Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
File:                     WzgltIs1me_6oLyBqN3bmPHYAsQ.mft (raw, json)
Hash identifier:          AENuA97zkq1QgsRl+xzxd3ck46PPtJ6gAF1WDWX8AH4=
Subject key identifier:   FC:13:6D:02:D7:3E:A3:B8:D3:71:28:61:99:9A:74:41:84:3E:C8:F2
Authority key identifier: 5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
Certificate issuer:       /CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Certificate serial:       019053594795B76908EE9147BAA9AF3D13C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
Manifest number:          1172
Signing time:             Wed 26 Jun 2024 07:01:18 +0000
Manifest this update:     Wed 26 Jun 2024 07:01:18 +0000
Manifest next update:     Thu 27 Jun 2024 07:01:18 +0000
Files and hashes:         1: WzgltIs1me_6oLyBqN3bmPHYAsQ.crl (hash: WfW6PZOdcq+w9mFHfwwE20zmBpuWBmcwv+VheBVaCNg=)
                          2: twl2yQ6q80i2VNbhAewAc6VtSSI.roa (hash: zUzyxTIhtL/CxhhvKOxGg3efpk6H+8PAOA3JLO3TVuM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:59:47:95:b7:69:08:ee:91:47:ba:a9:af:3d:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
        Validity
            Not Before: Jun 26 07:01:18 2024 GMT
            Not After : Jun 27 07:01:18 2024 GMT
        Subject: CN=fc136d02d73ea3b8d3712861999a7441843ec8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:c7:b0:2e:35:d9:8f:75:48:56:8a:22:5f:
                    35:53:ed:85:61:e3:00:ff:af:5f:31:19:d8:50:ac:
                    02:4c:4a:4e:2c:93:c3:6a:b2:2a:f5:59:8b:ab:9f:
                    36:26:60:d3:2e:c6:55:f1:b3:2e:14:dd:8f:57:1a:
                    47:87:d5:d2:48:f5:e5:00:8a:1d:2a:de:c9:1c:31:
                    50:0c:62:bf:01:50:36:af:79:32:65:00:1e:24:82:
                    86:cb:d5:1f:08:91:8f:33:62:90:d5:40:5e:bb:20:
                    50:cb:aa:f8:48:a9:47:6b:ab:ca:03:57:3f:f7:b9:
                    08:06:75:76:64:b2:c7:ce:fb:e0:bf:17:e2:f8:27:
                    42:b6:05:52:e0:18:41:b5:03:36:58:1f:95:39:49:
                    99:5f:63:62:e9:83:89:af:73:9b:2c:0c:5c:85:57:
                    da:fb:2e:4c:36:ca:01:4a:f5:9f:a1:8f:92:75:b2:
                    7d:b6:ae:e1:49:3d:25:29:d6:5b:9c:30:c9:20:4a:
                    ea:1e:6c:69:46:2f:70:79:6e:de:b4:a1:83:34:e6:
                    26:1d:9a:ba:2b:ef:4e:b6:8e:cd:ce:3e:8f:30:db:
                    eb:16:bc:5b:47:07:5c:84:11:6a:87:83:8e:c0:c1:
                    aa:53:dc:8e:81:90:8f:27:50:3e:ef:17:59:10:cf:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:6D:02:D7:3E:A3:B8:D3:71:28:61:99:9A:74:41:84:3E:C8:F2
            X509v3 Authority Key Identifier:
