Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File:                     WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier:          NaZ96OQtRJbQhS+kTztBzqeiZHidehHBoIrebxAJgrM=
Subject key identifier:   74:58:2F:3D:0D:6E:91:32:F9:69:A7:07:B9:7A:B8:C1:E3:63:07:51
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer:       /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial:       0194BB29AC4DDE6967D9AC65BCE0B08FFB04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 07:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:57 +0000
Files and hashes:         1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
                          2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: zKyGRC5A5icwlGDQbQIJ81BH4bZCwNJRjLAMOcOHIU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:ac:4d:de:69:67:d9:ac:65:bc:e0:b0:8f:fb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
        Validity
            Not Before: Jan 31 07:00:57 2025 GMT
            Not After : Feb  1 07:00:57 2025 GMT
        Subject: CN=74582f3d0d6e9132f969a707b97ab8c1e3630751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:ac:26:f2:dd:f6:a0:27:8b:e9:fb:74:b0:
                    f0:dd:7d:c0:7a:1c:70:af:c4:2b:93:ec:21:db:88:
                    a1:fb:0c:75:6c:e8:6e:a4:0c:a0:b6:2d:ad:da:d5:
                    e1:1c:9d:a3:25:ce:f2:1b:40:4b:cc:c3:99:a8:70:
                    72:dc:e2:2c:74:6a:84:35:ce:ca:a1:8c:f5:5f:51:
                    e0:22:1d:6a:71:6c:aa:b4:45:dc:4a:7e:d0:92:f0:
                    bb:07:8f:7c:28:5c:93:b8:f6:f9:c5:ac:c2:31:0c:
                    97:d4:d3:0b:cf:c7:2c:6a:21:49:25:84:be:71:cc:
                    98:84:e2:62:02:86:43:e8:3c:8b:0d:d6:f4:48:18:
                    16:08:a0:d6:71:7d:0e:59:53:0a:c1:8c:9b:53:23:
                    24:8f:da:f0:aa:f6:30:9f:fb:c7:ec:b1:2e:41:7f:
                    08:13:ab:c2:8e:2a:dd:34:70:d4:06:17:ae:8c:ef:
                    9c:3d:02:ec:ac:3a:61:a8:ee:df:a6:ab:06:d0:df:
                    f8:ca:7b:b0:7d:a3:b6:e7:7d:4f:54:4e:97:ec:3c:
                    c4:9f:0b:f0:6c:6c:b8:f2:60:06:d7:b4:c2:83:93:
                    52:20:6f:02:16:22:f4:ea:cf:a8:03:54:ab:87:7b:
                    14:28:0c:0b:e6:28:d8:06:69:d3:ce:6a:d6:3c:aa:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:2F:3D:0D:6E:91:32:F9:69:A7:07:B9:7A:B8:C1:E3:63:07:51
            X509v3 Authority Key Identifier:
                keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b8:ce:df:21:8e:2e:8a:39:43:38:3b:9a:6f:00:4e:bc:86:
         c4:a3:ad:7a:45:9e:93:d6:b2:27:37:ee:85:92:7c:76:79:de:
         cf:a4:23:73:d1:1e:8d:9e:96:f2:29:16:eb:19:1b:d0:50:72:
         60:49:a8:68:72:af:c8:d4:91:ca:37:12:47:0b:5e:59:dd:6c:
         75:3c:1b:d3:9c:e0:5b:b1:24:ee:af:ac:8c:68:5c:17:33:ec:
         f1:21:7e:6b:f7:d3:38:9a:b5:5a:c3:ba:21:25:a2:27:0d:70:
         3d:da:b8:50:41:59:07:b7:f6:e3:db:bf:50:3b:20:5d:41:42:
         2b:6b:a4:85:3d:77:25:1a:d0:4b:20:00:c7:85:56:06:45:b5:
         58:3c:a1:71:3f:63:d9:56:14:33:2a:41:e0:17:95:79:93:fc:
         2d:e0:cd:61:b8:17:6d:1a:e6:92:77:4a:1d:da:59:a9:69:3e:
         c1:db:8d:84:96:26:06:85:08:ab:0b:28:9c:93:af:e5:8c:a6:
         f5:11:82:0c:1b:37:63:78:a1:1d:8f:9f:12:93:77:9c:36:7f:
         b8:1b:79:4f:c4:b3:01:e0:12:cb:59:b2:16:9f:12:64:0d:1d:
         23:c6:5e:98:5c:b7:a0:0a:81:a4:18:70:da:38:cb:1d:73:19:
         bd:fc:08:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KaxN3mln2axlvOCwj/sEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTQzNDFlMjNhMzMxNWVkNDQ1NWE1NDVkMWE0OGNlZjI5
ZTc4OTMwHhcNMjUwMTMxMDcwMDU3WhcNMjUwMjAxMDcwMDU3WjAzMTEwLwYDVQQD
Eyg3NDU4MmYzZDBkNmU5MTMyZjk2OWE3MDdiOTdhYjhjMWUzNjMwNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhusJvLd9qAni+n7dLDw3X3Aehxw
r8Qrk+wh24ih+wx1bOhupAygti2t2tXhHJ2jJc7yG0BLzMOZqHBy3OIsdGqENc7K
oYz1X1HgIh1qcWyqtEXcSn7QkvC7B498KFyTuPb5xazCMQyX1NMLz8csaiFJJYS+
ccyYhOJiAoZD6DyLDdb0SBgWCKDWcX0OWVMKwYybUyMkj9rwqvYwn/vH7LEuQX8I
E6vCjirdNHDUBheujO+cPQLsrDphqO7fpqsG0N/4ynuwfaO2531PVE6X7DzEnwvw
bGy48mAG17TCg5NSIG8CFiL06s+oA1Srh3sUKAwL5ijYBmnTzmrWPKrxjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRYLz0NbpEy+WmnB7l6uMHjYwdRMB8GA1UdIwQY
MBaAFFrkNB4jozFe1EVaVF0aSM7ynniTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUt
MWUwOGRmZDIzNWM3LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUtMWUwOGRmZDIzNWM3
LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLjO3yGO
Loo5Qzg7mm8ATryGxKOtekWek9ayJzfuhZJ8dnnez6Qjc9EejZ6W8ikW6xkb0FBy
YEmoaHKvyNSRyjcSRwteWd1sdTwb05zgW7Ek7q+sjGhcFzPs8SF+a/fTOJq1WsO6
ISWiJw1wPdq4UEFZB7f249u/UDsgXUFCK2ukhT13JRrQSyAAx4VWBkW1WDyhcT9j
2VYUMypB4BeVeZP8LeDNYbgXbRrmkndKHdpZqWk+wduNhJYmBoUIqwsonJOv5Yym
9RGCDBs3Y3ihHY+fEpN3nDZ/uBt5T8SzAeASy1myFp8SZA0dI8ZemFy3oAqBpBhw
2jjLHXMZvfwIjw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:39 2025 by rpki-client on console-fra.rpki-client.org