Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File:                     wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier:          IyKvMd3tCC5s85GWLHizk/02lodDS7WMUxRzHM35baQ=
Subject key identifier:   D1:49:3B:8A:12:D8:96:AC:94:80:BF:04:B9:ED:5E:43:AE:F6:D6:F8
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer:       /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial:       018F8749D44C5DCC4A8A895CA3D7ECB49816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number:          03B2
Signing time:             Fri 17 May 2024 16:01:53 +0000
Manifest this update:     Fri 17 May 2024 16:01:53 +0000
Manifest next update:     Sat 18 May 2024 16:01:53 +0000
Files and hashes:         1: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: XaFqdTGt8N4HWFSmCHwYgF6vO6kLcb3Nh8xVMO/uhg4=)
                          2: x6m-kEFxi9P9RMEhOJTTQT7zlrY.roa (hash: 5WoQwKbl1wG8ASZMf1gF/XYlV9jVRkKkRjJLgLqAuPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d4:4c:5d:cc:4a:8a:89:5c:a3:d7:ec:b4:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
        Validity
            Not Before: May 17 16:01:53 2024 GMT
            Not After : May 18 16:01:53 2024 GMT
        Subject: CN=d1493b8a12d896ac9480bf04b9ed5e43aef6d6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:99:0f:31:5a:b9:02:35:fe:16:28:e9:aa:
                    fd:cc:30:c6:c4:d4:2a:30:f4:46:b5:20:1c:56:1c:
                    47:0c:38:f1:02:0b:98:2d:d8:19:26:56:bd:bd:c1:
                    df:cd:51:e7:bc:e9:7f:93:65:73:ca:f4:9e:ae:ca:
                    34:59:53:ec:a9:da:ea:f9:b4:54:24:c2:8c:a7:1c:
                    ff:3a:e3:72:75:61:42:7c:74:00:d7:db:cf:2c:b6:
                    4c:7b:d8:af:7a:e0:71:4f:cb:45:b9:e1:e6:92:c4:
                    06:d3:5a:33:fe:94:05:3c:4a:80:bd:a5:3b:6c:47:
                    8a:de:8a:95:13:cb:03:10:1b:09:18:e2:a7:46:a9:
                    a4:54:cc:fd:7a:57:5d:0d:48:45:00:7f:81:32:d7:
                    e0:c6:5c:e7:ab:ef:0e:ad:ee:0f:77:c1:92:c0:63:
                    c1:5d:67:cd:c5:99:47:02:71:47:85:cc:35:33:f6:
                    da:76:15:68:d6:74:ad:85:64:a5:6e:04:4b:94:65:
                    67:2e:da:fb:9a:27:1e:bd:fb:a3:f1:98:3d:45:dc:
                    de:27:58:60:90:b5:1a:a8:6a:06:1f:35:e1:8a:7e:
                    b9:85:a2:85:ac:e1:98:b0:01:a6:75:e8:f2:45:ed:
                    0f:53:64:7c:b8:b5:3b:1a:cf:8a:fa:ce:b0:6d:f7:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:49:3B:8A:12:D8:96:AC:94:80:BF:04:B9:ED:5E:43:AE:F6:D6:F8
            X509v3 Authority Key Identifier:
                keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e9:de:41:d5:06:8c:57:06:56:a9:f6:82:2d:75:90:34:2c:
         22:d5:38:26:11:6a:db:e1:76:22:3c:54:01:dc:59:6d:62:51:
         38:6f:26:4e:b7:80:96:08:56:80:e7:dc:fe:2a:b1:e2:12:69:
         88:e7:27:28:ea:96:d3:4e:1a:fa:78:1b:2b:91:cb:11:0f:13:
         22:8b:c9:37:a5:03:ec:d2:1e:11:f2:78:14:d3:c0:d6:88:9b:
         7a:86:50:b7:4a:bd:20:30:f6:8b:47:08:aa:8c:02:63:9f:ce:
         32:f7:71:df:36:ec:cb:27:f9:26:de:7d:3d:da:37:89:86:9e:
         34:c4:d7:47:fc:27:9a:e2:23:1f:0c:dc:b9:6f:5b:15:ab:96:
         b5:44:68:78:a3:db:23:83:df:1a:ec:45:ca:e5:27:46:31:0c:
         47:c6:76:2c:84:25:10:f2:56:64:33:b4:66:4c:e1:97:ae:cd:
         99:75:4c:b3:2d:da:9a:99:cf:81:3e:4c:16:8b:23:47:d0:ae:
         f5:71:1e:ec:0b:01:c9:78:0f:ac:b7:4e:57:60:ae:88:0d:3a:
         a3:eb:85:63:56:b8:ae:25:95:e7:6d:fc:45:d4:3f:b5:3f:57:
         98:8f:49:d1:9b:ae:99:c8:83:d8:fa:8d:b9:42:23:ad:d3:31:
         50:56:cc:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSdRMXcxKiolco9fstJgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1
YjlhODcwHhcNMjQwNTE3MTYwMTUzWhcNMjQwNTE4MTYwMTUzWjAzMTEwLwYDVQQD
EyhkMTQ5M2I4YTEyZDg5NmFjOTQ4MGJmMDRiOWVkNWU0M2FlZjZkNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmeZDzFauQI1/hYo6ar9zDDGxNQq
MPRGtSAcVhxHDDjxAguYLdgZJla9vcHfzVHnvOl/k2VzyvSerso0WVPsqdrq+bRU
JMKMpxz/OuNydWFCfHQA19vPLLZMe9iveuBxT8tFueHmksQG01oz/pQFPEqAvaU7
bEeK3oqVE8sDEBsJGOKnRqmkVMz9elddDUhFAH+BMtfgxlznq+8Ore4Pd8GSwGPB
XWfNxZlHAnFHhcw1M/badhVo1nSthWSlbgRLlGVnLtr7micevfuj8Zg9RdzeJ1hg
kLUaqGoGHzXhin65haKFrOGYsAGmdejyRe0PU2R8uLU7Gs+K+s6wbfdhjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFJO4oS2JaslIC/BLntXkOu9tb4MB8GA1UdIwQY
MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt
MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3
LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+neQdUG
jFcGVqn2gi11kDQsItU4JhFq2+F2IjxUAdxZbWJROG8mTreAlghWgOfc/iqx4hJp
iOcnKOqW004a+ngbK5HLEQ8TIovJN6UD7NIeEfJ4FNPA1oibeoZQt0q9IDD2i0cI
qowCY5/OMvdx3zbsyyf5Jt59Pdo3iYaeNMTXR/wnmuIjHwzcuW9bFauWtURoeKPb
I4PfGuxFyuUnRjEMR8Z2LIQlEPJWZDO0Zkzhl67NmXVMsy3ampnPgT5MFosjR9Cu
9XEe7AsByXgPrLdOV2CuiA06o+uFY1a4riWV5238RdQ/tT9XmI9J0ZuumciD2PqN
uUIjrdMxUFbMHQ==
-----END CERTIFICATE-----
Generated at Fri May 17 23:50:11 2024 by rpki-client on console-fra.rpki-client.org