Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          AOvxc2hfGVCeXVw34t4d0fDECqgrHBCrJ1Unl+6aUb4=
Subject key identifier:   AF:B4:87:E1:63:1D:F6:0E:2D:3A:91:C9:3D:9C:BD:F4:CD:A2:FD:83
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       018F82FD9BD8B67CB3C2D87CA81283A3A0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          0EA1
Signing time:             Thu 16 May 2024 20:00:09 +0000
Manifest this update:     Thu 16 May 2024 20:00:09 +0000
Manifest next update:     Fri 17 May 2024 20:00:09 +0000
Files and hashes:         1: 6P5QhBox8f1FD5DRtL_bSAN92yQ.roa (hash: M45HxJTMaprsaE1PmI1YokaWjkTOLJZLeS5VKH+0JsA=)
                          2: G10N9QIJrw78dwc6N6vHPg1h-dY.roa (hash: GzfGW1VX6jchYsyt0iS1CzyCJEq9P6KCAtvflPmGACw=)
                          3: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: kzEbIQporF7ZZKG+4i454Kw8i7jrdijnZ/j+YARfmtY=)
                          4: n8Qy3rSGsjWQ4cHYZ_4wxrVj_7o.roa (hash: ZvAFqxTMxvnSTbkPJu+0clrkrEyN0rVBihqjZ+ZH0is=)
                          5: r2fMVW-IDkAJ5LeDSFJjM_dq-c4.roa (hash: bS92CnkuxdwUJdm6yfdyJaUhVnsL6UHHMAgPPhGG0Pk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:82:fd:9b:d8:b6:7c:b3:c2:d8:7c:a8:12:83:a3:a0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: May 16 20:00:09 2024 GMT
            Not After : May 17 20:00:09 2024 GMT
        Subject: CN=afb487e1631df60e2d3a91c93d9cbdf4cda2fd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:95:67:9c:8b:64:ed:05:e5:ef:35:8b:fd:
                    a5:01:9a:6c:6e:c3:bb:66:43:5a:ad:e3:8a:74:58:
                    44:c6:e7:83:f6:17:d5:e9:80:2d:8c:ed:f3:7b:8e:
                    c7:74:e4:51:77:9e:61:2f:9f:ee:f4:50:f5:71:61:
                    7f:49:b2:97:32:0c:0f:51:11:5a:f5:12:ba:35:6c:
                    1c:fd:7d:ed:b5:49:43:2d:8d:47:fb:c5:dc:ed:3d:
                    0e:ff:30:fd:fe:8c:49:3f:16:53:d0:2f:2c:e6:e9:
                    ef:22:94:a0:7b:92:2f:cf:ec:fc:97:2f:30:7b:c7:
                    7a:1f:5d:f3:61:bf:45:a2:93:00:5b:19:1b:96:38:
                    d2:3c:a4:2d:6f:e0:d3:9a:91:2a:be:7b:c9:57:1f:
                    d5:b6:8f:90:b7:b2:2f:90:c9:49:5d:5b:35:12:61:
                    e1:47:47:39:ed:79:d6:fa:eb:70:33:2e:1c:c4:60:
                    0c:55:72:91:fd:3d:51:37:3d:6d:11:1d:8f:6f:b0:
                    3c:ef:fe:a4:f9:b3:21:0a:bf:74:c9:28:58:46:91:
                    8c:12:8d:f2:a9:c2:52:c3:8a:34:54:27:1d:f8:09:
                    95:f6:46:15:8c:71:d0:84:d1:5e:81:be:66:6d:37:
