Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File:                     wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier:          zqcqY5YVb9NKLByHM7JS9jGsSi1N4qtX9VpWPeN2/dw=
Subject key identifier:   11:7A:4D:9B:45:B4:7B:31:CE:48:B5:95:D0:84:A5:4D:D6:B5:85:52
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer:       /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial:       018F87495BC7375C4EAF4DAC02B93DE7BA73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number:          03EA
Signing time:             Fri 17 May 2024 16:01:22 +0000
Manifest this update:     Fri 17 May 2024 16:01:22 +0000
Manifest next update:     Sat 18 May 2024 16:01:22 +0000
Files and hashes:         1: BHfnSnxwgMt3nwqjqNuxY72SDas.roa (hash: scUzXZjulWN2OiDVv1cmZcAxOkJUp4OgHlVvGDDBm98=)
                          2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: f3RR8Rr9MFlkK6Ll9+WR5Zmp/5Df5yjMsiG7BFrpf50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5b:c7:37:5c:4e:af:4d:ac:02:b9:3d:e7:ba:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
        Validity
            Not Before: May 17 16:01:22 2024 GMT
            Not After : May 18 16:01:22 2024 GMT
        Subject: CN=117a4d9b45b47b31ce48b595d084a54dd6b58552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:63:ef:6b:ec:90:ec:2d:f6:b3:29:01:2a:
                    1d:ee:0e:34:3f:48:f9:ec:a9:9a:c5:d4:f1:74:69:
                    0b:5d:95:69:90:01:4b:fb:a5:3c:29:92:c3:00:64:
                    78:60:dc:2a:30:76:d2:1c:bb:ce:4e:97:52:10:d4:
                    42:a1:bc:74:14:7c:94:de:83:49:e3:e5:79:8d:3c:
                    91:53:b6:f5:cf:a5:5d:56:6f:ba:1a:89:e9:7e:c8:
                    c3:c0:24:3e:e6:03:2b:b4:51:ed:d4:79:04:da:1f:
                    be:3c:d9:86:7b:24:52:cd:41:a0:ec:15:25:1e:a0:
                    8d:66:85:03:1c:91:68:ae:ff:32:a1:ba:08:45:60:
                    d8:bd:11:d3:12:44:ce:d0:5b:df:7b:75:d2:3a:4b:
                    65:df:2d:87:94:1b:15:ad:74:50:41:b1:da:9e:da:
                    80:95:1b:0f:0d:40:1c:87:06:90:d3:7d:3f:f6:26:
                    97:ed:06:70:ee:e6:c2:2e:c5:f3:6f:6a:13:b0:b8:
                    b7:a4:16:a9:b2:ca:e4:21:c3:c3:43:9d:dd:0f:70:
                    88:45:15:e8:d6:0a:35:af:d0:96:c3:c7:2b:a1:e9:
                    95:d6:35:52:2a:fc:6b:88:e4:55:3a:b3:b1:27:68:
                    53:42:59:d7:e5:be:14:75:e7:2b:d8:b9:6e:55:1b:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7A:4D:9B:45:B4:7B:31:CE:48:B5:95:D0:84:A5:4D:D6:B5:85:52
            X509v3 Authority Key Identifier:
                keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:73:c2:84:0d:4e:eb:b9:c5:02:af:f0:90:49:36:dd:72:fb:
         46:50:1d:9d:81:73:68:3e:fe:9a:8d:26:4e:17:88:09:d9:10:
         74:9c:55:dc:39:36:9c:3b:95:25:27:ff:e9:00:95:de:5d:ec:
         06:3c:f4:bc:77:e4:83:9d:a1:49:2e:d6:42:c6:16:2d:7a:e8:
         49:dc:9c:c8:e7:70:da:20:d4:e9:ac:60:4e:26:f4:9f:ec:8a:
         b5:ea:fd:4b:26:60:42:81:b9:66:4f:67:86:cc:fc:e7:52:d5:
         de:f7:e7:3c:cc:b0:b1:79:66:ed:a2:27:53:0b:c9:32:4d:35:
         62:25:68:7e:e6:03:3e:63:7a:4d:46:2c:fd:61:c3:f5:a5:d9:
         2f:e6:66:02:49:fb:6f:d5:6b:c2:44:d9:ac:fe:df:39:50:84:
         a5:de:95:b6:2c:ed:58:65:3a:9d:f1:cb:6a:11:9b:f0:59:01:
         32:a5:d2:6a:14:04:52:1a:5e:d8:e3:d1:7f:ab:a3:18:fd:78:
         6f:2e:02:0c:87:d3:e7:42:9c:ff:e9:40:cb:e0:9c:9b:a3:cf:
         a7:ba:b2:93:a4:f8:58:70:4f:9a:a1:85:92:92:63:11:9d:3e:
         10:20:61:a6:bc:9f:30:7b:88:9b:4a:f2:32:2f:5d:1d:db:b9:
         c8:d6:4b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSVvHN1xOr02sArk957pzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTkxMWQ2OWM0ZjY0NTdhMTA5ZGU3N2IxYzc1MjQ5ZGM1
MzBlMTcwHhcNMjQwNTE3MTYwMTIyWhcNMjQwNTE4MTYwMTIyWjAzMTEwLwYDVQQD
EygxMTdhNGQ5YjQ1YjQ3YjMxY2U0OGI1OTVkMDg0YTU0ZGQ2YjU4NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yNj72vskOwt9rMpASod7g40P0j5
7KmaxdTxdGkLXZVpkAFL+6U8KZLDAGR4YNwqMHbSHLvOTpdSENRCobx0FHyU3oNJ
4+V5jTyRU7b1z6VdVm+6GonpfsjDwCQ+5gMrtFHt1HkE2h++PNmGeyRSzUGg7BUl
HqCNZoUDHJForv8yoboIRWDYvRHTEkTO0Fvfe3XSOktl3y2HlBsVrXRQQbHantqA
lRsPDUAchwaQ030/9iaX7QZw7ubCLsXzb2oTsLi3pBapssrkIcPDQ53dD3CIRRXo
1go1r9CWw8croemV1jVSKvxriORVOrOxJ2hTQlnX5b4Udecr2LluVRvUJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF6TZtFtHsxzki1ldCEpU3WtYVSMB8GA1UdIwQY
MBaAFMKpEdacT2RXoQned7HHUkncUw4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODkt
ZmNkYWQyYjU2NTZiLzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODktZmNkYWQyYjU2NTZi
LzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHPChA1O
67nFAq/wkEk23XL7RlAdnYFzaD7+mo0mTheICdkQdJxV3Dk2nDuVJSf/6QCV3l3s
Bjz0vHfkg52hSS7WQsYWLXroSdycyOdw2iDU6axgTib0n+yKter9SyZgQoG5Zk9n
hsz851LV3vfnPMywsXlm7aInUwvJMk01YiVofuYDPmN6TUYs/WHD9aXZL+ZmAkn7
b9VrwkTZrP7fOVCEpd6VtiztWGU6nfHLahGb8FkBMqXSahQEUhpe2OPRf6ujGP14
by4CDIfT50Kc/+lAy+Ccm6PPp7qyk6T4WHBPmqGFkpJjEZ0+ECBhpryfMHuIm0ry
Mi9dHdu5yNZLRg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:25:09 2024 by rpki-client on console-fra.rpki-client.org