Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File:                     r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier:          LHEldnOkUfjeu+aVs6CiVb43KHAYNckUlTdR8c5RwPc=
Subject key identifier:   46:02:A6:41:22:BE:10:46:1D:5D:D9:B8:C1:C6:E2:F9:45:41:26:E2
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer:       /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial:       018F8D81A88A5585E16BA309273F2DB2B2E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number:          11C1
Signing time:             Sat 18 May 2024 21:00:35 +0000
Manifest this update:     Sat 18 May 2024 21:00:35 +0000
Manifest next update:     Sun 19 May 2024 21:00:35 +0000
Files and hashes:         1: 8ffazngXfDZjGs-bXCZus0SZPf0.roa (hash: APZayn2Ef7FKu6H7ZNpDKJAGBQntfz5vvaajwme2o94=)
                          2: NmjPqrrksgY2ZffUECdgQDMLNFI.roa (hash: BiGaE6BEwMwIpTO9lzLkIymq+CGYIDE2gEMMqo25OM0=)
                          3: S1irkiNRHFedIT4Kv39qWQKiCkM.roa (hash: g91H2WU047Uk9PQyokJ9dHHEMv3XwN1nOrbfbxAOZ2Q=)
                          4: agFnj8f_4aSpjF2C3Td2xjLK2XQ.roa (hash: r/uRUyNJo8SdRFNM9FWYXLy+6Vfv/OloOJJDndHj/8k=)
                          5: bzGU5_iJke4zJbrpwYceYUPudlo.roa (hash: G/iSSVpBoHYX0fYyJHPzn1q2y4aarCOXPSZJXt3iP6Y=)
                          6: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: mxYcTamJAEbWy2kLyTcbHOsmZChu6Un8xduPTCtA/L0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:81:a8:8a:55:85:e1:6b:a3:09:27:3f:2d:b2:b2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
        Validity
            Not Before: May 18 21:00:35 2024 GMT
            Not After : May 19 21:00:35 2024 GMT
        Subject: CN=4602a64122be10461d5dd9b8c1c6e2f9454126e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:c7:63:10:72:37:bd:14:60:4d:ab:35:9c:
                    45:15:66:45:6b:e9:46:83:74:d4:fb:b0:ae:1a:9a:
                    0b:31:85:b7:bc:07:46:30:63:9b:cf:c2:af:07:6a:
                    32:e3:a2:41:3d:1b:e5:de:38:75:3c:ea:00:3f:9a:
                    f2:6b:3a:2a:f2:85:26:63:61:1f:85:65:92:63:16:
                    50:b3:6d:6e:b6:f9:c9:61:d6:f5:e2:be:af:e3:76:
                    a3:e9:d9:cd:a9:54:4f:f0:0c:1a:d7:5b:e5:8e:58:
                    05:b6:3d:08:e7:1c:fe:0d:e4:eb:57:33:09:cc:a5:
                    46:1f:a1:c4:62:d0:ca:5c:e4:8f:aa:36:05:3d:c3:
                    9c:1e:dc:6e:fa:c9:f5:f8:31:92:0f:1b:7c:6b:9d:
                    51:ae:5b:8b:df:56:83:d1:56:07:86:be:2c:7e:f4:
                    65:e6:8e:e4:69:e0:8f:47:89:91:e9:c6:82:be:b6:
                    05:cf:eb:38:b1:68:4d:02:86:6a:ff:9e:2b:e4:ba:
                    9b:8c:33:ae:cf:f5:b9:3c:97:0f:9b:4b:d3:05:a9:
