5d:0d:88:12:b6:7c:de:f9:99:78:2b:04:6a:44:d9:
         f6:9f:1b:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCFpuoJPrvwXDdbpKBMJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm
YTkwMmMwHhcNMjQxMTIyMTgwMDMwWhcNMjQxMTIzMTgwMDMwWjAzMTEwLwYDVQQD
Eyg4NzM4M2I0MzljOGJkZGFkODY0OTRiMGRhM2RlYzI1NzIyYTc3ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh1mwQJQXo0jskuBopw3qYFyCyuc
3uNkQPT4wW+RRhBK/rqelhi2vywmdTJUoX1UUUqWt7f1t3XJOMS3Q1+vw8B6r97z
YzhLRM/U1bis2fcvQkKD+glkLIaBNrsOBgl9e5CqUs/FlcSpgt+wYA5e6xLtSwHL
jyy1p65slVtcTBzI9Srm1rDkSs/thbKP7mFnAe0hOFloOVxPK6K5iABFhQMIIa6T
7kHJSrMclJfhVzCZkySBIalS4C3+xDOfg7nl7npClg6/kPE7gL7MZngCyuocYKgw
9D4HZUTWUCg2jIsux7MpQrLuGuswPmMKKsy83coyENZa1EytfkCysLUsTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc4O0Oci92thklLDaPewlcip31VMB8GA1UdIwQY
MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt
YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi
LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7GK597D
w5QBE0JnvwYX6PeVJFRvyBnhQJS7Hk82EgYun+8FjElcxD1Vco0nJCJEBgoaXMWB
JttxFsnRJlxRdgvQuJuWybQmiiNNXNKzGhGB20L9a0oZtZxyVshWRzrqdGg3dptc
Zrmzy5CBX0lO2EvObbnW/lidow3n755jrtAXb/5/R87JWRZGKXnS6pEvtyPLkZbR
NBJpuF7VWI1b8IscytGyfHFcAtMseY/nGIaB/j+F8vVcKup8KypL+QjE7HBlsRJP
E7s+1hAfwiL2oVHPZbPoMsuNnFgb79bufAQ7mW6/2VQNSk/DI6CEXQ2IErZ83vmZ
eCsEakTZ9p8bWQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:45 2024 by rpki-client on console-fra.rpki-client.org