Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File:                     yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier:          6DBl5TsKjj5/W5RjGl2UCx+cHJzQqE/HyT2RPd0rwuo=
Subject key identifier:   52:02:D8:28:A8:AB:C8:E4:B4:52:AB:F8:F0:23:6A:6E:EE:A9:20:9B
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer:       /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial:       0193688ED5C9580404EBB01B6005E4C2C48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number:          09A7
Signing time:             Tue 26 Nov 2024 13:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:11 +0000
Files and hashes:         1: 1-_KVwbZv_G8RZ2k6-hNKnrfUl2Q.roa (hash: TPCasxvNzO6h+m1eSPcTP2RR4bJHtKU5vosaTBro21E=)
                          2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: 7W8j+99zuPJRpbZCI1Xjq9og4srIP6PJUR7FSDRKwmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8e:d5:c9:58:04:04:eb:b0:1b:60:05:e4:c2:c4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
        Validity
            Not Before: Nov 26 13:00:11 2024 GMT
            Not After : Nov 27 13:00:11 2024 GMT
        Subject: CN=5202d828a8abc8e4b452abf8f0236a6eeea9209b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:78:c6:93:4a:b3:ed:96:e8:36:8e:e3:05:
                    11:ba:43:f2:4d:63:aa:ae:02:fd:e7:f9:fa:8d:ec:
                    a1:89:87:ef:d6:1c:bd:e7:bc:02:6b:a6:f0:ac:10:
                    d3:a8:fc:c8:f4:05:9b:95:05:5c:af:cc:c6:64:0d:
                    b2:e8:b2:a9:f2:ab:2f:7a:f2:d9:03:7f:4e:75:c3:
                    15:7a:36:ae:39:03:33:e0:bc:5e:e6:7c:80:af:ba:
                    6c:4a:15:f7:cb:86:1e:0d:30:65:8a:e7:65:ff:2b:
                    0d:68:6c:6b:88:98:80:12:6c:21:01:51:d1:14:b0:
                    47:be:af:9e:1f:2f:43:4a:1c:54:f2:6f:92:0f:a6:
                    f1:f1:2d:d0:7b:db:ff:6a:a5:1c:07:b0:6a:33:eb:
                    5a:17:d1:77:93:54:d5:68:c8:e8:dd:0d:d8:9a:2b:
                    e3:de:ba:21:fd:2f:fe:29:08:7d:98:53:8c:6d:9e:
                    27:43:54:ba:95:a9:38:73:87:df:b4:a3:72:f6:09:
                    8f:9b:b1:34:1a:b9:bb:7b:84:f3:67:5b:2d:6e:f7:
                    ed:be:cb:e0:a7:c6:9f:88:a6:54:85:f2:08:cb:47:
                    33:6e:f9:66:a9:bd:65:46:af:a2:80:0a:9d:23:67:
                    2c:33:0f:32:8c:59:c9:6c:06:ad:8f:cd:94:88:be:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:D8:28:A8:AB:C8:E4:B4:52:AB:F8:F0:23:6A:6E:EE:A9:20:9B
            X509v3 Authority Key Identifier:
                keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:69:2f:34:45:c9:d5:04:5d:99:89:96:03:2d:18:65:ee:
         bc:2e:75:dd:cf:bd:03:dc:c2:84:1a:16:28:05:f7:cb:33:13:
         aa:79:55:47:7b:9b:6e:21:dd:a5:6f:85:1d:52:83:dc:a3:7a:
         9d:9f:51:45:24:f6:8b:3c:67:32:18:a4:3b:35:9e:f1:84:35:
         69:46:9a:4f:8c:60:4f:cb:a8:97:f2:4f:dd:30:23:dc:90:3e:
         46:05:1d:86:4d:0e:fe:76:9e:2f:8a:b8:d4:65:28:5d:92:ab:
         06:d7:f5:4f:52:9e:fa:5d:25:3d:60:27:3d:16:2e:11:63:8d:
         42:5c:6c:f5:3f:ff:45:52:de:64:8d:2d:0e:7d:d0:3a:19:f2:
         11:00:cf:50:48:29:cd:17:68:db:ca:6d:ee:cd:bc:37:e8:15:
         23:d3:6e:df:56:e0:ae:38:76:c7:74:2d:3d:94:53:a2:27:54:
         18:80:c0:65:85:dd:9f:20:d4:cf:a4:4f:57:46:3b:c1:7b:f7:
         92:e3:65:57:36:13:64:70:0f:44:5c:50:29:ad:43:36:84:f1:
         4c:4a:b9:c9:52:06:d1:57:54:b7:48:13:6c:58:7f:95:ed:7e:
         74:2c:94:e4:42:4b:03:85:96:b3:38:cf:b8:df:f9:34:99:7e:
         5e:8f:38:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNojtXJWAQE67AbYAXkwsSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiZTE5YzEwOTgwZjE1YmNkZWUwNzY2OTAwNzg0OTFh
OGFhMjEwHhcNMjQxMTI2MTMwMDExWhcNMjQxMTI3MTMwMDExWjAzMTEwLwYDVQQD
Eyg1MjAyZDgyOGE4YWJjOGU0YjQ1MmFiZjhmMDIzNmE2ZWVlYTkyMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Z4xpNKs+2W6DaO4wURukPyTWOq
rgL95/n6jeyhiYfv1hy957wCa6bwrBDTqPzI9AWblQVcr8zGZA2y6LKp8qsvevLZ
A39OdcMVejauOQMz4Lxe5nyAr7psShX3y4YeDTBliudl/ysNaGxriJiAEmwhAVHR
FLBHvq+eHy9DShxU8m+SD6bx8S3Qe9v/aqUcB7BqM+taF9F3k1TVaMjo3Q3Ymivj
3roh/S/+KQh9mFOMbZ4nQ1S6lak4c4fftKNy9gmPm7E0Grm7e4TzZ1stbvftvsvg
p8afiKZUhfIIy0czbvlmqb1lRq+igAqdI2csMw8yjFnJbAatj82UiL71AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIC2Cioq8jktFKr+PAjam7uqSCbMB8GA1UdIwQY
MBaAFMgYvhnBCYDxW83uB2aQB4SRqKohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMt
NmM0NzE5YmNmOWVlLzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMtNmM0NzE5YmNmOWVl
LzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLxpLzRF
ydUEXZmJlgMtGGXuvC513c+9A9zChBoWKAX3yzMTqnlVR3ubbiHdpW+FHVKD3KN6
nZ9RRST2izxnMhikOzWe8YQ1aUaaT4xgT8uol/JP3TAj3JA+RgUdhk0O/naeL4q4
1GUoXZKrBtf1T1Ke+l0lPWAnPRYuEWONQlxs9T//RVLeZI0tDn3QOhnyEQDPUEgp
zRdo28pt7s28N+gVI9Nu31bgrjh2x3QtPZRToidUGIDAZYXdnyDUz6RPV0Y7wXv3
kuNlVzYTZHAPRFxQKa1DNoTxTEq5yVIG0VdUt0gTbFh/le1+dCyU5EJLA4WWszjP
uN/5NJl+Xo84wA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:40 2024 by rpki-client on console-ams.rpki-client.org