Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File:                     sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier:          L6t2oHDi5WVsOw6ys0cXIihsKPh/wfpIy/Am5D0PWEs=
Subject key identifier:   E2:57:C4:BA:05:CD:72:BD:E7:A6:3C:CF:BB:D7:B6:96:6A:F3:E6:A1
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer:       /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial:       01901DEDA78E1EBC97F5F4AA5F2A399167FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number:          0289
Signing time:             Sat 15 Jun 2024 22:03:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:52 +0000
Files and hashes:         1: 47EyQr_Y-svXs5ZqoTVeCmBPEe0.roa (hash: eCHZtHyzNo9K9uS6XEPhlk0X3ae4+E1hrfbjoCtJCcQ=)
                          2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: AAy5Y23SG1qk6YPAfduJZhdsZKQfDuKXkvYmL6K6YrQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a7:8e:1e:bc:97:f5:f4:aa:5f:2a:39:91:67:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
        Validity
            Not Before: Jun 15 22:03:52 2024 GMT
            Not After : Jun 16 22:03:52 2024 GMT
        Subject: CN=e257c4ba05cd72bde7a63ccfbbd7b6966af3e6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:02:a4:e1:56:cb:60:fc:40:b3:5f:f0:92:
                    00:53:f0:9b:30:e6:af:87:a8:5c:85:ca:a7:45:9c:
                    ca:61:81:25:b9:11:8d:76:db:e3:b0:2e:15:bc:64:
                    5f:81:5c:4c:db:9d:b1:1b:28:74:b0:2d:11:c7:2c:
                    85:00:b5:74:78:f7:86:54:fd:31:f1:7a:d8:a4:7a:
                    6d:e4:1c:ac:49:be:22:de:4c:56:ff:a7:d7:9a:69:
                    67:06:10:71:e1:63:a7:96:79:60:6c:33:5e:48:d6:
                    23:aa:8f:e3:ab:a4:20:3a:bf:69:70:67:9f:37:03:
                    0d:47:37:62:6d:b3:52:64:12:61:3a:f6:c6:13:2a:
                    ec:31:d0:5f:49:75:07:d6:4d:47:2f:13:78:6a:61:
                    c0:a8:61:3d:26:0d:f4:27:e7:40:16:d9:f5:05:15:
                    e4:97:73:ce:8d:00:4a:1e:42:ea:6a:10:03:46:2a:
                    52:fb:58:74:d4:61:61:25:a7:75:a0:cb:3b:76:dc:
                    0a:69:51:a5:38:0f:f2:27:ee:f4:58:b1:32:a9:85:
                    8a:86:fa:3e:36:f3:3d:ca:80:6e:e4:12:b7:3e:f2:
                    60:3d:7b:8b:d9:17:48:f8:dc:f4:7f:b0:0f:11:c4:
                    ec:0e:dc:5e:aa:2d:59:88:b4:60:bf:69:c3:0e:d1:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:57:C4:BA:05:CD:72:BD:E7:A6:3C:CF:BB:D7:B6:96:6A:F3:E6:A1
            X509v3 Authority Key Identifier:
                keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:80:7d:fc:59:9a:fe:c4:02:89:a1:77:2d:f8:9b:4b:b2:
         05:7c:c1:45:c0:6c:9f:d5:96:97:e4:79:94:90:b6:d4:1d:e2:
         e1:34:3d:92:63:48:76:ac:57:67:af:d3:e1:c7:b3:d6:87:36:
         6f:ee:b2:da:45:6e:f9:d5:6b:24:8b:11:fe:bd:2d:2b:a2:82:
         45:6f:9d:de:21:6d:b5:fd:18:17:e4:71:ef:bf:f1:4d:0a:58:
         24:a4:a2:ca:7b:dc:08:f5:b0:45:d9:8b:18:e4:a5:6c:28:54:
         23:18:52:63:86:b4:1b:8f:06:c2:7a:40:95:d8:7d:80:bb:3d:
         5f:6a:a1:00:be:3b:b5:73:24:bb:3b:66:3c:48:b8:95:f2:3e:
         11:8b:5d:e1:f1:6b:6f:b2:65:5f:55:02:e9:2a:02:fd:11:38:
         d7:9b:4b:6f:6f:38:1d:a7:78:2c:51:6e:c4:ce:58:ce:6a:f1:
         fc:f0:2c:6e:a7:68:73:4d:b4:9a:da:5f:51:0f:b1:ad:02:dc:
         52:6b:ac:f2:05:65:23:ae:ac:45:8f:c3:0a:af:1a:33:13:a4:
         c4:0d:48:78:b3:3f:17:ff:d0:b6:aa:5c:af:06:dc:b9:49:a1:
         c3:82:97:89:1a:61:31:7e:14:44:4d:e4:a9:d7:96:36:85:1c:
         51:5f:fe:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7aeOHryX9fSqXyo5kWf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNGQxNzU2NTNmYmJkZThkOTg5ZDI3ZTM4MjdiYzAxMWUw
MjBhMDEwHhcNMjQwNjE1MjIwMzUyWhcNMjQwNjE2MjIwMzUyWjAzMTEwLwYDVQQD
EyhlMjU3YzRiYTA1Y2Q3MmJkZTdhNjNjY2ZiYmQ3YjY5NjZhZjNlNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP8CpOFWy2D8QLNf8JIAU/CbMOav
h6hchcqnRZzKYYEluRGNdtvjsC4VvGRfgVxM252xGyh0sC0RxyyFALV0ePeGVP0x
8XrYpHpt5BysSb4i3kxW/6fXmmlnBhBx4WOnlnlgbDNeSNYjqo/jq6QgOr9pcGef
NwMNRzdibbNSZBJhOvbGEyrsMdBfSXUH1k1HLxN4amHAqGE9Jg30J+dAFtn1BRXk
l3POjQBKHkLqahADRipS+1h01GFhJad1oMs7dtwKaVGlOA/yJ+70WLEyqYWKhvo+
NvM9yoBu5BK3PvJgPXuL2RdI+Nz0f7APEcTsDtxeqi1ZiLRgv2nDDtGG/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJXxLoFzXK956Y8z7vXtpZq8+ahMB8GA1UdIwQY
MBaAFLBNF1ZT+73o2YnSfjgnvAEeAgoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYt
YTE3YzUwZjA5ODVkLzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYtYTE3YzUwZjA5ODVk
LzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+iAffxZ
mv7EAomhdy34m0uyBXzBRcBsn9WWl+R5lJC21B3i4TQ9kmNIdqxXZ6/T4cez1oc2
b+6y2kVu+dVrJIsR/r0tK6KCRW+d3iFttf0YF+Rx77/xTQpYJKSiynvcCPWwRdmL
GOSlbChUIxhSY4a0G48GwnpAldh9gLs9X2qhAL47tXMkuztmPEi4lfI+EYtd4fFr
b7JlX1UC6SoC/RE415tLb284Had4LFFuxM5Yzmrx/PAsbqdoc020mtpfUQ+xrQLc
Umus8gVlI66sRY/DCq8aMxOkxA1IeLM/F//QtqpcrwbcuUmhw4KXiRphMX4URE3k
qdeWNoUcUV/+fw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:55:00 2024 by rpki-client on console-ams.rpki-client.org