Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File:                     ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier:          GSWgLwfQPzkyci67rCItemwwWQ/nDkqmQY3hizJBFyA=
Subject key identifier:   A5:00:C0:36:7C:5C:0E:C3:26:C8:16:50:1C:00:6F:08:75:2B:69:92
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer:       /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial:       018F8749E580AA22DF4173A12D98BF03130F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number:          0CE6
Signing time:             Fri 17 May 2024 16:01:57 +0000
Manifest this update:     Fri 17 May 2024 16:01:57 +0000
Manifest next update:     Sat 18 May 2024 16:01:57 +0000
Files and hashes:         1: ESDvjqPqoqrR9OTsed-1z_PLfZA.roa (hash: 8y9pgql6xPiAVL9qxpBjAmd7iwa3BJAkcjXrj7H4p68=)
                          2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: yDMrIMWM3eanamFu5MMSjdbnUfx7USu2voPg9Hp1Ue8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e5:80:aa:22:df:41:73:a1:2d:98:bf:03:13:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
        Validity
            Not Before: May 17 16:01:57 2024 GMT
            Not After : May 18 16:01:57 2024 GMT
        Subject: CN=a500c0367c5c0ec326c816501c006f08752b6992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:48:6a:61:0b:c0:79:5e:40:2e:f5:f1:67:
                    ca:e5:95:85:db:6e:f0:f5:82:9f:01:ae:15:7a:59:
                    2d:1b:a6:c6:0c:0b:7d:52:09:cf:7f:a7:46:3d:40:
                    d1:62:2e:c3:65:24:a6:8d:22:d8:f2:0b:62:f1:d0:
                    ae:51:8c:c0:47:e1:f6:14:7e:4c:d8:5e:03:51:4b:
                    5a:76:c8:90:b3:b7:81:8c:21:3a:19:e1:ad:10:2d:
                    ce:96:73:4d:67:1d:22:dc:38:38:65:72:32:83:20:
                    6a:07:77:13:96:93:f3:de:84:c8:55:fe:a4:c9:05:
                    88:f9:fb:d0:d7:2b:0d:c8:ea:79:b1:8f:0d:b5:c3:
                    22:1d:c0:fd:56:2a:be:34:6a:f0:4d:27:3d:52:00:
                    49:3f:af:58:52:7a:c3:27:14:69:5a:6f:2c:57:69:
                    d7:0b:ae:59:93:c7:5a:b2:39:96:85:98:1b:d7:5c:
                    e4:4e:3c:29:c5:d0:8a:c7:61:fd:f3:c8:08:f7:ca:
                    cd:38:d8:31:f7:05:21:93:03:37:ee:a9:c7:b2:87:
                    dd:4c:2b:aa:24:04:4c:63:d1:13:2f:dc:a1:d4:49:
                    50:7e:d1:02:14:56:31:76:2b:50:07:94:15:70:d4:
                    2d:7e:a9:a5:4a:78:2f:c5:f0:76:a2:77:df:13:cc:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:C0:36:7C:5C:0E:C3:26:C8:16:50:1C:00:6F:08:75:2B:69:92
            X509v3 Authority Key Identifier:
                keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4c:5f:72:ab:20:1e:bb:a5:0d:8f:1f:46:95:21:53:5e:e0:
         7a:e2:98:e1:03:58:79:9a:1e:30:c2:99:12:1b:32:63:33:57:
         d4:6e:30:4f:4a:ff:2b:bb:0f:6a:64:e1:07:8f:af:f0:1e:9f:
         85:a2:a0:6a:d1:0b:37:84:f6:21:98:48:3f:50:85:1e:0c:0e:
         39:33:b5:f2:39:8d:cd:e0:c3:92:f7:8d:4f:81:95:86:c4:ef:
         e6:9a:86:d7:26:1d:1b:9b:76:12:79:47:75:51:90:c4:c7:8c:
         2b:90:31:11:6c:ce:dd:1e:77:41:a5:93:0e:ec:99:c5:9b:23:
         66:63:b9:47:03:0c:83:10:5d:64:6a:c6:5f:54:41:d1:ab:99:
         54:e8:df:37:ac:65:11:72:02:3b:c1:fd:15:1d:1d:37:84:1d:
         94:42:00:b3:db:e6:fa:fb:cb:69:12:f2:9d:61:78:92:7c:10:
         3b:23:39:ef:76:06:37:49:66:f0:08:d5:d4:37:0e:05:fc:1f:
         3c:c2:fc:c7:13:56:a9:a0:b0:52:43:08:d2:f6:c0:79:5b:30:
         cb:ca:cd:d0:6e:4c:22:9d:c0:30:df:17:dc:23:ef:b5:73:74:
         9d:58:60:69:54:45:42:9c:3b:ee:e1:fb:9b:f3:d1:2c:2c:69:
         73:ea:2c:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSeWAqiLfQXOhLZi/AxMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmI2OGYwYzgzYWRkOWEzYTNiODZhYjI0ZmI5MTBhOTYw
MjYyYzYwHhcNMjQwNTE3MTYwMTU3WhcNMjQwNTE4MTYwMTU3WjAzMTEwLwYDVQQD
EyhhNTAwYzAzNjdjNWMwZWMzMjZjODE2NTAxYzAwNmYwODc1MmI2OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobRIamELwHleQC718WfK5ZWF227w
9YKfAa4VelktG6bGDAt9UgnPf6dGPUDRYi7DZSSmjSLY8gti8dCuUYzAR+H2FH5M
2F4DUUtadsiQs7eBjCE6GeGtEC3OlnNNZx0i3Dg4ZXIygyBqB3cTlpPz3oTIVf6k
yQWI+fvQ1ysNyOp5sY8NtcMiHcD9Viq+NGrwTSc9UgBJP69YUnrDJxRpWm8sV2nX
C65Zk8dasjmWhZgb11zkTjwpxdCKx2H988gI98rNONgx9wUhkwM37qnHsofdTCuq
JARMY9ETL9yh1ElQftECFFYxditQB5QVcNQtfqmlSngvxfB2onffE8w9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUAwDZ8XA7DJsgWUBwAbwh1K2mSMB8GA1UdIwQY
MBaAFK8raPDIOt2aOjuGqyT7kQqWAmLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWIt
ZWRhMzE2YTJhZmI4LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWItZWRhMzE2YTJhZmI4
LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvExfcqsg
HrulDY8fRpUhU17geuKY4QNYeZoeMMKZEhsyYzNX1G4wT0r/K7sPamThB4+v8B6f
haKgatELN4T2IZhIP1CFHgwOOTO18jmNzeDDkveNT4GVhsTv5pqG1yYdG5t2EnlH
dVGQxMeMK5AxEWzO3R53QaWTDuyZxZsjZmO5RwMMgxBdZGrGX1RB0auZVOjfN6xl
EXICO8H9FR0dN4QdlEIAs9vm+vvLaRLynWF4knwQOyM573YGN0lm8AjV1DcOBfwf
PML8xxNWqaCwUkMI0vbAeVswy8rN0G5MIp3AMN8X3CPvtXN0nVhgaVRFQpw77uH7
m/PRLCxpc+osgg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:42:06 2024 by rpki-client on console-ams.rpki-client.org