Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier:          BYe2yn5s5U3h/nOgzVhbq4N9uQVHlr8u+7Pwq3pFEVA=
Subject key identifier:   54:52:2D:F7:35:53:DC:57:1C:E6:13:99:26:08:4D:0B:54:04:37:FD
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer:       /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial:       018F8891DE29C814C6305AFFACA1DA905EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number:          0CE0
Signing time:             Fri 17 May 2024 22:00:11 +0000
Manifest this update:     Fri 17 May 2024 22:00:11 +0000
Manifest next update:     Sat 18 May 2024 22:00:11 +0000
Files and hashes:         1: 9c-D3WhQDn-klI6LxNmw7txS48c.roa (hash: 3VAdmlKRnmVOpQFA6sd4nAvkmFuc9Lu01I12AARmIV4=)
                          2: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: A7SG2fWEm/WX8o7NFqAZoR1BxOfdM+ZtYIIJxuxO/14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:de:29:c8:14:c6:30:5a:ff:ac:a1:da:90:5e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
        Validity
            Not Before: May 17 22:00:11 2024 GMT
            Not After : May 18 22:00:11 2024 GMT
        Subject: CN=54522df73553dc571ce6139926084d0b540437fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:e4:68:e6:05:84:f2:df:39:fc:e4:06:93:
                    b5:75:75:6d:88:d6:fb:6b:7b:05:cf:a9:2f:f7:46:
                    8d:9b:a6:66:1a:6f:c9:3c:fc:d7:a3:b4:78:c0:01:
                    01:67:8f:84:e5:19:bc:b0:9f:af:f6:4b:d4:c6:95:
                    1d:17:f5:1f:15:49:7d:02:f5:44:e1:bf:a8:58:ec:
                    2f:b9:cf:47:48:f7:bc:a4:f8:56:5a:4a:96:32:e9:
                    68:5b:c4:c9:a1:09:c0:1e:22:00:f5:1b:52:7a:a2:
                    07:1a:21:92:41:f7:b3:aa:98:a9:95:70:42:35:37:
                    0d:23:cf:69:ea:95:35:cc:89:ee:cc:64:56:4a:31:
                    3f:8c:11:b8:f3:9d:87:f8:7a:71:9d:9f:5a:0b:71:
                    74:b2:aa:af:3e:27:6e:6f:37:fd:25:98:d0:7d:9f:
                    e5:03:58:f0:ed:7e:25:69:b8:55:5e:8a:78:36:0a:
                    9d:76:2b:bf:c1:89:e1:ab:b7:fd:db:d2:65:a3:5f:
                    b3:6f:73:56:f0:e9:74:f1:ad:c6:b3:81:37:5f:53:
                    1d:cb:6c:79:70:aa:cb:85:70:4a:13:fd:4e:91:c9:
                    ca:7b:20:3a:3b:7f:52:b1:20:5b:eb:bd:02:8b:ea:
                    81:56:b5:d3:3c:58:f7:a9:f8:92:4a:1c:ca:9b:c7:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:2D:F7:35:53:DC:57:1C:E6:13:99:26:08:4D:0B:54:04:37:FD
            X509v3 Authority Key Identifier:
                keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:16:73:5f:e4:95:81:ba:b7:ce:e5:0a:80:af:7e:eb:53:68:
         4d:0b:ae:35:9c:a1:30:fc:a4:db:01:99:26:98:a7:18:e9:59:
         92:38:f9:e4:d8:1c:c7:e9:43:70:04:48:61:c5:c4:1f:07:7e:
         27:f2:5e:e6:2b:6b:f7:2c:69:0b:53:28:83:51:5d:11:84:2e:
         0d:d6:5f:70:84:79:71:68:2d:ea:53:9e:dc:64:eb:19:3e:19:
         f8:ea:6f:8e:e4:4a:f8:1a:82:ba:bb:3b:95:11:ee:a8:a4:8f:
         b9:51:71:b1:96:53:bb:82:2b:f3:30:65:2c:a7:29:45:57:b7:
         8f:07:76:a8:db:e8:4b:f5:72:e4:83:b2:bf:25:7e:a9:91:e2:
         ff:48:6c:99:d8:53:d0:02:54:b5:c7:44:fb:7e:93:3b:05:8b:
         f0:63:9e:f4:62:2c:20:7f:35:e1:e1:eb:1d:6a:0f:0b:49:f3:
         45:a9:b6:b4:7e:c9:77:02:de:44:b1:3a:de:63:53:39:f8:57:
         9b:be:9c:a7:f1:39:48:de:bd:07:70:2e:1e:0b:a8:63:cb:8e:
         86:99:58:ff:a0:96:fd:2b:8e:5f:20:d8:01:8d:db:a8:f8:bd:
         66:67:f6:79:6c:09:f5:df:8d:8b:85:b0:41:c7:ed:a2:a6:64:
         97:93:26:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ikd4pyBTGMFr/rKHakF7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyY2JmYTI0YTQ4ODMyN2I3MzA3NzVlMzI5ZDUxYTE5MjE2
MTI1MzEwHhcNMjQwNTE3MjIwMDExWhcNMjQwNTE4MjIwMDExWjAzMTEwLwYDVQQD
Eyg1NDUyMmRmNzM1NTNkYzU3MWNlNjEzOTkyNjA4NGQwYjU0MDQzN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7vkaOYFhPLfOfzkBpO1dXVtiNb7
a3sFz6kv90aNm6ZmGm/JPPzXo7R4wAEBZ4+E5Rm8sJ+v9kvUxpUdF/UfFUl9AvVE
4b+oWOwvuc9HSPe8pPhWWkqWMuloW8TJoQnAHiIA9RtSeqIHGiGSQfezqpiplXBC
NTcNI89p6pU1zInuzGRWSjE/jBG4852H+HpxnZ9aC3F0sqqvPidubzf9JZjQfZ/l
A1jw7X4labhVXop4Ngqddiu/wYnhq7f929Jlo1+zb3NW8Ol08a3Gs4E3X1Mdy2x5
cKrLhXBKE/1OkcnKeyA6O39SsSBb670Ci+qBVrXTPFj3qfiSShzKm8djeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRSLfc1U9xXHOYTmSYITQtUBDf9MB8GA1UdIwQY
MBaAFGLL+iSkiDJ7cwd14ynVGhkhYSUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2Qt
NTcwZDE3ZjlmMmE1LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2QtNTcwZDE3ZjlmMmE1
LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBZzX+SV
gbq3zuUKgK9+61NoTQuuNZyhMPyk2wGZJpinGOlZkjj55Ngcx+lDcARIYcXEHwd+
J/Je5itr9yxpC1Mog1FdEYQuDdZfcIR5cWgt6lOe3GTrGT4Z+OpvjuRK+BqCurs7
lRHuqKSPuVFxsZZTu4Ir8zBlLKcpRVe3jwd2qNvoS/Vy5IOyvyV+qZHi/0hsmdhT
0AJUtcdE+36TOwWL8GOe9GIsIH814eHrHWoPC0nzRam2tH7JdwLeRLE63mNTOfhX
m76cp/E5SN69B3AuHguoY8uOhplY/6CW/SuOXyDYAY3bqPi9Zmf2eWwJ9d+Ni4Ww
QcftoqZkl5MmFw==
-----END CERTIFICATE-----
Generated at Fri May 17 22:59:12 2024 by rpki-client on console-fra.rpki-client.org