Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File:                     wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier:          WfspsP2G5z1JjTvAPDvc75ubYKv+Aj6Jqv6IMcdAxJc=
Subject key identifier:   C5:5A:40:72:41:83:50:75:A5:44:CB:A3:18:AB:AD:6D:7A:75:FE:41
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer:       /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial:       0193640E1B9DDCC8EA4822F17F760A755D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number:          05EA
Signing time:             Mon 25 Nov 2024 16:01:06 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:06 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:06 +0000
Files and hashes:         1: BHfnSnxwgMt3nwqjqNuxY72SDas.roa (hash: scUzXZjulWN2OiDVv1cmZcAxOkJUp4OgHlVvGDDBm98=)
                          2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: LMxkPq9KUfCVI/e86/6ml0e9mcIlMx4IcbQpKcxhXRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:1b:9d:dc:c8:ea:48:22:f1:7f:76:0a:75:5d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
        Validity
            Not Before: Nov 25 16:01:06 2024 GMT
            Not After : Nov 26 16:01:06 2024 GMT
        Subject: CN=c55a407241835075a544cba318abad6d7a75fe41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:89:a8:93:03:8f:d4:f8:b1:4d:a9:bf:c4:
                    27:c6:46:d7:6d:00:48:e5:5a:c3:90:10:68:b8:ae:
                    fb:58:28:64:39:26:6f:41:46:79:ca:e8:5b:64:ee:
                    79:0d:21:44:69:af:83:a1:18:ae:de:ed:00:24:46:
                    f2:f7:20:a8:a0:19:21:dd:e1:a4:e8:0f:39:56:78:
                    8e:2f:30:ab:f9:f3:06:6d:2e:c5:b8:4f:24:07:8e:
                    00:55:b9:ac:89:d8:b1:b0:c6:44:32:2a:db:f6:73:
                    6d:ec:03:f5:af:21:99:e3:8a:18:61:ed:5b:01:7d:
                    1e:f7:6e:dc:1c:6f:7f:fe:cc:22:ea:30:71:d6:cf:
                    10:31:f7:ca:a1:a9:50:ac:78:6c:87:f0:9b:fe:44:
                    fa:31:f5:56:9d:fd:95:c2:16:ab:98:dd:84:ef:f8:
                    4c:d0:cc:24:a4:3f:2c:e8:47:8b:9b:7a:2c:99:75:
                    11:67:ce:c9:78:c8:c5:fa:fb:df:94:5e:98:a9:4f:
                    a9:a4:9d:c6:1c:27:40:03:b3:68:7a:07:c4:64:b6:
                    08:1c:d0:8d:ef:2e:86:a8:15:6c:d2:56:68:93:cb:
                    6e:07:91:a3:03:54:4c:12:03:9f:67:b5:60:3d:7d:
                    6a:12:3c:bd:e6:8b:d6:02:a6:76:43:3c:1b:b6:03:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5A:40:72:41:83:50:75:A5:44:CB:A3:18:AB:AD:6D:7A:75:FE:41
            X509v3 Authority Key Identifier:
                keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:a7:ef:d7:de:21:fe:50:63:28:08:5b:d5:f9:2a:79:c9:
         d4:39:76:3f:fe:8d:aa:f0:0c:0a:dd:d0:cc:e8:4b:4e:07:13:
         ab:2e:29:b2:0d:6b:d9:33:be:22:c6:9c:15:26:26:f0:5b:92:
         71:9b:6a:ee:f0:f2:b8:ba:71:6c:b9:cd:46:da:e1:6f:e5:52:
         8b:63:f9:02:0a:05:62:d3:9d:7c:8a:89:a1:3f:bf:91:e4:ff:
         0c:1a:61:c8:40:f5:93:e2:37:3e:9c:d3:84:22:e7:fe:6a:26:
         78:03:20:87:00:83:e9:3e:de:49:24:ac:62:cf:8f:7c:df:43:
         20:0e:fe:3c:2b:95:27:56:bc:61:5f:fd:0c:6d:91:36:d3:78:
         0e:0e:b7:9d:52:05:14:40:5a:e4:4a:c6:8a:8e:57:54:b4:ef:
         4a:cc:81:28:76:c5:30:88:be:e6:8b:29:2a:d7:84:0b:4d:f2:
         5f:b0:58:40:c2:36:dc:9b:ab:7c:5b:cc:85:d7:cc:d8:41:66:
         3d:3c:38:bb:b8:da:ca:8c:72:e0:42:4f:35:b4:55:6f:74:89:
         55:8e:65:a8:f4:74:fe:72:77:65:40:0b:b5:ad:15:50:d4:44:
         5d:be:f9:fc:50:72:21:4b:e4:9b:9e:5c:19:ec:75:75:35:84:
         29:01:cb:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkDhud3MjqSCLxf3YKdV2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTkxMWQ2OWM0ZjY0NTdhMTA5ZGU3N2IxYzc1MjQ5ZGM1
MzBlMTcwHhcNMjQxMTI1MTYwMTA2WhcNMjQxMTI2MTYwMTA2WjAzMTEwLwYDVQQD
EyhjNTVhNDA3MjQxODM1MDc1YTU0NGNiYTMxOGFiYWQ2ZDdhNzVmZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzOJqJMDj9T4sU2pv8QnxkbXbQBI
5VrDkBBouK77WChkOSZvQUZ5yuhbZO55DSFEaa+DoRiu3u0AJEby9yCooBkh3eGk
6A85VniOLzCr+fMGbS7FuE8kB44AVbmsidixsMZEMirb9nNt7AP1ryGZ44oYYe1b
AX0e927cHG9//swi6jBx1s8QMffKoalQrHhsh/Cb/kT6MfVWnf2VwharmN2E7/hM
0MwkpD8s6EeLm3osmXURZ87JeMjF+vvflF6YqU+ppJ3GHCdAA7NoegfEZLYIHNCN
7y6GqBVs0lZok8tuB5GjA1RMEgOfZ7VgPX1qEjy95ovWAqZ2QzwbtgP4DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVaQHJBg1B1pUTLoxirrW16df5BMB8GA1UdIwQY
MBaAFMKpEdacT2RXoQned7HHUkncUw4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODkt
ZmNkYWQyYjU2NTZiLzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODktZmNkYWQyYjU2NTZi
LzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4qn79fe
If5QYygIW9X5KnnJ1Dl2P/6NqvAMCt3QzOhLTgcTqy4psg1r2TO+IsacFSYm8FuS
cZtq7vDyuLpxbLnNRtrhb+VSi2P5AgoFYtOdfIqJoT+/keT/DBphyED1k+I3PpzT
hCLn/momeAMghwCD6T7eSSSsYs+PfN9DIA7+PCuVJ1a8YV/9DG2RNtN4Dg63nVIF
FEBa5ErGio5XVLTvSsyBKHbFMIi+5ospKteEC03yX7BYQMI23JurfFvMhdfM2EFm
PTw4u7jayoxy4EJPNbRVb3SJVY5lqPR0/nJ3ZUALta0VUNREXb75/FByIUvkm55c
Gex1dTWEKQHLyA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:09:38 2024 by rpki-client on console-fra.rpki-client.org