Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File:                     WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier:          HfhRMkdaW4/4aarf492FFSaL0TfRCg+idPuu4R9izVo=
Subject key identifier:   11:45:D2:95:AB:36:A2:E7:E3:7A:46:33:C7:71:F1:61:C3:8F:C7:EE
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer:       /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial:       01901BFE99E2EA353BFFB6A43402E9E31326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:03:08 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:08 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:08 +0000
Files and hashes:         1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: XZ0CGedqHludMU2dLmaYzGpGoLjza5WqPSxQDqa5YUs=)
                          2: ggHL7E8xocdvR2Wkoj4DkdUmnXI.roa (hash: C85jmLr3jaGGjh3HRSNMK8usD16B8LJMDCk/j9tGYIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:99:e2:ea:35:3b:ff:b6:a4:34:02:e9:e3:13:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
        Validity
            Not Before: Jun 15 13:03:08 2024 GMT
            Not After : Jun 16 13:03:08 2024 GMT
        Subject: CN=1145d295ab36a2e7e37a4633c771f161c38fc7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:a7:ce:f9:b4:90:60:18:64:d0:92:26:7b:
                    0c:3f:77:e3:61:dc:45:58:4d:70:23:3d:ce:62:38:
                    62:5e:6d:66:13:a3:ce:30:19:a2:74:60:4e:cf:59:
                    39:d9:c9:83:3d:20:6e:d6:99:3e:a2:4b:21:f4:46:
                    a7:c2:8b:51:ec:c2:62:b6:16:24:26:f5:5f:98:6c:
                    78:9b:a6:19:c9:46:3f:88:9a:30:db:7c:0f:17:a8:
                    18:35:4a:57:f6:c9:c8:2f:73:d3:71:e6:38:7e:bf:
                    8a:ad:5e:85:a9:7e:62:63:1f:43:38:9d:19:af:4b:
                    62:d1:fd:92:05:6b:74:35:04:79:4e:d0:98:c1:dc:
                    a0:20:c9:08:35:91:b9:f4:82:5e:21:d5:b0:a7:c4:
                    71:f3:92:cb:0e:7d:dc:5c:c9:f8:5d:f6:07:ac:40:
                    ae:f5:e5:f5:6a:5a:ed:67:9e:e2:22:7f:47:f5:19:
                    7c:f2:ec:03:8f:df:7a:f9:fb:8c:77:b5:c6:5e:56:
                    d7:23:e7:c5:be:c6:9f:eb:72:7b:ac:0e:8e:65:d3:
                    78:33:17:ea:2c:dc:f2:f7:59:d6:d1:bf:32:b5:45:
                    92:4f:89:25:44:0c:e9:91:eb:cd:f1:08:bf:6d:af:
                    5a:eb:67:15:f1:f7:88:f1:cf:1a:61:66:d5:61:64:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:D2:95:AB:36:A2:E7:E3:7A:46:33:C7:71:F1:61:C3:8F:C7:EE
            X509v3 Authority Key Identifier:
                keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:c0:5b:8c:c5:1b:25:46:5e:3d:a8:03:57:b0:f3:b0:9d:
         80:7d:b3:df:bd:16:87:e1:62:5a:8a:7a:08:6f:81:d6:9e:2a:
         57:4d:a5:1a:67:ae:66:84:23:f5:77:fc:4e:87:41:59:40:1e:
         ef:ae:91:2a:da:80:31:2e:6b:84:95:72:15:57:74:15:88:29:
         6c:1b:7b:63:c1:1c:a3:26:a2:ac:fb:cd:9a:cf:54:24:bf:f7:
         55:e5:67:c1:51:bf:69:e7:95:d5:50:4a:25:b0:19:e8:1a:d1:
         92:57:7c:74:38:f4:8b:59:17:a6:70:af:3c:1f:22:6f:27:a5:
         3b:8b:b7:a7:08:d1:91:ec:86:36:3f:40:77:f0:75:b4:83:24:
         3b:ee:05:ec:29:33:2b:aa:e4:ca:f6:7a:8d:bf:c8:9d:b5:23:
         f9:9d:8b:1d:2f:3c:75:cc:30:1d:4e:9d:c3:c9:7e:e4:5e:05:
         4a:39:e5:8f:ae:d9:1c:90:b4:83:60:b9:ec:ad:94:2a:99:20:
         cd:c1:98:6d:60:6e:0f:0a:73:56:d4:fd:db:59:f1:f8:b7:ca:
         ec:1f:19:e8:30:89:d7:14:64:24:43:12:d3:d5:69:ed:fe:93:
         88:ee:43:8f:67:fb:80:f7:ff:b8:42:02:2d:6d:a0:93:01:44:
         f0:3c:1c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/pni6jU7/7akNALp4xMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi
ODhjMTIwHhcNMjQwNjE1MTMwMzA4WhcNMjQwNjE2MTMwMzA4WjAzMTEwLwYDVQQD
EygxMTQ1ZDI5NWFiMzZhMmU3ZTM3YTQ2MzNjNzcxZjE2MWMzOGZjN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzanzvm0kGAYZNCSJnsMP3fjYdxF
WE1wIz3OYjhiXm1mE6POMBmidGBOz1k52cmDPSBu1pk+oksh9EanwotR7MJithYk
JvVfmGx4m6YZyUY/iJow23wPF6gYNUpX9snIL3PTceY4fr+KrV6FqX5iYx9DOJ0Z
r0ti0f2SBWt0NQR5TtCYwdygIMkINZG59IJeIdWwp8Rx85LLDn3cXMn4XfYHrECu
9eX1alrtZ57iIn9H9Rl88uwDj996+fuMd7XGXlbXI+fFvsaf63J7rA6OZdN4Mxfq
LNzy91nW0b8ytUWST4klRAzpkevN8Qi/ba9a62cV8feI8c8aYWbVYWQhPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFF0pWrNqLn43pGM8dx8WHDj8fuMB8GA1UdIwQY
MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt
YWM1MzZiMmFiNGY4LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4
LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQzAW4zF
GyVGXj2oA1ew87CdgH2z370Wh+FiWop6CG+B1p4qV02lGmeuZoQj9Xf8TodBWUAe
766RKtqAMS5rhJVyFVd0FYgpbBt7Y8EcoyairPvNms9UJL/3VeVnwVG/aeeV1VBK
JbAZ6BrRkld8dDj0i1kXpnCvPB8ibyelO4u3pwjRkeyGNj9Ad/B1tIMkO+4F7Ckz
K6rkyvZ6jb/InbUj+Z2LHS88dcwwHU6dw8l+5F4FSjnlj67ZHJC0g2C57K2UKpkg
zcGYbWBuDwpzVtT921nx+LfK7B8Z6DCJ1xRkJEMS09Vp7f6TiO5Dj2f7gPf/uEIC
LW2gkwFE8DwczA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:40 2024 by rpki-client on console-fra.rpki-client.org