Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier:          zBH9Qz9HbUK03VC4NGWMzyVFt23Qmk5pb8vkmF2KZVQ=
Subject key identifier:   97:9D:12:DC:7F:81:5F:0D:28:EA:78:29:F5:28:7A:8C:C8:30:92:56
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer:       /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial:       01951135340304C2C76A8C72D95FAFBE2926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number:          0FBE
Signing time:             Mon 17 Feb 2025 00:00:54 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:54 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:54 +0000
Files and hashes:         1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: fKTK5oxZnOlH8aM2AdIQE2hyQGJdTk4VnHIuYIcB6Pc=)
                          2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:34:03:04:c2:c7:6a:8c:72:d9:5f:af:be:29:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
        Validity
            Not Before: Feb 17 00:00:54 2025 GMT
            Not After : Feb 18 00:00:54 2025 GMT
        Subject: CN=979d12dc7f815f0d28ea7829f5287a8cc8309256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:12:b6:3d:09:25:b4:2c:f9:07:df:59:1e:
                    aa:3b:5d:1a:3f:ac:70:69:bb:28:89:8f:f4:3f:e5:
                    fe:9a:f3:7e:d0:11:e2:4b:53:19:f2:ad:96:b0:a7:
                    5f:ae:75:f8:65:31:e4:0d:d8:35:02:c2:00:e9:eb:
                    40:eb:26:1e:97:c3:92:ab:14:2c:55:01:04:07:d4:
                    80:df:77:58:7e:38:b6:a8:b4:83:32:ec:06:1b:05:
                    df:e9:81:aa:4e:9f:48:6d:75:79:17:02:ef:36:33:
                    20:fd:f1:97:6d:72:ff:e7:7e:fd:9e:04:72:d3:85:
                    24:86:f3:d2:73:a4:f9:1d:36:ec:b3:5d:63:f5:db:
                    b3:4e:32:86:de:45:37:b7:84:87:c0:f3:9e:b5:95:
                    67:65:3f:a7:9a:3d:f2:3a:fa:6b:a4:01:3e:ab:2b:
                    3d:37:0e:37:3a:d2:46:2e:23:21:25:26:31:e7:44:
                    7b:ae:c8:24:b2:b5:e6:2a:51:74:1c:d3:3c:3f:75:
                    b0:8a:a2:60:ad:69:47:cd:3f:e6:4b:df:6a:ce:c4:
                    aa:bc:ac:c2:ab:75:46:2f:35:e8:a7:cc:dc:f2:2b:
                    3b:eb:e6:45:ca:e8:5f:62:fd:11:26:80:b4:ae:c6:
                    a3:cc:a0:8a:97:dd:c5:92:51:e8:f2:28:70:e2:a9:
                    7b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:12:DC:7F:81:5F:0D:28:EA:78:29:F5:28:7A:8C:C8:30:92:56
            X509v3 Authority Key Identifier:
                keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:4e:75:e4:3b:f2:72:7f:d8:2b:73:4b:38:ca:e9:f5:65:
         b1:dd:26:8f:9b:d4:c5:0d:11:80:2e:ea:77:e7:27:76:91:7b:
         ae:b0:7b:da:08:9c:e1:64:f9:bf:4b:59:fc:75:f0:a0:ae:46:
         c5:6c:9c:03:9f:d5:2e:b5:76:25:3e:c9:47:3d:31:70:66:e1:
         2e:da:e3:e3:5b:03:bf:b6:e8:ce:48:68:fe:8b:cd:18:a5:27:
         10:a9:e4:cf:c2:98:fb:94:11:19:b8:f1:96:a9:73:e5:85:74:
         bb:e7:3e:53:44:1d:b5:c5:42:4c:4b:14:d1:5e:8d:87:f3:41:
         fc:9a:33:d5:a9:5e:bb:00:1c:8f:b3:4d:e4:83:6e:4c:2e:00:
         98:ef:39:33:25:88:20:2b:e7:d3:06:35:df:0f:04:bd:6f:5f:
         dc:f0:c1:30:68:f6:73:a4:90:92:fd:d4:61:0f:81:74:89:cd:
         7f:59:5b:6f:0f:30:7a:d4:a6:4d:af:da:35:de:f2:f6:e0:9a:
         75:bb:39:ee:79:9d:39:b3:ad:f1:0c:7c:e3:96:9b:e7:82:41:
         9d:37:8a:ca:99:e2:00:7e:85:e1:19:8c:be:24:5c:c4:17:6d:
         99:79:5a:28:1c:e4:37:b9:3a:16:59:a8:1a:7e:86:af:7d:eb:
         1e:78:22:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNTQDBMLHaoxy2V+vvikmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyY2JmYTI0YTQ4ODMyN2I3MzA3NzVlMzI5ZDUxYTE5MjE2
MTI1MzEwHhcNMjUwMjE3MDAwMDU0WhcNMjUwMjE4MDAwMDU0WjAzMTEwLwYDVQQD
Eyg5NzlkMTJkYzdmODE1ZjBkMjhlYTc4MjlmNTI4N2E4Y2M4MzA5MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA018Stj0JJbQs+QffWR6qO10aP6xw
absoiY/0P+X+mvN+0BHiS1MZ8q2WsKdfrnX4ZTHkDdg1AsIA6etA6yYel8OSqxQs
VQEEB9SA33dYfji2qLSDMuwGGwXf6YGqTp9IbXV5FwLvNjMg/fGXbXL/5379ngRy
04UkhvPSc6T5HTbss11j9duzTjKG3kU3t4SHwPOetZVnZT+nmj3yOvprpAE+qys9
Nw43OtJGLiMhJSYx50R7rsgksrXmKlF0HNM8P3WwiqJgrWlHzT/mS99qzsSqvKzC
q3VGLzXop8zc8is76+ZFyuhfYv0RJoC0rsajzKCKl93FklHo8ihw4ql7rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJedEtx/gV8NKOp4KfUoeozIMJJWMB8GA1UdIwQY
MBaAFGLL+iSkiDJ7cwd14ynVGhkhYSUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2Qt
NTcwZDE3ZjlmMmE1LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2QtNTcwZDE3ZjlmMmE1
LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlROdeQ7
8nJ/2CtzSzjK6fVlsd0mj5vUxQ0RgC7qd+cndpF7rrB72gic4WT5v0tZ/HXwoK5G
xWycA5/VLrV2JT7JRz0xcGbhLtrj41sDv7bozkho/ovNGKUnEKnkz8KY+5QRGbjx
lqlz5YV0u+c+U0QdtcVCTEsU0V6Nh/NB/Joz1aleuwAcj7NN5INuTC4AmO85MyWI
ICvn0wY13w8EvW9f3PDBMGj2c6SQkv3UYQ+BdInNf1lbbw8wetSmTa/aNd7y9uCa
dbs57nmdObOt8Qx845ab54JBnTeKypniAH6F4RmMviRcxBdtmXlaKBzkN7k6Flmo
Gn6Gr33rHngiKQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:57 2025 by rpki-client