Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File:                     YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier:          qL22yl+L+5C7L6b7e5vudy5nqfLg1SXeAY84VAWwB8Y=
Subject key identifier:   C5:CF:A6:DA:00:D2:B6:30:3B:A6:CA:06:58:C9:22:CB:5C:CC:EC:A4
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer:       /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial:       018F874A9A8DBF2500CDEF1D2643CD23ED62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:44 +0000
Manifest this update:     Fri 17 May 2024 16:02:44 +0000
Manifest next update:     Sat 18 May 2024 16:02:44 +0000
Files and hashes:         1: 7M2GulaXs8u9bhmxeEqqIDK1WfI.roa (hash: Fh1DGq3vQlBNacKMMdtlpJTIxFqesezw3arkJ5wceKk=)
                          2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: FYuiH6E+ceUPbnkD5dNNy0Q4b0yP+Zta3sPZDwOBSOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:9a:8d:bf:25:00:cd:ef:1d:26:43:cd:23:ed:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
        Validity
            Not Before: May 17 16:02:44 2024 GMT
            Not After : May 18 16:02:44 2024 GMT
        Subject: CN=c5cfa6da00d2b6303ba6ca0658c922cb5ccceca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:7d:21:02:26:84:aa:09:4d:54:c8:9d:7e:
                    81:65:b6:bb:0e:73:76:88:6e:d5:21:ca:c6:6b:c7:
                    f0:8f:57:3d:b2:00:fe:45:9a:b5:79:80:77:c9:e3:
                    65:fe:74:da:d2:a8:72:d5:65:f6:75:d9:ee:b8:17:
                    61:95:57:0e:a0:0e:c7:9d:f5:17:cf:63:fa:c2:ed:
                    73:a4:77:c9:12:91:14:3d:f5:8d:ee:50:17:e9:75:
                    95:f9:90:e4:48:83:ac:c6:b5:37:43:06:2d:10:19:
                    b7:92:dd:03:f4:0e:04:90:76:31:c6:12:f4:db:31:
                    9a:95:38:fa:a2:fe:9f:a7:80:86:39:64:bb:8b:bc:
                    db:09:bf:77:8b:4e:62:89:0d:c9:fe:8a:5b:b3:2f:
                    e4:4b:48:f2:d8:37:b8:09:40:d4:1a:12:ab:e5:ff:
                    ca:11:85:36:4a:d1:de:4d:a9:ae:ca:14:76:64:7e:
                    6f:5d:d5:31:e7:f3:58:1e:83:6f:d1:20:22:7f:12:
                    4f:08:fd:94:9c:c7:c5:48:30:ad:22:92:d5:9d:42:
                    6e:da:23:ad:78:94:f8:fc:37:eb:cc:08:83:ec:5d:
                    c3:b2:21:44:7d:c5:25:04:12:63:e7:0b:a2:de:33:
                    99:18:fc:c9:93:cd:eb:bf:1c:b9:17:5c:d9:6a:bd:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CF:A6:DA:00:D2:B6:30:3B:A6:CA:06:58:C9:22:CB:5C:CC:EC:A4
            X509v3 Authority Key Identifier:
                keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:80:f4:f4:63:16:f3:42:15:48:6d:9b:3e:7c:f8:b3:c9:b8:
         2e:c3:70:5e:05:b5:99:e5:90:27:b9:78:b9:e3:4f:e9:47:4d:
         a7:88:ba:ee:0e:0c:06:e3:ce:5d:82:b5:8d:69:11:f4:7a:07:
         82:3d:73:b2:0e:93:96:a4:76:01:a8:a7:d5:68:b2:90:25:14:
         dd:17:b2:2e:20:49:79:56:98:0f:c7:f7:e2:f9:8b:9b:e1:60:
         ba:4d:ce:cd:ed:47:e4:0d:e3:ac:7e:1e:00:a2:de:7b:b1:69:
         cb:58:ea:d0:76:95:5f:6e:53:8c:87:93:47:ab:c6:77:77:2e:
         a5:0f:6d:70:5c:0f:00:e5:0c:bb:39:13:19:c7:f0:2a:54:7e:
         dd:5a:49:f9:e5:64:dc:2e:17:88:b4:b6:57:97:70:57:aa:f9:
         03:38:ca:07:91:93:ef:e1:fc:ac:79:5b:27:9c:fd:32:33:39:
         b0:82:1e:7e:d1:b0:5d:11:fb:ec:c5:dd:ac:2e:a8:7f:54:f0:
         75:f5:2a:da:ed:86:ad:ed:94:10:09:bf:dc:8e:88:91:58:9d:
         f0:fa:d3:d9:4b:76:ff:c0:7c:2d:6f:3e:da:fb:e0:6e:88:e3:
         34:c7:9a:bd:b2:6c:b7:72:c1:05:65:64:9b:93:9e:68:5b:66:
         e6:7d:ce:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSpqNvyUAze8dJkPNI+1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZjYwM2YzYTU1YTI5ZTY2MTdmMDk2YjNhNjliZmYwYTM5
MmE5MjgwHhcNMjQwNTE3MTYwMjQ0WhcNMjQwNTE4MTYwMjQ0WjAzMTEwLwYDVQQD
EyhjNWNmYTZkYTAwZDJiNjMwM2JhNmNhMDY1OGM5MjJjYjVjY2NlY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzON9IQImhKoJTVTInX6BZba7DnN2
iG7VIcrGa8fwj1c9sgD+RZq1eYB3yeNl/nTa0qhy1WX2ddnuuBdhlVcOoA7HnfUX
z2P6wu1zpHfJEpEUPfWN7lAX6XWV+ZDkSIOsxrU3QwYtEBm3kt0D9A4EkHYxxhL0
2zGalTj6ov6fp4CGOWS7i7zbCb93i05iiQ3J/opbsy/kS0jy2De4CUDUGhKr5f/K
EYU2StHeTamuyhR2ZH5vXdUx5/NYHoNv0SAifxJPCP2UnMfFSDCtIpLVnUJu2iOt
eJT4/DfrzAiD7F3DsiFEfcUlBBJj5wui3jOZGPzJk83rvxy5F1zZar3HgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXPptoA0rYwO6bKBljJIstczOykMB8GA1UdIwQY
MBaAFGL2A/OlWinmYX8Jazppv/CjkqkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMt
NDFmMzlhOGMwOWRkLzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMtNDFmMzlhOGMwOWRk
LzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYD09GMW
80IVSG2bPnz4s8m4LsNwXgW1meWQJ7l4ueNP6UdNp4i67g4MBuPOXYK1jWkR9HoH
gj1zsg6TlqR2Aain1WiykCUU3ReyLiBJeVaYD8f34vmLm+Fguk3Oze1H5A3jrH4e
AKLee7Fpy1jq0HaVX25TjIeTR6vGd3cupQ9tcFwPAOUMuzkTGcfwKlR+3VpJ+eVk
3C4XiLS2V5dwV6r5AzjKB5GT7+H8rHlbJ5z9MjM5sIIeftGwXRH77MXdrC6of1Tw
dfUq2u2Gre2UEAm/3I6IkVid8PrT2Ut2/8B8LW8+2vvgbojjNMeavbJst3LBBWVk
m5OeaFtm5n3Olg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:51:38 2024 by rpki-client on console-ams.rpki-client.org