Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File:                     WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier:          0YOBKv4MkJg+7WeZ4VK2sCken9gGiJXElEUDsSavgRc=
Subject key identifier:   33:4F:CD:D6:E9:48:AD:64:EB:BF:6F:9A:E3:76:03:00:3A:EB:F6:59
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer:       /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial:       018F8258DA6A93556E424B7156983420219E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number:          117F
Signing time:             Thu 16 May 2024 17:00:12 +0000
Manifest this update:     Thu 16 May 2024 17:00:12 +0000
Manifest next update:     Fri 17 May 2024 17:00:12 +0000
Files and hashes:         1: 41inKs2yTgIgP7Chioo94ya5ILg.roa (hash: bhCtk0cZp0hdAKuaLt7vAFINAdOSy5VIarNd96C2ElQ=)
                          2: Ci58htooRzcTaBBlFsSnn3T5_W8.roa (hash: sFzDUSQwc35+r4xahlRHZOtk7Mhbt9fyk6XjYlp1AL0=)
                          3: FFNMR0W6GkxMPvIZRjAm0gwnVlU.roa (hash: TawGzYD+27D/NvePDO25WOGE+pcUbEFcV9ccjXwvWwo=)
                          4: USeQ8HFxZR17dy-kLzswUQPIRo4.roa (hash: kj80ns0nRwYqgHq9Rj26SNhXJHlUTaYGAq4vMBQYlC8=)
                          5: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: kYHSSa7x/fSpOm2t8CJ6EA9ClrDG8KI7CmsbPf+hGQ4=)
                          6: hmefE34Bc3COREJHaI3ATcxdnwM.roa (hash: FqK9vN16WmOuRNtzLKbS7SZMAFPf25O1c/3NLqUQvXY=)
                          7: mezxrm9AtbuLbzqPHqTEj-w8f7k.roa (hash: cfvhnFHCHKMP/2JFc6tbVh5YqYVag51TYOTZ7W5Xomw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:82:58:da:6a:93:55:6e:42:4b:71:56:98:34:20:21:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
        Validity
            Not Before: May 16 17:00:12 2024 GMT
            Not After : May 17 17:00:12 2024 GMT
        Subject: CN=334fcdd6e948ad64ebbf6f9ae37603003aebf659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:1f:23:50:3e:d4:14:0a:2c:1b:80:5b:db:
                    b5:86:f7:ef:5b:1d:30:99:7b:7a:8b:cf:9f:74:04:
                    53:13:29:07:cf:e3:03:82:a8:28:e5:f6:2a:83:f4:
                    d5:f4:fd:19:9b:ce:8b:7e:64:9c:2e:4b:b4:99:d2:
                    ab:62:a8:14:10:88:06:8c:59:d2:50:4c:7d:61:d9:
                    e5:fd:45:ed:69:c6:1a:c8:eb:0b:42:12:d6:5a:ca:
                    98:96:21:3c:29:e8:3a:74:c1:e1:40:83:7c:b4:0b:
                    68:22:9d:88:52:52:1f:e2:e4:68:ed:b5:0d:cd:ec:
                    59:52:cb:21:40:8d:66:bb:dd:04:67:02:e8:78:13:
                    28:ee:da:24:cd:81:cf:84:6e:32:ec:2d:25:f2:1e:
                    ff:3a:28:90:73:35:07:ae:3f:82:44:9a:61:fa:fa:
                    aa:f7:9d:4d:e1:ea:c7:3e:e3:7c:94:42:ba:8f:e2:
