Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File:                     wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier:          4N64CQUUJ48VmIzgW39qd7bQ8Pph/Lmm4Kc29YWZsTM=
Subject key identifier:   42:14:CA:AD:19:F7:91:AB:FB:BE:D7:3B:93:05:17:7B:73:B1:16:7D
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer:       /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial:       018F58EFF92DEA7811C1739C0B166FCACCE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number:          02A3
Signing time:             Wed 08 May 2024 16:01:12 +0000
Manifest this update:     Wed 08 May 2024 16:01:12 +0000
Manifest next update:     Thu 09 May 2024 16:01:12 +0000
Files and hashes:         1: H4MBK_5mh8xF5ArgNIkpZT8ll-w.roa (hash: BTO17AO5+/C7ZMKpcmavNfZq4YvtmEhcMxpFLd38XRI=)
                          2: cHwCc7KOPcHE1C2oxJtA3vtRb0g.roa (hash: JpTP/qw/bLYch6cCmbjNMzUAfayXuQNQphvIscYBMpw=)
                          3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: w8xYqQePpoaRk65O6aY8IOYkYyOjli0x5JpljxDpZZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:ef:f9:2d:ea:78:11:c1:73:9c:0b:16:6f:ca:cc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
        Validity
            Not Before: May  8 16:01:12 2024 GMT
            Not After : May  9 16:01:12 2024 GMT
        Subject: CN=4214caad19f791abfbbed73b9305177b73b1167d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:16:8e:ff:c6:0d:0e:bf:2e:db:f0:7d:2a:
                    a0:2e:14:4c:f9:b2:1b:25:d7:b2:00:77:33:2d:d3:
                    7a:0f:97:80:dc:da:cb:e2:93:b3:11:87:9f:2b:1f:
                    0e:27:0c:99:30:11:d4:03:e5:2c:db:7a:22:a0:d6:
                    60:82:7f:df:4b:b0:c4:77:10:59:61:07:7f:ef:2a:
                    28:0b:7c:94:1f:98:20:a4:c6:63:68:40:a9:bb:a6:
                    e3:18:08:9d:d1:fd:20:4d:5f:a9:2f:05:fc:2c:d6:
                    09:71:33:14:8e:1f:b5:0f:f7:6c:ef:49:07:1f:2e:
                    7c:bf:6c:4f:e9:b5:21:a5:2d:d1:9b:34:52:91:1b:
                    2e:56:d9:76:9e:95:45:3f:38:bb:b0:bb:8a:bd:8e:
                    15:d4:ae:ad:b1:2a:e8:58:93:bd:d0:29:87:60:e9:
                    8b:3a:c4:96:58:6a:5f:25:e3:09:08:ff:5b:b3:3f:
                    7c:a7:9b:18:b2:91:35:16:33:4a:7c:b7:4b:b4:92:
                    7f:5b:7c:4a:f7:35:c3:2e:7b:7a:ef:22:c8:f7:d1:
                    a1:dd:cb:69:9f:03:e4:70:ae:68:4a:d2:fb:8d:c5:
                    0c:19:d7:a3:d5:27:fa:53:74:b0:fd:c5:0c:cd:56:
                    06:f5:27:5c:ff:97:55:a0:57:7a:1b:f7:51:09:4d:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:CA:AD:19:F7:91:AB:FB:BE:D7:3B:93:05:17:7B:73:B1:16:7D
            X509v3 Authority Key Identifier:
                keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:89:99:0b:70:c0:58:36:a1:29:77:a8:8f:b1:71:43:3f:42:
         a2:ac:cf:e9:4b:af:a0:2d:7d:02:08:b1:28:33:9a:29:8c:a6:
         ed:66:d0:15:b9:8d:bf:93:d8:7a:7c:1e:0d:a4:24:fa:06:9f:
         a5:5a:9a:2a:c3:f6:33:db:8e:20:00:54:6a:26:5e:86:3c:e2:
         cf:c2:a5:bc:e0:c7:0d:0c:2e:98:67:64:5e:f0:81:75:9c:14:
         44:34:87:64:3b:93:e9:7b:08:b7:1b:f1:4a:0b:f7:ea:b2:3b:
         42:26:83:06:fe:d6:5b:0f:43:98:92:ca:55:58:2d:05:87:09:
         06:83:db:00:7a:e0:97:75:71:cb:c9:bc:0f:55:0a:66:9f:85:
         a1:49:26:0d:32:19:4d:4d:b4:f1:83:21:09:cf:c3:e7:ba:c7:
         07:ec:86:28:dc:c1:75:ad:11:b6:c9:6b:ab:a6:09:51:b2:9c:
         a0:3c:ca:dc:da:de:44:2e:dd:e7:f5:e7:83:a3:b0:d9:28:54:
         35:1a:98:61:1a:b1:ff:0c:f2:e7:d6:68:52:56:ec:47:6b:0b:
         f9:02:62:1a:ce:0f:b8:4d:d1:17:e6:56:29:1d:08:5f:3f:0d:
         36:22:8c:7a:c0:5d:8b:b4:8c:19:a0:15:91:c6:a6:b4:14:04:
         ae:55:ad:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Y7/kt6ngRwXOcCxZvysznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTkwOTU0ODY5NWYxOGMwNGNiODk1ZTJhY2VlYjExMDNl
MDNlMTIwHhcNMjQwNTA4MTYwMTEyWhcNMjQwNTA5MTYwMTEyWjAzMTEwLwYDVQQD
Eyg0MjE0Y2FhZDE5Zjc5MWFiZmJiZWQ3M2I5MzA1MTc3YjczYjExNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mEWjv/GDQ6/LtvwfSqgLhRM+bIb
JdeyAHczLdN6D5eA3NrL4pOzEYefKx8OJwyZMBHUA+Us23oioNZggn/fS7DEdxBZ
YQd/7yooC3yUH5ggpMZjaECpu6bjGAid0f0gTV+pLwX8LNYJcTMUjh+1D/ds70kH
Hy58v2xP6bUhpS3RmzRSkRsuVtl2npVFPzi7sLuKvY4V1K6tsSroWJO90CmHYOmL
OsSWWGpfJeMJCP9bsz98p5sYspE1FjNKfLdLtJJ/W3xK9zXDLnt67yLI99Gh3ctp
nwPkcK5oStL7jcUMGdej1Sf6U3Sw/cUMzVYG9Sdc/5dVoFd6G/dRCU28XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIUyq0Z95Gr+77XO5MFF3tzsRZ9MB8GA1UdIwQY
MBaAFMEZCVSGlfGMBMuJXirO6xED4D4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JrSlZJYVY4WXdFeTRsZUtzN3JFUVBnUGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zYjMzZTctMzBiNC00MTQ5LTkwNDUt
YTA1NjRjOWQ2ZmRlLzEvd1JrSlZJYVY4WXdFeTRsZUtzN3JFUVBnUGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zYjMzZTctMzBiNC00MTQ5LTkwNDUtYTA1NjRjOWQ2ZmRl
LzEvd1JrSlZJYVY4WXdFeTRsZUtzN3JFUVBnUGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4mZC3DA
WDahKXeoj7FxQz9CoqzP6UuvoC19AgixKDOaKYym7WbQFbmNv5PYenweDaQk+gaf
pVqaKsP2M9uOIABUaiZehjziz8KlvODHDQwumGdkXvCBdZwURDSHZDuT6XsItxvx
Sgv36rI7QiaDBv7WWw9DmJLKVVgtBYcJBoPbAHrgl3Vxy8m8D1UKZp+FoUkmDTIZ
TU208YMhCc/D57rHB+yGKNzBda0Rtslrq6YJUbKcoDzK3NreRC7d5/Xng6Ow2ShU
NRqYYRqx/wzy59ZoUlbsR2sL+QJiGs4PuE3RF+ZWKR0IXz8NNiKMesBdi7SMGaAV
kcamtBQErlWtzg==
-----END CERTIFICATE-----
Generated at Wed May 8 21:00:08 2024 by rpki-client on console-ams.rpki-client.org