                    fb:33:b6:bc:60:ec:9e:d6:47:f1:ed:3d:56:a2:9c:
                    94:e8:9b:f2:d4:4c:38:72:27:d9:9f:49:a7:52:1a:
                    40:d8:80:35:a6:91:2e:45:1e:5a:5b:4f:d9:bc:ec:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:A6:41:22:BE:10:46:1D:5D:D9:B8:C1:C6:E2:F9:45:41:26:E2
            X509v3 Authority Key Identifier:
                keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:06:85:e4:5e:d8:6a:f9:6e:bb:aa:78:cd:55:b8:f8:66:97:
         d8:e8:da:9c:6b:e8:f4:ff:7c:98:c2:f0:c5:3a:c4:5a:17:f6:
         0d:f4:a5:7f:fd:14:36:50:85:6a:c4:6f:c1:bd:44:d1:90:e4:
         66:7f:70:16:e4:d3:c7:2a:90:98:cf:8e:bb:76:cb:e1:ce:ac:
         31:7b:36:15:a7:58:1c:02:fb:2a:ab:df:e2:42:40:ff:6a:0b:
         9c:81:43:20:8a:0d:82:54:7a:d3:53:37:e4:a7:00:8d:98:4a:
         4a:3d:b4:d0:41:93:2f:fc:a7:4c:37:39:fe:5a:9f:8f:15:31:
         0a:27:85:fc:55:c2:7d:4e:19:ac:3b:f4:99:68:32:5d:66:11:
         7e:69:7d:bc:3c:68:a1:1d:73:7a:7b:d3:b5:c1:f8:07:71:84:
         32:2b:24:a1:7a:a9:2c:e2:1c:d5:e5:40:2d:17:ee:73:e2:5c:
         fd:a4:f8:34:38:4b:d2:88:aa:c8:53:4d:bd:dd:74:7d:a2:78:
         8c:01:f4:bd:a9:48:f6:e9:d8:99:79:4d:1b:be:77:05:9e:f3:
         a9:5d:27:b0:4d:31:19:16:1f:55:8f:9f:5d:b7:48:ac:80:68:
         26:f5:1f:37:62:aa:7e:77:32:21:f3:bb:a4:77:c8:32:68:33:
         64:02:03:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NgaiKVYXha6MJJz8tsrLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4
OWU5NWIwHhcNMjQwNTE4MjEwMDM1WhcNMjQwNTE5MjEwMDM1WjAzMTEwLwYDVQQD
Eyg0NjAyYTY0MTIyYmUxMDQ2MWQ1ZGQ5YjhjMWM2ZTJmOTQ1NDEyNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX3HYxByN70UYE2rNZxFFWZFa+lG
g3TU+7CuGpoLMYW3vAdGMGObz8KvB2oy46JBPRvl3jh1POoAP5ryazoq8oUmY2Ef
hWWSYxZQs21utvnJYdb14r6v43aj6dnNqVRP8Awa11vljlgFtj0I5xz+DeTrVzMJ
zKVGH6HEYtDKXOSPqjYFPcOcHtxu+sn1+DGSDxt8a51RrluL31aD0VYHhr4sfvRl
5o7kaeCPR4mR6caCvrYFz+s4sWhNAoZq/54r5LqbjDOuz/W5PJcPm0vTBan7M7a8
YOye1kfx7T1WopyU6Jvy1Ew4cifZn0mnUhpA2IA1ppEuRR5aW0/ZvOwQCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYCpkEivhBGHV3ZuMHG4vlFQSbiMB8GA1UdIwQY
MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt
NDAyMTI2NWMzOWIwLzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw
LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwaF5F7Y
avluu6p4zVW4+GaX2OjanGvo9P98mMLwxTrEWhf2DfSlf/0UNlCFasRvwb1E0ZDk
Zn9wFuTTxyqQmM+Ou3bL4c6sMXs2FadYHAL7Kqvf4kJA/2oLnIFDIIoNglR601M3
5KcAjZhKSj200EGTL/ynTDc5/lqfjxUxCieF/FXCfU4ZrDv0mWgyXWYRfml9vDxo
oR1zenvTtcH4B3GEMiskoXqpLOIc1eVALRfuc+Jc/aT4NDhL0oiqyFNNvd10faJ4
jAH0valI9unYmXlNG753BZ7zqV0nsE0xGRYfVY+fXbdIrIBoJvUfN2KqfncyIfO7
pHfIMmgzZAIDBQ==
-----END CERTIFICATE-----
Generated at Sat May 18 23:28:40 2024 by rpki-client on console-ams.rpki-client.org