Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File:                     seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier:          YOmIrlQDW3nowBaYKGt8Q2vnNKGH7BrP20fP/lwW5Ho=
Subject key identifier:   02:56:85:7E:A9:3B:1F:5A:66:75:07:A9:61:6C:62:60:25:07:74:98
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer:       /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial:       019369D95D408AB16EAF01E499DF503698B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number:          11C8
Signing time:             Tue 26 Nov 2024 19:01:12 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:12 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:12 +0000
Files and hashes:         1: MwEt7Mk8bRaeUqGg711FfPJuumA.roa (hash: QNuDZqBymeM1l34bxhe+enaiVfiUKVm7wIx8201bbXQ=)
                          2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: ts7FRBoY8Q8PkoWL1lawVo1Z1myDh2o7dJNVgX5xq2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:5d:40:8a:b1:6e:af:01:e4:99:df:50:36:98:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
        Validity
            Not Before: Nov 26 19:01:12 2024 GMT
            Not After : Nov 27 19:01:12 2024 GMT
        Subject: CN=0256857ea93b1f5a667507a9616c626025077498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b4:ea:10:ff:0d:62:c2:7b:85:b6:97:bc:9d:
                    30:d9:00:ff:79:c5:5c:9d:3d:5d:d2:76:64:ee:4a:
                    c1:1c:ba:21:cf:62:a3:7c:23:01:41:15:58:3c:9d:
                    19:91:47:63:b0:65:2d:f0:ed:1f:d9:28:06:0f:09:
                    6a:f1:f0:25:f8:ce:ec:dc:93:95:97:77:18:5d:f7:
                    3f:c7:b9:d6:dd:bc:3d:75:64:7e:e6:20:7d:8a:92:
                    a7:d1:f6:76:e2:2b:1c:f8:f0:87:74:cb:48:4d:b7:
                    86:08:7f:f3:b1:86:8f:49:62:4d:5f:6b:50:60:8a:
                    73:dc:9d:77:b9:a1:8f:33:a7:8c:da:1d:5c:be:fb:
                    ed:b0:18:9b:25:10:6e:e7:df:24:82:7d:f0:e6:88:
                    b8:ee:e2:ca:10:e8:66:70:d7:ff:2f:8b:28:e9:63:
                    ea:4a:81:92:e1:49:14:9d:0a:9c:3d:96:6d:45:08:
                    66:68:79:4b:77:3a:1f:e5:62:65:c1:65:1e:19:ec:
                    73:6a:97:c7:f4:7e:18:48:fc:28:96:7b:8f:7b:d4:
                    0b:9f:12:02:9f:ad:3a:f7:71:1e:83:9c:5c:b7:5f:
                    18:41:c0:72:60:42:69:97:2c:87:75:05:21:80:32:
                    3a:ca:98:45:34:b3:8a:36:fe:80:7d:44:83:0d:d2:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:85:7E:A9:3B:1F:5A:66:75:07:A9:61:6C:62:60:25:07:74:98
            X509v3 Authority Key Identifier:
                keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:4d:7c:ae:37:e3:1d:48:03:ce:91:a1:3f:3e:4c:b7:2e:
         59:da:5c:7e:a6:a7:68:0d:71:79:c1:b2:d4:e8:f6:e0:db:c0:
         e8:fb:f4:9d:e2:12:e3:d8:13:c1:ee:98:89:13:8f:80:1e:44:
         8f:3a:51:80:88:a0:8b:06:68:80:9f:df:0a:14:c8:55:5f:69:
         da:a6:7e:0b:b0:cb:74:d3:e2:8d:3a:8b:d6:25:88:77:dc:d8:
         95:24:e4:ca:d9:74:75:c4:e5:e2:6b:2c:f5:19:3b:c7:e0:6c:
         0d:9b:fd:0c:93:fa:8a:13:82:d5:9e:b3:fb:b5:a2:09:af:04:
         ae:f0:99:8e:77:2a:f0:b2:69:b6:dd:f3:23:e6:1b:39:70:06:
         37:bf:ec:96:34:04:a5:fb:1c:92:28:7b:2c:83:8d:f3:9c:c1:
         c8:d5:9e:9d:44:51:bc:88:3a:12:33:ec:42:f3:d9:1c:a3:4b:
         e0:25:62:53:94:f5:6d:57:d2:29:e7:d3:0a:38:17:ba:09:10:
         2e:48:cc:eb:ce:40:99:11:b4:e6:e5:bc:f3:40:af:a4:57:d7:
         e6:e7:9b:6d:c1:80:0c:18:f0:00:1e:e5:d8:b9:ea:51:95:66:
         02:66:cc:58:81:fc:9a:8c:4b:d6:d0:ba:f0:86:ec:8a:ed:13:
         92:70:fb:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2V1AirFurwHkmd9QNpiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZTUyNjQwNWQ0NTE3NDI0Nzk5NGZlZWRiMmQ3ZTVkZDQw
NzkzZGQwHhcNMjQxMTI2MTkwMTEyWhcNMjQxMTI3MTkwMTEyWjAzMTEwLwYDVQQD
EygwMjU2ODU3ZWE5M2IxZjVhNjY3NTA3YTk2MTZjNjI2MDI1MDc3NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LTqEP8NYsJ7hbaXvJ0w2QD/ecVc
nT1d0nZk7krBHLohz2KjfCMBQRVYPJ0ZkUdjsGUt8O0f2SgGDwlq8fAl+M7s3JOV
l3cYXfc/x7nW3bw9dWR+5iB9ipKn0fZ24isc+PCHdMtITbeGCH/zsYaPSWJNX2tQ
YIpz3J13uaGPM6eM2h1cvvvtsBibJRBu598kgn3w5oi47uLKEOhmcNf/L4so6WPq
SoGS4UkUnQqcPZZtRQhmaHlLdzof5WJlwWUeGexzapfH9H4YSPwolnuPe9QLnxIC
n60693Eeg5xct18YQcByYEJplyyHdQUhgDI6yphFNLOKNv6AfUSDDdKxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJWhX6pOx9aZnUHqWFsYmAlB3SYMB8GA1UdIwQY
MBaAFLHlJkBdRRdCR5lP7tstfl3UB5PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMt
NDBlZTU2NDZjNzQ3LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMtNDBlZTU2NDZjNzQ3
LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl39NfK43
4x1IA86RoT8+TLcuWdpcfqanaA1xecGy1Oj24NvA6Pv0neIS49gTwe6YiROPgB5E
jzpRgIigiwZogJ/fChTIVV9p2qZ+C7DLdNPijTqL1iWId9zYlSTkytl0dcTl4mss
9Rk7x+BsDZv9DJP6ihOC1Z6z+7WiCa8ErvCZjncq8LJptt3zI+YbOXAGN7/sljQE
pfsckih7LION85zByNWenURRvIg6EjPsQvPZHKNL4CViU5T1bVfSKefTCjgXugkQ
LkjM685AmRG05uW880CvpFfX5uebbcGADBjwAB7l2LnqUZVmAmbMWIH8moxL1tC6
8Ibsiu0TknD7Nw==
-----END CERTIFICATE-----