Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File:                     WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier:          llY/+mS2N6IUNdu/vCSQ211cdBh7+abzlKsbwBa4BE0=
Subject key identifier:   A5:78:2E:58:F9:B8:13:5B:0F:83:D2:82:E5:1F:96:C5:F6:6B:4D:F1
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer:       /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial:       018F874A392FD386E4D41C9120BBC23B599E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number:          0916
Signing time:             Fri 17 May 2024 16:02:19 +0000
Manifest this update:     Fri 17 May 2024 16:02:19 +0000
Manifest next update:     Sat 18 May 2024 16:02:19 +0000
Files and hashes:         1: 9thnZR-hTBXm6D5Ka01y8Rp9wqc.roa (hash: 1UKsnfetXnaApWIYxRnAX4ULfm96C3/nVWNMetGKOzQ=)
                          2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: YT6bUmfdYFYIBCelgYqFq5E+Pv4qgpliJP0hHjjlQQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:39:2f:d3:86:e4:d4:1c:91:20:bb:c2:3b:59:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
        Validity
            Not Before: May 17 16:02:19 2024 GMT
            Not After : May 18 16:02:19 2024 GMT
        Subject: CN=a5782e58f9b8135b0f83d282e51f96c5f66b4df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:0b:67:82:7f:c2:8e:c5:bd:d4:5a:4a:f6:
                    21:df:cd:19:85:19:08:de:c7:6b:59:b1:30:dc:d7:
                    ae:3c:5c:19:77:05:3c:6f:ee:ff:6d:60:8c:9a:4f:
                    41:d5:db:d9:cd:d4:3d:c9:57:f3:57:f6:74:5d:79:
                    4d:04:97:ae:4d:ca:64:6d:99:f9:78:a8:d3:2b:1b:
                    18:13:18:cb:2e:e7:a6:35:b6:89:06:eb:73:0d:64:
                    b3:2f:3a:d5:80:5c:bf:4e:c1:af:19:a9:36:48:44:
                    5e:c0:e7:a8:6d:10:8d:12:10:fc:b4:16:77:fa:a8:
                    49:e9:37:a4:e0:27:b6:22:69:f2:04:4d:47:0c:96:
                    66:0a:77:8b:15:a6:7b:1d:57:a0:08:6c:74:41:b8:
                    fc:a0:b6:15:63:de:4e:15:8a:51:48:50:6a:76:01:
                    ca:e0:a5:b6:68:d2:75:73:44:15:ce:7f:6e:5f:c9:
                    6c:b6:51:2c:1e:2e:d1:8a:02:69:8e:3a:b0:7e:51:
                    b7:71:7a:e7:c2:87:10:db:28:fe:ec:78:dd:20:e7:
                    f1:7f:87:75:49:49:83:8e:44:49:5c:46:96:79:31:
                    18:e1:1c:e1:1e:00:9f:48:54:b3:00:37:bd:1a:5d:
                    76:57:61:a4:2d:46:b2:b5:21:16:98:9d:b8:14:9f:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:2E:58:F9:B8:13:5B:0F:83:D2:82:E5:1F:96:C5:F6:6B:4D:F1
            X509v3 Authority Key Identifier:
                keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:6d:70:9b:4b:db:f4:e3:0c:3d:68:fd:f0:24:5e:0f:c2:
         c3:f7:ff:59:e6:c9:fa:4e:7b:02:4b:8d:79:31:40:05:5a:0c:
         79:5e:ba:5c:d0:5f:11:a7:4d:3e:c3:7e:0a:82:20:62:8e:98:
         a2:a4:b0:b6:ef:cf:93:a2:9a:05:9b:cb:56:26:22:f1:b6:1a:
         94:8a:ae:65:09:58:72:4a:65:6a:ef:29:69:8a:b9:16:7d:a4:
         f2:98:15:b7:ca:a2:e5:d1:4c:3a:e9:73:59:ee:1a:33:6b:16:
         9e:9a:8c:b6:5f:1d:42:d9:79:94:8d:42:ce:90:db:1c:ba:d7:
         c6:a0:01:5e:06:29:60:e7:aa:b8:3b:d5:38:9a:81:8e:4e:da:
         0e:cd:64:9b:b8:d3:5a:c3:35:a4:66:2e:a1:33:ec:de:62:bd:
         8c:bf:c2:e3:ae:bf:80:69:af:9f:f0:58:17:e2:47:41:b9:a1:
         46:1d:5a:75:eb:e3:ba:89:59:e5:87:3b:ce:09:9e:e9:cc:c5:
         31:d4:03:45:9e:c3:68:40:76:2f:92:98:55:8b:b3:a9:fd:0b:
         74:60:99:29:02:05:b8:d9:8c:89:e8:1b:fc:da:a1:c5:c8:df:
         03:20:50:92:81:5c:12:f6:b9:63:fa:59:a1:1b:ea:bc:67:6e:
         04:09:17:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSjkv04bk1ByRILvCO1meMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMmM0NzBkYjI0NDM0ODJlMTk1MjM5NTNhNzhjMWVmMGEx
Njk0NzkwHhcNMjQwNTE3MTYwMjE5WhcNMjQwNTE4MTYwMjE5WjAzMTEwLwYDVQQD
EyhhNTc4MmU1OGY5YjgxMzViMGY4M2QyODJlNTFmOTZjNWY2NmI0ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr70LZ4J/wo7FvdRaSvYh380ZhRkI
3sdrWbEw3NeuPFwZdwU8b+7/bWCMmk9B1dvZzdQ9yVfzV/Z0XXlNBJeuTcpkbZn5
eKjTKxsYExjLLuemNbaJButzDWSzLzrVgFy/TsGvGak2SERewOeobRCNEhD8tBZ3
+qhJ6Tek4Ce2ImnyBE1HDJZmCneLFaZ7HVegCGx0Qbj8oLYVY95OFYpRSFBqdgHK
4KW2aNJ1c0QVzn9uX8lstlEsHi7RigJpjjqwflG3cXrnwocQ2yj+7HjdIOfxf4d1
SUmDjkRJXEaWeTEY4RzhHgCfSFSzADe9Gl12V2GkLUaytSEWmJ24FJ9MawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV4Llj5uBNbD4PSguUflsX2a03xMB8GA1UdIwQY
MBaAFFssRw2yRDSC4ZUjlTp4we8KFpR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEt
YzM3OWY4YzIzZmMxLzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEtYzM3OWY4YzIzZmMx
LzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9xtcJtL
2/TjDD1o/fAkXg/Cw/f/WebJ+k57AkuNeTFABVoMeV66XNBfEadNPsN+CoIgYo6Y
oqSwtu/Pk6KaBZvLViYi8bYalIquZQlYckplau8paYq5Fn2k8pgVt8qi5dFMOulz
We4aM2sWnpqMtl8dQtl5lI1CzpDbHLrXxqABXgYpYOequDvVOJqBjk7aDs1km7jT
WsM1pGYuoTPs3mK9jL/C466/gGmvn/BYF+JHQbmhRh1adevjuolZ5Yc7zgme6czF
MdQDRZ7DaEB2L5KYVYuzqf0LdGCZKQIFuNmMiegb/NqhxcjfAyBQkoFcEva5Y/pZ
oRvqvGduBAkXrg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:16:25 2024 by rpki-client on console-ams.rpki-client.org