Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
File:                     WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json)
Hash identifier:          I2JN5yXYp5uwPSogosvuwbgqhN44T1UY56fPM8L5Z+k=
Subject key identifier:   7A:56:E1:EC:37:54:EA:03:DE:83:88:FC:DA:8D:37:42:50:1F:0B:7D
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Certificate issuer:       /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial:       019045665BF433AFACB36E781B89C39CDD0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
Manifest number:          07BA
Signing time:             Sun 23 Jun 2024 14:00:54 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:54 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:54 +0000
Files and hashes:         1: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: KTH7LOBwFnI4I0xs+56Di7iL5tV7KM/VhzjWxVCVaIA=)
                          2: WQukTYvzZx8IxRnXzDYTWsN_6v0.roa (hash: Le1kfbUxh60jfBr3YjzYX+BsZTmWxmq7eKHSb04Fz0k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:5b:f4:33:af:ac:b3:6e:78:1b:89:c3:9c:dd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
        Validity
            Not Before: Jun 23 14:00:54 2024 GMT
            Not After : Jun 24 14:00:54 2024 GMT
        Subject: CN=7a56e1ec3754ea03de8388fcda8d3742501f0b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:68:a9:94:c0:26:97:7c:25:a4:e1:9c:e5:
                    b2:00:cc:0c:a1:8a:a9:19:eb:0c:d3:6d:53:09:13:
                    27:98:38:ee:78:97:de:b4:7c:53:47:21:99:41:aa:
                    1b:d5:3c:e5:b6:9d:c2:2a:44:45:7b:53:e4:7e:87:
                    10:c2:ac:0a:a1:a5:2d:17:67:13:c2:af:d3:34:21:
                    a2:56:f7:54:b6:76:6f:3d:7c:da:52:b2:e6:ff:01:
                    76:e2:36:63:d3:30:1e:7a:e2:e9:3b:a2:5b:df:8f:
                    9d:9a:10:6a:90:b3:f5:d7:66:2f:f1:41:fd:ac:39:
                    d3:3d:db:56:e4:c8:6c:83:17:b0:a8:50:2c:40:c1:
                    2e:99:b6:8f:ee:a7:a5:0e:ae:9e:95:21:63:c7:bf:
                    2a:6c:83:7b:f5:65:32:bf:2d:63:ad:e1:6c:e1:82:
                    47:3b:0e:fa:de:48:f4:f5:7f:f3:ec:3f:81:3f:0a:
                    d5:96:b9:0a:3c:08:c7:e4:7c:15:49:59:a5:55:aa:
                    d4:5a:44:b1:8a:9b:d4:ed:af:0d:84:58:8c:8d:b4:
                    7e:6c:e4:ee:e5:9c:f7:9f:c6:75:9e:5e:83:50:36:
                    12:df:ae:86:ea:62:1d:fc:5f:17:d5:4d:79:4c:fc:
                    c4:e4:7a:b1:c8:3c:25:04:d6:59:5a:5a:0f:b3:4f:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:E1:EC:37:54:EA:03:DE:83:88:FC:DA:8D:37:42:50:1F:0B:7D
            X509v3 Authority Key Identifier:
                keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:61:58:69:18:36:ac:91:5e:fb:4b:28:2d:14:67:55:c2:cf:
         51:a4:53:4f:bb:ed:4c:56:a2:dc:a7:8f:28:a2:95:94:d5:d6:
         50:e8:d7:21:71:07:1f:25:ab:23:dd:b8:91:b3:37:2d:a0:12:
         6f:f2:5a:2f:c2:32:6a:6e:63:e9:fd:e4:43:40:4a:13:af:ce:
         84:d6:52:be:3b:a4:59:5c:21:08:7f:0a:92:9c:76:22:16:69:
         94:84:f0:c1:2f:75:fa:8b:c0:6a:22:5a:27:0b:64:83:63:d4:
         13:62:64:8f:b3:1d:cb:32:5a:30:b9:64:4f:80:71:a2:c1:95:
         46:78:c9:b4:b0:05:da:ec:45:f1:7d:52:18:9f:13:72:b9:93:
         97:67:d1:95:03:cd:89:f6:fc:93:ab:ad:28:cf:cd:e7:d3:37:
         c4:c4:ab:74:98:66:1b:18:2f:df:a4:15:82:96:a0:4b:d7:d1:
         ef:6d:5a:58:d2:8c:67:75:60:31:23:04:98:66:d8:73:2b:ae:
         e7:21:d5:d4:d2:52:6b:71:aa:3a:d0:4c:a9:39:93:96:e3:17:
         d5:22:b8:a8:f0:3f:b7:c3:33:00:5a:95:d9:8d:da:78:e0:14:
         c4:4e:5e:2a:ec:ab:41:1e:0e:04:0d:0c:18:cf:b7:f7:b0:37:
         33:85:5b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFZlv0M6+ss254G4nDnN0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2VlM2MyZWM0YTE5MDI1YzAzOTJhZDFlZTZhNDY0MWJj
ZGQwYzgwHhcNMjQwNjIzMTQwMDU0WhcNMjQwNjI0MTQwMDU0WjAzMTEwLwYDVQQD
Eyg3YTU2ZTFlYzM3NTRlYTAzZGU4Mzg4ZmNkYThkMzc0MjUwMWYwYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhZoqZTAJpd8JaThnOWyAMwMoYqp
GesM021TCRMnmDjueJfetHxTRyGZQaob1Tzltp3CKkRFe1PkfocQwqwKoaUtF2cT
wq/TNCGiVvdUtnZvPXzaUrLm/wF24jZj0zAeeuLpO6Jb34+dmhBqkLP112Yv8UH9
rDnTPdtW5MhsgxewqFAsQMEumbaP7qelDq6elSFjx78qbIN79WUyvy1jreFs4YJH
Ow763kj09X/z7D+BPwrVlrkKPAjH5HwVSVmlVarUWkSxipvU7a8NhFiMjbR+bOTu
5Zz3n8Z1nl6DUDYS366G6mId/F8X1U15TPzE5HqxyDwlBNZZWloPs0/YNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpW4ew3VOoD3oOI/NqNN0JQHwt9MB8GA1UdIwQY
MBaAFFg+48LsShkCXAOSrR7mpGQbzdDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2Mt
MzVjYzIxNGRlYTgxLzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2MtMzVjYzIxNGRlYTgx
LzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GFYaRg2
rJFe+0soLRRnVcLPUaRTT7vtTFai3KePKKKVlNXWUOjXIXEHHyWrI924kbM3LaAS
b/JaL8Iyam5j6f3kQ0BKE6/OhNZSvjukWVwhCH8Kkpx2IhZplITwwS91+ovAaiJa
Jwtkg2PUE2Jkj7MdyzJaMLlkT4BxosGVRnjJtLAF2uxF8X1SGJ8TcrmTl2fRlQPN
ifb8k6utKM/N59M3xMSrdJhmGxgv36QVgpagS9fR721aWNKMZ3VgMSMEmGbYcyuu
5yHV1NJSa3GqOtBMqTmTluMX1SK4qPA/t8MzAFqV2Y3aeOAUxE5eKuyrQR4OBA0M
GM+397A3M4VbCA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:11:49 2024 by rpki-client on console-fra.rpki-client.org