                    a4:76:87:d8:d4:96:1f:84:b7:42:93:ac:44:c3:df:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:87:E1:63:1D:F6:0E:2D:3A:91:C9:3D:9C:BD:F4:CD:A2:FD:83
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:fb:b4:ef:2a:48:c1:1d:22:46:2b:5f:8d:a0:26:10:12:
         0e:63:50:d5:f6:77:20:04:ce:fa:fb:72:a7:ca:4e:87:62:ca:
         1f:e7:c8:7a:25:7c:80:a9:b8:f5:cd:3d:f1:f0:0d:61:56:42:
         72:b4:70:92:03:19:e8:4a:d2:85:06:6b:ad:32:f0:78:5c:18:
         38:a2:2c:a3:ad:03:26:2b:7a:61:b7:30:d1:21:d8:e2:44:44:
         58:e9:25:10:81:55:73:13:55:5b:75:24:2a:25:a5:21:48:3c:
         e1:30:a5:6a:b4:2f:a0:17:15:94:96:18:f4:7d:18:fa:a6:ff:
         90:2d:d3:6c:3d:c7:3f:48:35:ea:3e:3e:80:7d:f3:d5:0e:96:
         b4:51:f9:5a:40:43:62:30:78:ba:97:cc:99:41:cf:c1:30:ed:
         d5:9c:cd:54:55:db:0a:66:b3:5d:51:2f:19:53:27:e8:6d:12:
         e3:68:1d:98:6c:c1:4a:82:39:63:bc:0d:de:9e:fa:bb:77:df:
         d8:be:01:ac:13:9b:36:3b:9e:ee:0a:21:43:87:cf:23:0f:ea:
         46:3d:f8:38:ee:30:ea:1c:2f:28:29:72:dc:aa:80:0d:df:b7:
         0f:c8:a0:d6:75:12:0b:96:be:c7:4d:22:2a:3d:cd:97:90:1e:
         4d:0b:87:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+C/ZvYtnyzwth8qBKDo6DWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTAzMDYxZTFhZTUwM2VjNjNkOTcwYjMwODc1ZGQ5M2Zm
YWJiZGYwHhcNMjQwNTE2MjAwMDA5WhcNMjQwNTE3MjAwMDA5WjAzMTEwLwYDVQQD
EyhhZmI0ODdlMTYzMWRmNjBlMmQzYTkxYzkzZDljYmRmNGNkYTJmZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA2VZ5yLZO0F5e81i/2lAZpsbsO7
ZkNareOKdFhExueD9hfV6YAtjO3ze47HdORRd55hL5/u9FD1cWF/SbKXMgwPURFa
9RK6NWwc/X3ttUlDLY1H+8Xc7T0O/zD9/oxJPxZT0C8s5unvIpSge5Ivz+z8ly8w
e8d6H13zYb9FopMAWxkbljjSPKQtb+DTmpEqvnvJVx/Vto+Qt7IvkMlJXVs1EmHh
R0c57XnW+utwMy4cxGAMVXKR/T1RNz1tER2Pb7A87/6k+bMhCr90yShYRpGMEo3y
qcJSw4o0VCcd+AmV9kYVjHHQhNFegb5mbTekdofY1JYfhLdCk6xEw9//VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+0h+FjHfYOLTqRyT2cvfTNov2DMB8GA1UdIwQY
MBaAFJNQMGHhrlA+xj2XCzCHXdk/+rvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEt
YzYyM2VkOGYyZjI4LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEtYzYyM2VkOGYyZjI4
LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkj7tO8q
SMEdIkYrX42gJhASDmNQ1fZ3IATO+vtyp8pOh2LKH+fIeiV8gKm49c098fANYVZC
crRwkgMZ6ErShQZrrTLweFwYOKIso60DJit6Ybcw0SHY4kREWOklEIFVcxNVW3Uk
KiWlIUg84TClarQvoBcVlJYY9H0Y+qb/kC3TbD3HP0g16j4+gH3z1Q6WtFH5WkBD
YjB4upfMmUHPwTDt1ZzNVFXbCmazXVEvGVMn6G0S42gdmGzBSoI5Y7wN3p76u3ff
2L4BrBObNjue7gohQ4fPIw/qRj34OO4w6hwvKCly3KqADd+3D8ig1nUSC5a+x00i
Kj3Nl5AeTQuH3A==
-----END CERTIFICATE-----
Generated at Thu May 16 22:50:57 2024 by rpki-client on console-ams.rpki-client.org