Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File:                     WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier:          2Flm5k7nUfY2OV9LESRyyEBBzb8yK2NUNEi3CXC1l3E=
Subject key identifier:   FE:4C:20:BD:5F:6B:87:CE:67:2E:F7:9D:F0:24:AF:5C:5C:55:A3:AF
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer:       /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial:       019369DA239EAE2FDE3404F197A39341ACCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number:          0CAC
Signing time:             Tue 26 Nov 2024 19:02:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:03 +0000
Files and hashes:         1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: ASeWnBYvpHe0x5W4IY/bSIABuIP2TIWRNSfe8FShfzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:23:9e:ae:2f:de:34:04:f1:97:a3:93:41:ac:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
        Validity
            Not Before: Nov 26 19:02:03 2024 GMT
            Not After : Nov 27 19:02:03 2024 GMT
        Subject: CN=fe4c20bd5f6b87ce672ef79df024af5c5c55a3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:d1:15:f5:dc:87:c5:d7:f0:0a:3c:ca:bb:
                    40:82:58:29:b9:ea:89:31:fc:65:3b:20:2b:85:d2:
                    7c:1c:a6:63:7b:f6:f8:46:70:43:37:e2:43:2a:83:
                    56:9b:b5:66:0c:ad:72:bf:01:a3:2f:4b:e8:4e:95:
                    05:7c:76:45:5c:c5:74:9d:1a:f9:52:8f:1b:0d:c6:
                    25:32:78:1c:cf:82:3f:92:9b:2e:19:15:5c:3f:05:
                    72:f0:03:9b:3a:68:f1:0b:03:0b:9a:b8:f2:75:e1:
                    a4:18:58:8e:cf:5e:74:a3:cc:7f:1a:94:3f:c9:df:
                    00:3f:08:61:8a:9f:c2:01:86:ea:9f:08:43:da:56:
                    ad:61:a0:b1:72:a2:af:92:c8:83:1e:b0:7c:8b:b8:
                    f3:71:cf:db:92:0a:a4:09:e9:b1:09:00:22:ea:ce:
                    3a:38:df:7b:fd:e9:88:0a:66:89:7d:1f:81:65:13:
                    d8:99:dc:bd:6f:4f:23:18:26:6b:78:20:01:08:ca:
                    13:8e:ab:6c:25:aa:f7:3b:c7:40:04:d5:26:ce:92:
                    b0:47:71:2c:9c:83:8b:d2:a7:44:04:bd:e9:c2:ed:
                    e5:c2:95:15:25:59:99:19:79:ac:e7:8f:8c:c8:1c:
                    19:7c:eb:d2:9e:6c:c8:29:6e:93:8c:81:f4:55:98:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4C:20:BD:5F:6B:87:CE:67:2E:F7:9D:F0:24:AF:5C:5C:55:A3:AF
            X509v3 Authority Key Identifier:
                keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:51:b2:d5:e4:22:ae:15:2c:55:de:ff:e7:b3:0d:2a:a5:
         05:a7:52:d7:d2:e3:1a:3b:04:f8:22:01:5c:41:e0:5b:bd:69:
         12:a0:8a:3e:39:8c:5d:cc:02:f3:9a:d1:8a:40:2a:fc:8d:79:
         62:54:e9:1d:8f:7b:89:2d:3c:e5:00:ce:ea:17:1f:94:dd:6e:
         89:a9:39:33:bc:27:44:31:c9:ae:4c:d1:6d:c0:47:31:12:98:
         a2:87:12:79:73:b6:5c:fa:51:42:88:10:85:f9:e2:1e:c6:89:
         ec:cd:ce:e0:70:c0:cb:05:1d:09:92:2c:e5:b8:c3:37:10:e3:
         93:3a:bd:ed:14:35:d3:ab:02:4f:bc:fa:1a:15:7b:d1:32:4d:
         b1:bb:df:fa:33:0d:06:0b:eb:7c:87:83:74:88:cc:9c:d1:8d:
         3d:fc:37:c7:65:3f:cf:9c:d2:20:38:0a:62:3d:ac:28:5c:c9:
         1d:b8:19:31:bc:3b:f5:27:a4:1e:8d:75:87:84:9f:83:3a:0d:
         a2:79:46:ff:1c:ac:52:2c:bb:27:d3:d8:98:98:9f:74:49:4f:
         df:94:f8:63:b1:55:d8:00:76:2a:4e:4b:96:2e:8d:1b:ad:10:
         93:07:e4:ab:d4:aa:3a:cb:0f:56:9d:b4:01:aa:b2:28:e6:87:
         a2:8d:cc:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2iOeri/eNATxl6OTQazMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDM3YTlmZTU2MjVlZGEwMTA4MWViMmU5MDdjZmQ5YjVh
NWRjOWEwHhcNMjQxMTI2MTkwMjAzWhcNMjQxMTI3MTkwMjAzWjAzMTEwLwYDVQQD
EyhmZTRjMjBiZDVmNmI4N2NlNjcyZWY3OWRmMDI0YWY1YzVjNTVhM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqPRFfXch8XX8Ao8yrtAglgpueqJ
MfxlOyArhdJ8HKZje/b4RnBDN+JDKoNWm7VmDK1yvwGjL0voTpUFfHZFXMV0nRr5
Uo8bDcYlMngcz4I/kpsuGRVcPwVy8AObOmjxCwMLmrjydeGkGFiOz150o8x/GpQ/
yd8APwhhip/CAYbqnwhD2latYaCxcqKvksiDHrB8i7jzcc/bkgqkCemxCQAi6s46
ON97/emICmaJfR+BZRPYmdy9b08jGCZreCABCMoTjqtsJar3O8dABNUmzpKwR3Es
nIOL0qdEBL3pwu3lwpUVJVmZGXms54+MyBwZfOvSnmzIKW6TjIH0VZiuDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5MIL1fa4fOZy73nfAkr1xcVaOvMB8GA1UdIwQY
MBaAFFkDep/lYl7aAQgesukHz9m1pdyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEt
YTU1ZmZhZTJlYmQwLzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEtYTU1ZmZhZTJlYmQw
LzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3ZRstXk
Iq4VLFXe/+ezDSqlBadS19LjGjsE+CIBXEHgW71pEqCKPjmMXcwC85rRikAq/I15
YlTpHY97iS085QDO6hcflN1uiak5M7wnRDHJrkzRbcBHMRKYoocSeXO2XPpRQogQ
hfniHsaJ7M3O4HDAywUdCZIs5bjDNxDjkzq97RQ106sCT7z6GhV70TJNsbvf+jMN
BgvrfIeDdIjMnNGNPfw3x2U/z5zSIDgKYj2sKFzJHbgZMbw79SekHo11h4SfgzoN
onlG/xysUiy7J9PYmJifdElP35T4Y7FV2AB2Kk5Lli6NG60Qkwfkq9SqOssPVp20
AaqyKOaHoo3M/g==
-----END CERTIFICATE-----