Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          0kiXsfmun82oa1Tsql8UNt51bfhyw0y15FmDd7/7FnQ=
Subject key identifier:   85:6A:99:5B:30:54:12:33:72:2E:28:51:C7:15:05:17:DB:37:F8:32
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       018F8824003E8045FEA38A1A42C17BD48627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          0BF3
Signing time:             Fri 17 May 2024 20:00:11 +0000
Manifest this update:     Fri 17 May 2024 20:00:11 +0000
Manifest next update:     Sat 18 May 2024 20:00:11 +0000
Files and hashes:         1: Bv0vZdAupj1HGgLi2psWKoqz2tM.roa (hash: c734MOTAD1JZod7/AQwj/uDqQLF4jQnAxs+/5qzBi9Y=)
                          2: MdKwAvU3TWXJ7z3RBqwTCPadIyk.roa (hash: vEWmPy1hXQdS+UjS+59I5YYb276X7UhHes9A5kdsafg=)
                          3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: COcgaiCuVr+Yu9I1gYHGI8d2SIG4BD5SKqfSEr4K3Oc=)
                          4: Wo1SbWj4uIj2VYAk9L8zjvnKfYg.roa (hash: Isba/EFENs9w9xAI9cJ6bNzZvJSwvJZ/kezAG6TZI54=)
                          5: ru4RKqxJKavzEDtf0Zso79y9uVQ.roa (hash: 3oBkCRM2AvjUsBRGO7S4e26qmz7viUz5qLFAH5VsCik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:00:3e:80:45:fe:a3:8a:1a:42:c1:7b:d4:86:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: May 17 20:00:11 2024 GMT
            Not After : May 18 20:00:11 2024 GMT
        Subject: CN=856a995b30541233722e2851c7150517db37f832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:64:ff:01:9a:8a:11:9a:21:2d:7f:7a:64:
                    a3:c8:b6:f7:6c:7c:91:c6:79:4e:9c:05:85:a4:4d:
                    f2:1e:4a:ca:4d:be:76:df:30:3a:c1:f6:3e:a7:8b:
                    f9:72:e5:29:22:25:09:9e:3b:16:69:e1:92:65:b5:
                    42:d4:3f:96:33:ed:ee:76:66:83:d0:07:5a:e8:fb:
                    b2:52:92:3c:51:18:3a:6d:7d:e3:98:37:a5:cd:dc:
                    68:3d:30:1d:40:6a:47:77:c0:49:08:0c:d0:fc:e6:
                    b5:f1:9d:aa:36:2e:1b:f5:23:d6:1f:db:41:8e:b6:
                    bc:e0:d0:a0:29:b3:46:a9:e2:cd:68:9c:e0:32:74:
                    8d:ba:25:24:f3:22:d7:1d:d7:a2:9e:a0:04:09:78:
                    6c:d7:03:5c:c6:cc:2d:a0:bd:e1:02:d3:34:51:4f:
                    37:e4:8d:c4:b0:9d:53:41:67:9a:31:e2:f1:2e:c7:
                    94:80:e9:9c:d6:f0:04:e8:85:cc:78:a0:5d:bb:b1:
                    5f:7a:da:9e:4b:c1:18:26:b6:26:32:b2:47:d1:13:
                    2e:a9:65:28:82:12:f3:09:85:75:de:bb:80:27:2c:
                    06:3c:d3:0f:c2:19:6b:c8:b8:b1:a3:99:2e:78:c0:
                    04:fd:56:1a:54:bc:3a:70:5f:2a:8d:15:f8:ca:0e:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:99:5B:30:54:12:33:72:2E:28:51:C7:15:05:17:DB:37:F8:32
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7b:00:ba:4a:82:7a:d1:91:8a:36:40:23:df:3d:cd:cd:db:
         2e:ff:7f:54:43:f1:71:25:8b:d3:13:cb:7b:54:ef:d0:38:a1:
         3b:01:81:72:b6:5c:cb:40:c0:f3:9a:92:1d:4c:4b:f3:0a:0f:
         cc:0d:ec:6f:e7:be:0a:5d:c2:7d:fd:93:30:44:85:54:7f:f6:
         2c:7b:47:53:8c:3e:ed:5d:25:74:0a:79:e9:5b:d6:06:ff:61:
         a3:e5:8a:4f:af:17:c7:a6:9f:f7:1c:88:fe:be:98:37:c4:4f:
         1b:70:cd:64:20:cf:6d:79:b0:bd:b5:99:75:40:b3:38:d2:5e:
         1c:ff:7d:cc:29:1b:98:d1:dd:4b:ed:c1:ec:02:9a:38:68:5c:
         d4:76:7d:20:8c:5e:c6:c7:6c:67:4e:19:5c:9a:3a:5d:04:9c:
         9c:fe:6f:5d:6b:9d:9e:98:a9:be:b4:e3:5c:4f:40:da:2d:ef:
         08:2d:6e:7c:98:40:39:9d:c3:d5:65:c8:c6:4e:d2:46:af:d9:
         06:87:ae:db:5c:88:e3:96:67:b7:ac:63:3c:c7:03:f6:5d:2f:
         88:fd:2b:39:e0:81:43:ba:b3:04:8e:d6:a0:e9:62:9a:54:82:
         45:c8:ca:5f:19:2e:bb:d6:97:7b:01:c2:1b:01:ed:62:8b:78:
         4f:b7:10:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJAA+gEX+o4oaQsF71IYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjQwNTE3MjAwMDExWhcNMjQwNTE4MjAwMDExWjAzMTEwLwYDVQQD
Eyg4NTZhOTk1YjMwNTQxMjMzNzIyZTI4NTFjNzE1MDUxN2RiMzdmODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLNk/wGaihGaIS1/emSjyLb3bHyR
xnlOnAWFpE3yHkrKTb523zA6wfY+p4v5cuUpIiUJnjsWaeGSZbVC1D+WM+3udmaD
0Ada6PuyUpI8URg6bX3jmDelzdxoPTAdQGpHd8BJCAzQ/Oa18Z2qNi4b9SPWH9tB
jra84NCgKbNGqeLNaJzgMnSNuiUk8yLXHdeinqAECXhs1wNcxswtoL3hAtM0UU83
5I3EsJ1TQWeaMeLxLseUgOmc1vAE6IXMeKBdu7FfetqeS8EYJrYmMrJH0RMuqWUo
ghLzCYV13ruAJywGPNMPwhlryLixo5kueMAE/VYaVLw6cF8qjRX4yg7hhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVqmVswVBIzci4oUccVBRfbN/gyMB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnsAukqC
etGRijZAI989zc3bLv9/VEPxcSWL0xPLe1Tv0DihOwGBcrZcy0DA85qSHUxL8woP
zA3sb+e+Cl3Cff2TMESFVH/2LHtHU4w+7V0ldAp56VvWBv9ho+WKT68Xx6af9xyI
/r6YN8RPG3DNZCDPbXmwvbWZdUCzONJeHP99zCkbmNHdS+3B7AKaOGhc1HZ9IIxe
xsdsZ04ZXJo6XQScnP5vXWudnpipvrTjXE9A2i3vCC1ufJhAOZ3D1WXIxk7SRq/Z
Boeu21yI45Znt6xjPMcD9l0viP0rOeCBQ7qzBI7WoOlimlSCRcjKXxkuu9aXewHC
GwHtYot4T7cQUg==
-----END CERTIFICATE-----
Generated at Fri May 17 21:12:22 2024 by rpki-client on console-ams.rpki-client.org