Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File:                     SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier:          vTNhdmqW2RnGHrY0lzWDtpm+tkUMwMB7QMOWorAb/Zo=
Subject key identifier:   3C:EE:DC:1D:72:02:A8:56:0E:EE:79:FC:5E:94:E4:C8:76:54:05:19
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer:       /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial:       01901D0F6F6A5E318CA66D1ACBA41A71E29A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number:          0EAB
Signing time:             Sat 15 Jun 2024 18:01:09 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:09 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:09 +0000
Files and hashes:         1: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: fMYyMjiWpa8KySCCe4jo9cmDptD66+2ENnPTtdv2JFs=)
                          2: edgGblueYm4F1mdOSZHncHOC85s.roa (hash: xcqTHVylBrVemQEkfrpvbmzp8ddpM981eKtAJiicR+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:6f:6a:5e:31:8c:a6:6d:1a:cb:a4:1a:71:e2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
        Validity
            Not Before: Jun 15 18:01:09 2024 GMT
            Not After : Jun 16 18:01:09 2024 GMT
        Subject: CN=3ceedc1d7202a8560eee79fc5e94e4c876540519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:b3:05:ce:89:1d:cd:31:04:79:cd:01:5a:
                    62:10:a3:33:47:26:c8:37:40:3f:4f:c4:b9:c8:eb:
                    cd:86:30:31:a4:9b:5f:96:ca:8c:56:e6:6f:7d:bf:
                    24:6e:01:ec:1a:44:be:2e:c5:75:6b:6c:45:b7:c3:
                    dd:ec:d4:51:f8:9a:5e:0f:70:02:81:42:8f:98:1d:
                    b6:e9:2a:9c:d2:ef:0c:b4:be:db:cc:ee:e4:0a:50:
                    bf:b3:40:31:b1:15:e0:6f:b5:e9:f9:24:bf:4d:eb:
                    f1:70:67:90:c6:b9:1d:e9:eb:12:4b:3f:fb:a8:06:
                    5b:ef:06:de:c5:cd:f6:c7:ba:e2:87:4b:59:32:c6:
                    8b:56:4b:f2:27:66:13:0d:81:e0:5c:0b:b1:ee:4f:
                    86:99:87:d3:c7:1c:b3:b0:43:99:54:bb:24:dd:ed:
                    c5:6a:f7:10:2e:9c:c9:be:2a:b8:2a:79:de:2e:16:
                    20:e4:e3:3c:eb:01:5d:60:fb:7c:98:76:13:ba:e9:
                    30:66:17:9b:6f:c7:f1:82:27:c6:e7:d3:4f:d2:e7:
                    e1:04:30:72:bf:7a:fb:b2:a2:46:c8:4b:89:a1:d8:
                    4e:a1:bf:ea:47:f3:df:40:8a:7c:2a:50:c1:27:39:
                    79:c9:6e:bb:b1:18:46:0e:a4:0a:99:38:6f:0e:eb:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:DC:1D:72:02:A8:56:0E:EE:79:FC:5E:94:E4:C8:76:54:05:19
            X509v3 Authority Key Identifier:
                keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:44:91:81:77:80:92:b0:cf:43:68:d5:64:d6:08:a0:d8:49:
         4d:06:3d:aa:ad:a7:f6:0e:25:ae:51:4b:7f:75:3a:41:7a:61:
         f1:58:f0:a2:6e:15:c8:bd:c7:7b:66:f7:ec:28:31:6f:8a:a4:
         5c:fe:3a:a2:81:8b:be:17:4b:e0:68:62:91:a7:02:10:e9:05:
         58:00:c0:3b:24:16:4f:5a:d8:1d:37:a8:48:51:1b:ad:cb:5b:
         aa:38:b3:8b:74:10:c6:43:6e:78:6b:d8:dc:ff:e7:f2:ea:dc:
         4f:f4:ae:ab:69:64:03:69:ae:74:4c:7e:d2:99:ff:7a:90:df:
         50:64:07:f7:df:4a:62:04:e8:4b:de:2c:54:50:44:e1:76:01:
         fb:e5:cb:7f:a0:52:7b:40:35:d2:13:54:2a:91:91:d1:8a:6d:
         0c:d8:12:bf:a0:6f:25:71:4a:c9:79:25:23:c7:b0:31:04:8d:
         cd:20:92:33:98:f3:6c:68:99:93:49:d9:c5:a0:c6:19:48:61:
         4d:cb:ea:72:d5:e8:20:7e:3c:04:0a:0d:87:a6:da:14:54:39:
         61:3c:26:47:38:1c:66:2c:f1:ff:c6:ba:ed:f9:ab:04:3a:11:
         e3:60:69:9d:6e:b5:8f:ca:59:b1:a3:a9:db:de:a4:81:a9:e1:
         b2:92:ec:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD29qXjGMpm0ay6QaceKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0
YzdjZWUwHhcNMjQwNjE1MTgwMTA5WhcNMjQwNjE2MTgwMTA5WjAzMTEwLwYDVQQD
EygzY2VlZGMxZDcyMDJhODU2MGVlZTc5ZmM1ZTk0ZTRjODc2NTQwNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9SzBc6JHc0xBHnNAVpiEKMzRybI
N0A/T8S5yOvNhjAxpJtflsqMVuZvfb8kbgHsGkS+LsV1a2xFt8Pd7NRR+JpeD3AC
gUKPmB226Sqc0u8MtL7bzO7kClC/s0AxsRXgb7Xp+SS/TevxcGeQxrkd6esSSz/7
qAZb7wbexc32x7rih0tZMsaLVkvyJ2YTDYHgXAux7k+GmYfTxxyzsEOZVLsk3e3F
avcQLpzJviq4KnneLhYg5OM86wFdYPt8mHYTuukwZhebb8fxgifG59NP0ufhBDBy
v3r7sqJGyEuJodhOob/qR/PfQIp8KlDBJzl5yW67sRhGDqQKmThvDut3nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzu3B1yAqhWDu55/F6U5Mh2VAUZMB8GA1UdIwQY
MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt
NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2
LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0SRgXeA
krDPQ2jVZNYIoNhJTQY9qq2n9g4lrlFLf3U6QXph8Vjwom4VyL3He2b37Cgxb4qk
XP46ooGLvhdL4GhikacCEOkFWADAOyQWT1rYHTeoSFEbrctbqjizi3QQxkNueGvY
3P/n8urcT/Suq2lkA2mudEx+0pn/epDfUGQH999KYgToS94sVFBE4XYB++XLf6BS
e0A10hNUKpGR0YptDNgSv6BvJXFKyXklI8ewMQSNzSCSM5jzbGiZk0nZxaDGGUhh
TcvqctXoIH48BAoNh6baFFQ5YTwmRzgcZizx/8a67fmrBDoR42BpnW61j8pZsaOp
296kganhspLsxg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:17:57 2024 by rpki-client on console-ams.rpki-client.org