Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File:                     seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier:          rvhGgX4Sq+Od2ibAlzpBs+1hdJRv0WAPFGIh1i2PkHg=
Subject key identifier:   4A:0E:0B:41:23:75:CE:EC:B8:80:D2:2C:EA:71:14:A5:18:48:53:A4
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer:       /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial:       01901DEB64D3A0360ADC5F6101DA063C9405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number:          1013
Signing time:             Sat 15 Jun 2024 22:01:24 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:24 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:24 +0000
Files and hashes:         1: MwEt7Mk8bRaeUqGg711FfPJuumA.roa (hash: QNuDZqBymeM1l34bxhe+enaiVfiUKVm7wIx8201bbXQ=)
                          2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: ooduKM7nkbbuSh3iOFn9UKKjvsj+3inKkA2oqZ1kVEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:64:d3:a0:36:0a:dc:5f:61:01:da:06:3c:94:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
        Validity
            Not Before: Jun 15 22:01:24 2024 GMT
            Not After : Jun 16 22:01:24 2024 GMT
        Subject: CN=4a0e0b412375ceecb880d22cea7114a5184853a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:a0:7c:52:5e:41:e4:4c:7f:cf:e2:21:84:
                    aa:72:45:69:73:fa:2b:0b:77:f9:09:3f:35:69:1e:
                    db:fa:d7:cf:da:c6:c0:79:32:d3:75:9a:3b:d3:70:
                    71:bb:0b:c2:ed:d7:83:55:5e:a4:1a:4e:11:b8:7e:
                    0d:59:8e:59:57:ed:da:b1:79:b6:c0:7d:c1:09:de:
                    84:95:5e:50:13:57:a9:bd:e0:59:58:74:a0:15:f4:
                    e6:2e:83:77:9f:51:22:d5:b8:3b:96:1c:42:c5:57:
                    ec:f2:ed:3a:1d:0f:ee:a4:8d:77:b6:7e:c8:9b:d2:
                    19:eb:5b:1d:73:4c:90:2b:40:da:05:df:e6:e7:f2:
                    19:1a:95:de:af:a8:ae:06:4b:07:51:48:f0:6f:84:
                    01:c8:2e:cd:fd:a1:e8:89:4f:14:71:a8:ea:ac:ea:
                    9c:a4:61:68:99:78:4b:c9:a7:98:b1:19:a8:b6:33:
                    65:7d:17:7b:ca:c0:af:a8:e4:45:f9:5c:30:f2:13:
                    bd:58:0f:6b:95:6e:07:80:55:0c:4f:d7:72:30:55:
                    5f:9f:42:c8:da:8c:ea:49:b3:b1:b6:23:72:9d:99:
                    12:f8:24:d9:a6:69:7c:04:22:e3:08:db:34:2f:b8:
                    5b:c1:68:6b:1d:f5:cf:32:ce:a3:7c:5e:10:60:81:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0E:0B:41:23:75:CE:EC:B8:80:D2:2C:EA:71:14:A5:18:48:53:A4
            X509v3 Authority Key Identifier:
                keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f3:05:b3:47:d8:41:5a:a8:c9:ea:0f:e2:b5:fb:08:42:3d:
         7d:4a:32:b7:24:54:24:a7:44:db:e1:83:4f:c6:59:52:4e:35:
         6f:a9:8c:f3:d7:fe:1d:d9:f9:81:5f:0a:87:93:d2:bd:04:88:
         ea:10:8b:f3:33:fd:d8:7d:2e:ac:c0:22:c3:2c:54:b4:be:33:
         6c:ca:af:e3:10:4d:d9:84:87:70:74:40:1a:1c:0d:24:a9:6a:
         4a:c1:f7:00:cc:cb:02:ac:69:6f:6b:1d:49:66:e6:c7:3a:9a:
         00:e6:c6:fa:57:41:35:b4:3f:d0:27:47:49:e7:7d:4e:b6:ba:
         51:2a:76:bd:37:6b:f1:47:97:02:51:a9:71:2b:07:4c:1a:f8:
         36:06:b1:25:fe:d3:52:43:f5:55:ba:17:5b:b5:ac:74:e3:e7:
         7a:1b:ae:13:fa:ce:8b:b1:55:8b:d6:7d:fe:e4:90:94:b5:25:
         73:09:3f:fb:56:ab:e4:05:af:85:ee:63:4a:81:bc:76:58:48:
         95:2f:88:6e:d0:60:13:e6:4a:74:e0:1c:a1:e6:5b:43:e0:54:
         6f:0b:25:3b:dd:0b:ad:30:74:7b:cc:dd:8a:e0:19:78:43:74:
         46:00:9f:3c:05:17:5d:24:9a:c5:75:8a:ea:0c:f8:bd:3f:10:
         3d:9b:38:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd62TToDYK3F9hAdoGPJQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZTUyNjQwNWQ0NTE3NDI0Nzk5NGZlZWRiMmQ3ZTVkZDQw
NzkzZGQwHhcNMjQwNjE1MjIwMTI0WhcNMjQwNjE2MjIwMTI0WjAzMTEwLwYDVQQD
Eyg0YTBlMGI0MTIzNzVjZWVjYjg4MGQyMmNlYTcxMTRhNTE4NDg1M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRqgfFJeQeRMf8/iIYSqckVpc/or
C3f5CT81aR7b+tfP2sbAeTLTdZo703BxuwvC7deDVV6kGk4RuH4NWY5ZV+3asXm2
wH3BCd6ElV5QE1epveBZWHSgFfTmLoN3n1Ei1bg7lhxCxVfs8u06HQ/upI13tn7I
m9IZ61sdc0yQK0DaBd/m5/IZGpXer6iuBksHUUjwb4QByC7N/aHoiU8UcajqrOqc
pGFomXhLyaeYsRmotjNlfRd7ysCvqORF+Vww8hO9WA9rlW4HgFUMT9dyMFVfn0LI
2ozqSbOxtiNynZkS+CTZpml8BCLjCNs0L7hbwWhrHfXPMs6jfF4QYIF23wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoOC0Ejdc7suIDSLOpxFKUYSFOkMB8GA1UdIwQY
MBaAFLHlJkBdRRdCR5lP7tstfl3UB5PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMt
NDBlZTU2NDZjNzQ3LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMtNDBlZTU2NDZjNzQ3
LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/MFs0fY
QVqoyeoP4rX7CEI9fUoytyRUJKdE2+GDT8ZZUk41b6mM89f+Hdn5gV8Kh5PSvQSI
6hCL8zP92H0urMAiwyxUtL4zbMqv4xBN2YSHcHRAGhwNJKlqSsH3AMzLAqxpb2sd
SWbmxzqaAObG+ldBNbQ/0CdHSed9Tra6USp2vTdr8UeXAlGpcSsHTBr4NgaxJf7T
UkP1VboXW7WsdOPnehuuE/rOi7FVi9Z9/uSQlLUlcwk/+1ar5AWvhe5jSoG8dlhI
lS+IbtBgE+ZKdOAcoeZbQ+BUbwslO90LrTB0e8zdiuAZeEN0RgCfPAUXXSSaxXWK
6gz4vT8QPZs49Q==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:58:32 2024 by rpki-client on console-fra.rpki-client.org