Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File:                     wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier:          /kqfFn8/zRabD/lo0bsP1ht3ws+gE86Rmm/mLnltaAQ=
Subject key identifier:   2A:2D:80:0F:55:9D:79:59:5E:58:59:3E:10:00:8A:05:16:7B:97:75
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer:       /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial:       018F874AD0B10E7E6D177620BB73F5BDABD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: XgLe25af1c62D1H_ojEozMq7op4.roa (hash: svJI79kaRCShfto3Q8yIVwe42sSE8csxYyjqqMwQLrY=)
                          2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: 2xz0tVGtxq9ApTN3cOLRLQZ4guT9pY2ZQyne5L+xIm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d0:b1:0e:7e:6d:17:76:20:bb:73:f5:bd:ab:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=2a2d800f559d79595e58593e10008a05167b9775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:10:3d:25:2a:23:e8:8c:14:dd:5f:75:74:
                    85:04:17:97:3b:6c:8c:fa:15:4a:a7:2a:0f:eb:e0:
                    03:c0:e8:39:59:64:f0:4e:93:1f:78:93:36:db:7c:
                    3e:b6:2f:45:43:64:bb:39:bb:e7:c4:08:df:4c:74:
                    e2:0e:50:db:09:15:d3:54:72:06:18:c5:26:ef:01:
                    b1:da:b3:da:98:84:d0:23:1f:36:94:27:ee:11:d5:
                    22:a8:fb:79:7d:25:85:f0:1b:dd:d8:cd:8d:10:d4:
                    b2:d8:b2:0d:a7:03:7b:3c:d0:f5:e8:21:c1:4e:44:
                    51:4d:e5:08:67:ed:65:58:44:64:48:de:6b:d7:2c:
                    ca:a7:0e:45:a6:54:6c:e1:cb:b7:35:d9:2b:40:d6:
                    11:cc:67:b5:11:22:fc:9c:91:3d:08:83:15:4e:d8:
                    ff:9c:90:51:53:8b:00:1b:80:ec:60:d9:69:30:d2:
                    91:87:5a:12:63:a9:11:70:b2:5d:69:f0:f6:a7:23:
                    9e:7c:c8:75:ab:f5:ee:3d:67:ea:ce:e2:6a:a9:dd:
                    b6:4c:f0:1a:38:3e:ec:15:4c:0f:35:dd:2e:3d:37:
                    21:a7:17:d8:4f:d0:2b:c6:96:b9:0c:90:8c:34:7d:
                    58:97:b3:76:d5:1d:60:13:3d:57:4a:2b:d2:41:5a:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2D:80:0F:55:9D:79:59:5E:58:59:3E:10:00:8A:05:16:7B:97:75
            X509v3 Authority Key Identifier:
                keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b5:fb:11:65:65:e7:ae:1c:54:76:2d:03:77:de:47:26:ea:
         14:a6:fb:b6:29:56:8a:33:9d:59:8e:cc:ee:24:e1:75:34:d8:
         15:80:a4:bd:4e:6a:dc:23:f8:9a:7d:51:aa:d6:9b:90:c8:32:
         7d:ad:36:b3:e2:80:42:97:a1:68:f4:eb:31:95:a3:35:47:28:
         c0:34:34:82:b0:8d:72:f8:16:59:c5:d3:30:ef:d7:82:a9:0b:
         ce:17:81:ef:33:d6:77:d8:a1:d4:29:31:30:35:9f:41:45:aa:
         65:b4:6a:1b:7b:1c:20:31:eb:43:6c:e8:47:ab:7e:c4:f6:67:
         6d:ef:2e:0b:58:de:c4:f5:34:cc:22:63:d1:c8:9f:8f:b0:41:
         e3:de:7c:ec:b3:34:e8:ba:31:9f:82:43:b4:54:fc:08:b1:b6:
         cd:b2:27:4f:c8:97:b9:77:29:c7:fc:38:13:d4:4e:94:44:2a:
         1c:dc:7e:f9:cc:50:d8:0f:e5:65:22:96:d6:29:02:85:58:90:
         47:1b:b6:9c:f9:25:7d:fa:cd:a6:a4:3f:15:5b:bf:69:2c:c7:
         79:e5:58:3c:9a:79:d6:cf:1e:71:8d:3c:b3:ff:cb:9e:3c:9f:
         58:2f:e3:e6:1a:aa:c9:6d:a9:82:0d:9a:cd:a1:6a:4f:16:70:
         ef:6e:51:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HStCxDn5tF3Ygu3P1vavRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMjRiZGJkZWQ2ZTVkMmZlMGZiNTI2NTAwYjNmZjg3NjY1
YjYwMGUwHhcNMjQwNTE3MTYwMjU4WhcNMjQwNTE4MTYwMjU4WjAzMTEwLwYDVQQD
EygyYTJkODAwZjU1OWQ3OTU5NWU1ODU5M2UxMDAwOGEwNTE2N2I5Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIwQPSUqI+iMFN1fdXSFBBeXO2yM
+hVKpyoP6+ADwOg5WWTwTpMfeJM223w+ti9FQ2S7ObvnxAjfTHTiDlDbCRXTVHIG
GMUm7wGx2rPamITQIx82lCfuEdUiqPt5fSWF8Bvd2M2NENSy2LINpwN7PND16CHB
TkRRTeUIZ+1lWERkSN5r1yzKpw5FplRs4cu3NdkrQNYRzGe1ESL8nJE9CIMVTtj/
nJBRU4sAG4DsYNlpMNKRh1oSY6kRcLJdafD2pyOefMh1q/XuPWfqzuJqqd22TPAa
OD7sFUwPNd0uPTchpxfYT9Arxpa5DJCMNH1Yl7N21R1gEz1XSivSQVp6KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCotgA9VnXlZXlhZPhAAigUWe5d1MB8GA1UdIwQY
MBaAFMAkvb3tbl0v4PtSZQCz/4dmW2AOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDct
YWVhYTlkZjAxYTlkLzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDctYWVhYTlkZjAxYTlk
LzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLX7EWVl
564cVHYtA3feRybqFKb7tilWijOdWY7M7iThdTTYFYCkvU5q3CP4mn1RqtabkMgy
fa02s+KAQpehaPTrMZWjNUcowDQ0grCNcvgWWcXTMO/XgqkLzheB7zPWd9ih1Ckx
MDWfQUWqZbRqG3scIDHrQ2zoR6t+xPZnbe8uC1jexPU0zCJj0cifj7BB49587LM0
6Loxn4JDtFT8CLG2zbInT8iXuXcpx/w4E9ROlEQqHNx++cxQ2A/lZSKW1ikChViQ
Rxu2nPklffrNpqQ/FVu/aSzHeeVYPJp51s8ecY08s//LnjyfWC/j5hqqyW2pgg2a
zaFqTxZw725R5Q==
-----END CERTIFICATE-----
Generated at Fri May 17 23:41:32 2024 by rpki-client on console-ams.rpki-client.org