Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File:                     Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier:          d6hnx3vF5s8vvlHwkBow9yrJ0nhMjR3d9+dQE6xDvyc=
Subject key identifier:   49:C7:18:3D:9F:96:FF:F5:2E:23:ED:FA:82:D3:8D:44:91:29:8D:E3
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer:       /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial:       019361E8533EE1216731CB40A99F8C480C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number:          03D6
Signing time:             Mon 25 Nov 2024 06:00:35 +0000
Manifest this update:     Mon 25 Nov 2024 06:00:35 +0000
Manifest next update:     Tue 26 Nov 2024 06:00:35 +0000
Files and hashes:         1: GXBuGY8wNZDZGFR8DqdqhMqCL8o.roa (hash: sNI8sz/TvYxTCB/ZRcZ6iWSDJyVlzUhjY2XQlcbvKMk=)
                          2: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: wGHJkoI85hExmOMnOjXDxw7tAU73VfZVpeFok6cYwic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:e8:53:3e:e1:21:67:31:cb:40:a9:9f:8c:48:0c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
        Validity
            Not Before: Nov 25 06:00:35 2024 GMT
            Not After : Nov 26 06:00:35 2024 GMT
        Subject: CN=49c7183d9f96fff52e23edfa82d38d4491298de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:4d:e1:ad:cd:58:99:a3:a2:b3:5b:ce:a7:
                    bd:3a:8e:32:ef:dd:5d:c3:4d:65:e9:89:39:11:f9:
                    ba:2b:b5:45:8e:ef:0b:0f:47:7c:d0:8a:a0:16:e0:
                    3a:52:ee:f7:e1:0b:12:8b:24:7a:3d:7b:91:24:86:
                    ee:4f:db:fc:3a:04:1f:8c:44:b8:f0:60:05:54:e2:
                    8e:6d:b9:27:40:7f:bd:70:dd:31:13:06:c6:80:4b:
                    1a:f3:29:a8:f7:7a:51:e4:30:83:1d:94:26:f0:67:
                    ac:0f:81:fb:4a:ed:0f:c4:b2:96:cd:39:43:9e:65:
                    26:c5:c7:44:e8:59:ff:c7:6a:79:0f:a3:d0:be:d7:
                    53:df:9c:00:20:05:a0:b1:b0:19:20:94:ec:23:ee:
                    30:b6:91:15:2a:33:2d:97:7a:ff:e9:57:c2:c1:0b:
                    3f:7a:30:9a:71:df:46:e7:3d:80:76:86:87:5b:02:
                    6e:25:2c:74:87:7a:aa:14:54:71:d6:b8:dd:88:c7:
                    8c:e6:29:c7:05:b6:a7:c6:51:fe:08:c7:46:0c:cb:
                    d7:d3:de:c3:68:81:73:56:9c:a2:f5:cd:b7:12:79:
                    d9:6c:91:02:62:1d:e2:ed:fb:c7:04:a6:28:68:37:
                    99:1c:7d:ea:a8:04:2c:9b:73:e8:3d:7c:3a:70:93:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C7:18:3D:9F:96:FF:F5:2E:23:ED:FA:82:D3:8D:44:91:29:8D:E3
            X509v3 Authority Key Identifier:
                keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e5:81:ed:8c:2a:99:ac:97:95:e3:d5:bf:37:bb:a5:86:d6:
         55:96:70:f4:0e:4a:7a:2b:e2:9a:d5:c8:a6:3c:04:3c:7f:6c:
         17:84:50:4c:52:ca:86:43:df:38:e6:41:a7:4e:35:fd:7b:5a:
         74:9e:b7:92:7a:a2:f8:8c:d1:e7:ad:68:cb:1f:68:84:b9:72:
         4a:31:6e:38:ea:18:9a:95:59:76:6e:52:6c:b3:c8:69:77:a8:
         3e:2a:aa:64:c9:a3:cd:55:e5:cc:2d:2d:02:01:54:95:27:30:
         28:be:94:51:e1:bc:c1:a7:c3:40:77:65:18:c1:85:4d:3d:4b:
         48:e0:34:cb:47:db:80:0f:cc:92:45:7b:95:ab:e2:c0:62:e9:
         52:00:b3:40:c5:3a:c5:a8:83:57:e3:9c:c5:58:c2:c7:f7:7c:
         03:c6:47:c1:9e:2a:73:ae:43:39:30:5a:b7:f1:1b:c5:5a:ac:
         eb:5d:30:62:bf:61:4f:0d:7f:aa:d1:9e:2b:d9:31:86:6d:85:
         ba:bf:df:c6:a7:70:24:f5:11:36:87:f1:76:7c:3e:1d:82:a1:
         a4:8a:4f:86:5f:4a:e8:6e:a9:db:70:a5:ac:79:85:62:3f:08:
         75:a0:82:7c:00:4e:3a:70:54:0c:a8:3d:f9:6b:81:64:62:b4:
         36:66:8f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNh6FM+4SFnMctAqZ+MSAxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWQ0NWVkZDdlZGRlOWE4Yjg2MmE3MzlhZGE4ZTc4Yjdk
YzgyYjkwHhcNMjQxMTI1MDYwMDM1WhcNMjQxMTI2MDYwMDM1WjAzMTEwLwYDVQQD
Eyg0OWM3MTgzZDlmOTZmZmY1MmUyM2VkZmE4MmQzOGQ0NDkxMjk4ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79pN4a3NWJmjorNbzqe9Oo4y791d
w01l6Yk5Efm6K7VFju8LD0d80IqgFuA6Uu734QsSiyR6PXuRJIbuT9v8OgQfjES4
8GAFVOKObbknQH+9cN0xEwbGgEsa8ymo93pR5DCDHZQm8GesD4H7Su0PxLKWzTlD
nmUmxcdE6Fn/x2p5D6PQvtdT35wAIAWgsbAZIJTsI+4wtpEVKjMtl3r/6VfCwQs/
ejCacd9G5z2AdoaHWwJuJSx0h3qqFFRx1rjdiMeM5inHBbanxlH+CMdGDMvX097D
aIFzVpyi9c23EnnZbJECYh3i7fvHBKYoaDeZHH3qqAQsm3PoPXw6cJP5QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnHGD2flv/1LiPt+oLTjUSRKY3jMB8GA1UdIwQY
MBaAFFodRe3X7d6ai4Yqc5rajni33IK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYt
YmM3ZmM3MTlkMzFiLzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYtYmM3ZmM3MTlkMzFi
LzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+WB7Ywq
mayXlePVvze7pYbWVZZw9A5KeivimtXIpjwEPH9sF4RQTFLKhkPfOOZBp041/Xta
dJ63knqi+IzR561oyx9ohLlySjFuOOoYmpVZdm5SbLPIaXeoPiqqZMmjzVXlzC0t
AgFUlScwKL6UUeG8wafDQHdlGMGFTT1LSOA0y0fbgA/MkkV7laviwGLpUgCzQMU6
xaiDV+OcxVjCx/d8A8ZHwZ4qc65DOTBat/EbxVqs610wYr9hTw1/qtGeK9kxhm2F
ur/fxqdwJPURNofxdnw+HYKhpIpPhl9K6G6p23ClrHmFYj8IdaCCfABOOnBUDKg9
+WuBZGK0NmaP8Q==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:14:56 2024 by rpki-client on console-fra.rpki-client.org