                keyid:5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:65:11:3d:b7:0a:b0:67:09:5b:1f:15:6a:0c:2f:59:cd:e6:
         2c:0f:bd:5e:14:ba:85:16:a1:7f:08:37:ef:f7:6f:d0:53:c5:
         bc:ff:e9:d2:08:6b:13:5d:89:71:c0:f9:36:fe:54:62:59:75:
         ef:39:a9:72:f7:a2:22:09:47:f1:45:27:f3:25:75:b9:2c:26:
         b4:4e:a8:79:99:d8:e1:8b:a5:b3:53:ef:c0:59:84:e2:eb:bc:
         90:e8:78:eb:17:a2:dc:7d:36:59:7a:f6:50:31:2f:87:99:d5:
         e8:47:5d:3b:85:57:6d:0f:46:f9:70:fb:7c:26:bf:a0:0d:26:
         4b:6a:03:d9:6b:40:8d:c6:10:ce:5c:2e:f6:0b:3a:54:86:3d:
         22:88:1c:a4:ae:b1:85:0e:91:db:c1:09:8b:37:6a:eb:65:b3:
         45:cb:71:50:67:3d:1a:2b:27:07:fe:af:ed:1c:05:07:9f:46:
         39:cd:b8:47:b9:63:45:56:a0:b7:8e:46:e9:11:73:6d:6c:ef:
         c4:c9:7c:87:a6:64:ea:76:60:63:6b:0a:5c:42:1d:b4:6a:3d:
         6e:14:ee:3a:de:e4:f1:40:80:e3:1a:76:d3:46:d8:34:90:fe:
         a0:3e:89:d6:eb:be:6c:80:29:b9:b2:2a:97:7b:22:13:51:58:
         53:81:01:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBTWUeVt2kI7pFHuqmvPRPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzgyNWI0OGIzNTk5ZWZmYWEwYmM4MWE4ZGRkYjk4ZjFk
ODAyYzQwHhcNMjQwNjI2MDcwMTE4WhcNMjQwNjI3MDcwMTE4WjAzMTEwLwYDVQQD
EyhmYzEzNmQwMmQ3M2VhM2I4ZDM3MTI4NjE5OTlhNzQ0MTg0M2VjOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSLHsC412Y91SFaKIl81U+2FYeMA
/69fMRnYUKwCTEpOLJPDarIq9VmLq582JmDTLsZV8bMuFN2PVxpHh9XSSPXlAIod
Kt7JHDFQDGK/AVA2r3kyZQAeJIKGy9UfCJGPM2KQ1UBeuyBQy6r4SKlHa6vKA1c/
97kIBnV2ZLLHzvvgvxfi+CdCtgVS4BhBtQM2WB+VOUmZX2Ni6YOJr3ObLAxchVfa
+y5MNsoBSvWfoY+SdbJ9tq7hST0lKdZbnDDJIErqHmxpRi9weW7etKGDNOYmHZq6
K+9Oto7Nzj6PMNvrFrxbRwdchBFqh4OOwMGqU9yOgZCPJ1A+7xdZEM8tqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwTbQLXPqO403EoYZmadEGEPsjyMB8GA1UdIwQY
MBaAFFs4JbSLNZnv+qC8gajd25jx2ALEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pnbHRJczFtZV82b0x5QnFOM2JtUEhZQXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lMDU1OWQtYWJlNi00NDNiLWE5Nzgt
NWU3ZGVkMTQyMWRhLzEvV3pnbHRJczFtZV82b0x5QnFOM2JtUEhZQXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lMDU1OWQtYWJlNi00NDNiLWE5NzgtNWU3ZGVkMTQyMWRh
LzEvV3pnbHRJczFtZV82b0x5QnFOM2JtUEhZQXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGURPbcK
sGcJWx8VagwvWc3mLA+9XhS6hRahfwg37/dv0FPFvP/p0ghrE12JccD5Nv5UYll1
7zmpcveiIglH8UUn8yV1uSwmtE6oeZnY4Yuls1PvwFmE4uu8kOh46xei3H02WXr2
UDEvh5nV6EddO4VXbQ9G+XD7fCa/oA0mS2oD2WtAjcYQzlwu9gs6VIY9IogcpK6x
hQ6R28EJizdq62WzRctxUGc9GisnB/6v7RwFB59GOc24R7ljRVagt45G6RFzbWzv
xMl8h6Zk6nZgY2sKXEIdtGo9bhTuOt7k8UCA4xp200bYNJD+oD6J1uu+bIApubIq
l3siE1FYU4EBCQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 10:15:57 2024 by rpki-client on console-fra.rpki-client.org