                    d8:40:4d:c5:bf:11:45:84:27:75:9f:81:d5:2a:22:
                    72:06:5d:21:bf:11:df:fc:d9:f3:55:fb:b5:1f:d4:
                    53:99:86:d4:8f:37:fc:1f:db:17:48:a4:0d:47:15:
                    28:9d:9c:e9:5a:fc:dc:7f:3b:10:48:f1:56:e3:19:
                    e7:ac:ed:85:82:8b:61:b7:0b:82:20:33:f6:60:dd:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:CD:D6:E9:48:AD:64:EB:BF:6F:9A:E3:76:03:00:3A:EB:F6:59
            X509v3 Authority Key Identifier:
                keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:06:de:8a:a6:ee:be:2d:28:81:3a:4b:68:9c:f0:dd:3a:4d:
         a0:9f:2a:29:ed:dc:63:c7:91:49:73:51:84:69:f8:63:fd:18:
         88:2e:6c:f5:fd:d1:dc:7f:95:9b:e4:d5:b8:f9:19:21:6c:3b:
         4a:32:6e:93:49:ed:13:3c:f5:98:46:46:e4:1a:ed:3f:66:ad:
         e4:8c:db:8f:b2:7f:d9:bc:17:b2:25:d5:d3:cb:7a:e1:4b:07:
         69:8b:bf:4c:35:87:b7:6f:e5:3e:0f:24:5d:7e:94:6a:1f:35:
         7b:57:c1:6a:39:33:69:75:bd:c1:96:80:7b:7e:a6:aa:29:46:
         1e:16:03:48:9d:16:9a:ba:96:99:4b:1f:92:93:c3:03:6f:89:
         9e:7c:69:b4:12:b3:e5:55:ad:7d:96:89:b5:fd:7c:05:44:9e:
         e6:47:8e:94:23:09:f0:01:89:02:e9:0e:4c:2a:87:6a:e0:d5:
         19:39:7f:b0:53:2d:64:60:cf:9f:3e:87:21:90:fa:de:15:54:
         fa:17:65:6e:1f:4b:b6:9b:45:99:3c:3a:db:08:12:06:38:b5:
         81:94:12:26:28:e4:b7:a8:7d:b4:89:9f:58:7b:d6:0e:78:d2:
         c6:92:cd:db:ae:38:02:df:3b:d5:98:01:97:07:cd:b9:dc:51:
         0b:ed:5a:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+CWNpqk1VuQktxVpg0ICGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjQwNTE2MTcwMDEyWhcNMjQwNTE3MTcwMDEyWjAzMTEwLwYDVQQD
EygzMzRmY2RkNmU5NDhhZDY0ZWJiZjZmOWFlMzc2MDMwMDNhZWJmNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdMfI1A+1BQKLBuAW9u1hvfvWx0w
mXt6i8+fdARTEykHz+MDgqgo5fYqg/TV9P0Zm86LfmScLku0mdKrYqgUEIgGjFnS
UEx9Ydnl/UXtacYayOsLQhLWWsqYliE8Keg6dMHhQIN8tAtoIp2IUlIf4uRo7bUN
zexZUsshQI1mu90EZwLoeBMo7tokzYHPhG4y7C0l8h7/OiiQczUHrj+CRJph+vqq
951N4erHPuN8lEK6j+LYQE3FvxFFhCd1n4HVKiJyBl0hvxHf/NnzVfu1H9RTmYbU
jzf8H9sXSKQNRxUonZzpWvzcfzsQSPFW4xnnrO2FgothtwuCIDP2YN2VRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNPzdbpSK1k679vmuN2AwA66/ZZMB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQbeiqbu
vi0ogTpLaJzw3TpNoJ8qKe3cY8eRSXNRhGn4Y/0YiC5s9f3R3H+Vm+TVuPkZIWw7
SjJuk0ntEzz1mEZG5BrtP2at5Izbj7J/2bwXsiXV08t64UsHaYu/TDWHt2/lPg8k
XX6Uah81e1fBajkzaXW9wZaAe36mqilGHhYDSJ0WmrqWmUsfkpPDA2+JnnxptBKz
5VWtfZaJtf18BUSe5keOlCMJ8AGJAukOTCqHauDVGTl/sFMtZGDPnz6HIZD63hVU
+hdlbh9LtptFmTw62wgSBji1gZQSJijkt6h9tImfWHvWDnjSxpLN2644At871ZgB
lwfNudxRC+1axA==
-----END CERTIFICATE-----