Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File:                     wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier:          +HauVtt7j7h+DbII1XY/JtOOT6w4vIscj9eMFqkEPhA=
Subject key identifier:   1F:A9:6C:F9:1D:01:C6:73:85:91:FF:DF:6C:80:85:B9:C6:89:AF:05
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer:       /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial:       018F87ED7926993800800B7153F2E678C4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number:          085A
Signing time:             Fri 17 May 2024 19:00:38 +0000
Manifest this update:     Fri 17 May 2024 19:00:38 +0000
Manifest next update:     Sat 18 May 2024 19:00:38 +0000
Files and hashes:         1: HNP43Tmxpe_7vsbHtUkr5Ri7tJ8.roa (hash: 4y3aF9QQqcwBUGD1+1OxGq1O5PA+6Ne3ds6ae4NkOrg=)
                          2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: vJ+Tx8uy92N0uwnEKfsf4YzDfeJH81L6eSZx+lh87hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:79:26:99:38:00:80:0b:71:53:f2:e6:78:c4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
        Validity
            Not Before: May 17 19:00:38 2024 GMT
            Not After : May 18 19:00:38 2024 GMT
        Subject: CN=1fa96cf91d01c6738591ffdf6c8085b9c689af05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:15:de:80:a4:44:f2:dd:90:66:f0:ab:ce:
                    eb:80:ff:85:b8:f0:db:b0:c8:1d:49:e2:10:3a:77:
                    5f:48:c9:df:57:6f:57:bf:78:33:02:a6:7e:9d:46:
                    fd:56:1e:c3:b3:6c:e6:09:b7:04:08:e7:29:71:70:
                    16:d0:23:c5:9e:0f:aa:65:db:23:f0:c3:9e:e4:86:
                    00:40:9d:fe:4a:cc:ca:93:24:9f:27:63:b8:c3:f5:
                    56:e6:ea:12:ac:b2:33:e8:3d:3e:bd:70:5e:72:fd:
                    d5:ce:bf:27:79:76:73:f2:0c:00:1f:a4:8f:9e:9b:
                    a5:24:79:2f:ce:28:e9:1d:7f:a8:b4:e5:14:29:8f:
                    c9:aa:f6:ef:76:4d:d6:b4:4a:5e:21:89:18:01:86:
                    d4:48:0d:40:d8:51:66:91:a4:a8:c3:6d:89:6d:46:
                    55:f9:e9:29:42:e0:a7:2b:f4:ba:bd:fd:f9:25:b8:
                    a2:0f:0a:f2:2e:b6:15:76:6e:42:8d:64:5f:5d:4f:
                    e5:6c:d4:60:28:0c:97:ae:57:4d:01:8b:0d:87:6a:
                    d1:2d:ae:30:88:5d:91:ff:f0:11:56:e7:e7:c0:41:
                    78:9e:00:be:38:73:e7:34:ab:35:87:3f:c7:fb:ef:
                    66:43:7a:e6:9f:d1:b9:90:d9:da:e3:71:52:c9:ec:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:6C:F9:1D:01:C6:73:85:91:FF:DF:6C:80:85:B9:C6:89:AF:05
            X509v3 Authority Key Identifier:
                keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:2d:9e:18:0d:a1:2b:4f:26:d2:a3:88:75:f4:a3:e1:a0:
         b3:11:27:05:62:25:28:9b:c4:c8:91:e4:29:0b:c5:59:2a:88:
         d7:56:7e:c9:f7:95:1a:7f:f8:0b:4a:3d:c6:73:ec:f6:59:1c:
         45:32:47:51:d2:ef:a0:a0:b3:d0:98:39:f3:93:cd:3d:b7:a0:
         b3:84:75:85:7f:fa:74:19:99:ef:ae:4f:38:3f:bf:22:c8:6a:
         6a:c3:89:4c:bc:ae:60:a6:c8:b1:56:49:56:87:9b:93:2f:78:
         a4:25:1b:9e:54:d1:30:84:4e:4e:5c:3f:87:90:49:f8:ac:bd:
         ca:70:6f:b4:cf:7f:58:70:4c:da:55:41:b0:61:71:70:77:7d:
         72:f3:e8:35:e5:82:c9:9e:59:87:7d:7f:5b:16:93:62:d2:c1:
         ab:64:28:55:41:7c:f3:8b:a7:55:6c:a3:3b:bc:93:04:93:fe:
         0a:4b:f8:11:65:0c:45:81:ae:10:63:fc:9e:40:80:b2:d1:f1:
         99:f3:78:58:b5:e3:bb:d6:2f:52:51:2f:00:a2:62:d2:17:14:
         e2:d0:a5:53:43:1f:a8:9c:ad:9b:76:85:06:c1:d5:6b:c3:09:
         9b:39:f2:40:21:05:ee:0d:92:b1:25:8f:4a:5b:78:6f:ea:96:
         a0:78:2f:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7XkmmTgAgAtxU/LmeMT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMWJiNDRlZGUyYWZlMGJmYTlkNzhiYTI5MzI0OTU1Zjdm
YzYwOTEwHhcNMjQwNTE3MTkwMDM4WhcNMjQwNTE4MTkwMDM4WjAzMTEwLwYDVQQD
EygxZmE5NmNmOTFkMDFjNjczODU5MWZmZGY2YzgwODViOWM2ODlhZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2kV3oCkRPLdkGbwq87rgP+FuPDb
sMgdSeIQOndfSMnfV29Xv3gzAqZ+nUb9Vh7Ds2zmCbcECOcpcXAW0CPFng+qZdsj
8MOe5IYAQJ3+SszKkySfJ2O4w/VW5uoSrLIz6D0+vXBecv3Vzr8neXZz8gwAH6SP
npulJHkvzijpHX+otOUUKY/Jqvbvdk3WtEpeIYkYAYbUSA1A2FFmkaSow22JbUZV
+ekpQuCnK/S6vf35JbiiDwryLrYVdm5CjWRfXU/lbNRgKAyXrldNAYsNh2rRLa4w
iF2R//ARVufnwEF4ngC+OHPnNKs1hz/H++9mQ3rmn9G5kNna43FSyeyBxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+pbPkdAcZzhZH/32yAhbnGia8FMB8GA1UdIwQY
MBaAFMMbtE7eKv4L+p14uikySVX3/GCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgt
NGJiYjgzOGEyNzc5LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgtNGJiYjgzOGEyNzc5
LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkktnhgN
oStPJtKjiHX0o+GgsxEnBWIlKJvEyJHkKQvFWSqI11Z+yfeVGn/4C0o9xnPs9lkc
RTJHUdLvoKCz0Jg585PNPbegs4R1hX/6dBmZ765POD+/IshqasOJTLyuYKbIsVZJ
Voebky94pCUbnlTRMIROTlw/h5BJ+Ky9ynBvtM9/WHBM2lVBsGFxcHd9cvPoNeWC
yZ5Zh31/WxaTYtLBq2QoVUF884unVWyjO7yTBJP+Ckv4EWUMRYGuEGP8nkCAstHx
mfN4WLXju9YvUlEvAKJi0hcU4tClU0MfqJytm3aFBsHVa8MJmznyQCEF7g2SsSWP
Slt4b+qWoHgvjw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:07:58 2024 by rpki-client on console-ams.rpki-client.org