Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File:                     W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier:          axjzDU2K77CoblQ3fFRGsm/zon3z+zSUE5mywsq1zRc=
Subject key identifier:   50:77:DB:2C:22:A4:1B:1E:15:15:69:C5:EA:2A:1F:2E:EB:43:F8:EE
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer:       /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial:       0190637325A21251670A16097C41DD714E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number:          0A18
Signing time:             Sat 29 Jun 2024 10:03:28 +0000
Manifest this update:     Sat 29 Jun 2024 10:03:28 +0000
Manifest next update:     Sun 30 Jun 2024 10:03:28 +0000
Files and hashes:         1: JqRczA1RNj-dAC6cpybBfRqNbug.roa (hash: YNhCu7B8dEA3jwCf7J0ByILq2k6K2T5LcGQKmzGVDog=)
                          2: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: ZioyaiPbRUvMYc/rOokub4kpC2+JM/UQgAjtNvZW7BA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 10:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:73:25:a2:12:51:67:0a:16:09:7c:41:dd:71:4e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
        Validity
            Not Before: Jun 29 10:03:28 2024 GMT
            Not After : Jun 30 10:03:28 2024 GMT
        Subject: CN=5077db2c22a41b1e151569c5ea2a1f2eeb43f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:9a:6f:46:18:42:a0:09:c5:13:53:12:bc:
                    bb:e0:4e:ff:41:23:2d:08:79:55:73:77:ce:6a:3d:
                    30:c4:18:61:91:60:79:33:75:65:32:a1:43:35:02:
                    64:dd:94:3c:ea:70:a8:87:93:ae:30:63:23:d1:d4:
                    3e:c7:5e:64:1f:c7:d6:da:58:de:d9:c5:57:d5:8f:
                    e0:55:1c:21:69:94:63:a6:1f:1e:5d:e1:f5:e3:21:
                    2a:c8:1c:6d:77:33:6f:42:f5:be:ac:25:b2:9a:b2:
                    8f:3f:3b:3a:44:a4:9f:93:d1:2a:1d:f5:dc:92:ba:
                    b1:ea:33:c0:19:23:8a:06:3e:c6:a5:76:37:4e:92:
                    1b:5f:44:7e:a7:d7:87:64:2b:6c:ff:2d:a1:06:fe:
                    7e:f2:5c:14:94:35:e5:b2:aa:d8:91:b6:ca:f4:70:
                    63:aa:82:fd:5e:2d:84:8e:3d:18:01:44:19:14:db:
                    ce:12:3e:29:2c:68:98:c2:d4:24:28:d7:11:78:54:
                    2a:09:56:4c:80:52:7f:c1:3c:4c:9c:60:51:85:40:
                    f2:a0:d6:22:1c:f5:93:60:33:f1:df:ed:af:90:36:
                    d7:61:93:e1:a8:73:72:e3:b3:66:fe:89:a9:3f:a5:
                    29:f3:0f:1d:41:10:6f:a7:4d:f2:bb:83:9f:c2:13:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:77:DB:2C:22:A4:1B:1E:15:15:69:C5:EA:2A:1F:2E:EB:43:F8:EE
            X509v3 Authority Key Identifier:
                keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:04:b0:9b:89:1f:1c:17:89:a3:63:2d:80:5a:c2:97:e7:ef:
         44:58:01:15:71:14:43:26:ec:b1:0a:e5:23:02:99:67:da:3a:
         9c:ce:e7:ff:7b:b8:a3:58:0c:ab:66:bf:6e:ff:79:30:9b:c9:
         17:83:bc:b3:47:de:f8:e2:78:08:ae:8d:81:db:4c:18:4c:0c:
         b2:b3:f3:55:16:5a:60:c0:99:cd:81:d7:67:d0:a5:d7:0f:f6:
         26:7c:0e:b3:7c:ff:86:d2:89:80:72:42:ce:8f:a2:c4:d1:24:
         96:ce:58:8e:b4:39:81:98:c3:41:f2:93:8f:11:1c:00:1a:65:
         c7:b9:6b:39:e4:4c:75:0e:c3:14:69:10:94:a3:13:5e:38:c7:
         0b:0d:81:5d:b4:50:e1:74:1d:2d:7c:2b:be:e8:53:28:a4:89:
         af:df:c8:53:6e:f9:15:11:e0:d6:69:0a:4b:b8:60:b2:30:34:
         8e:b8:c3:6b:af:5c:74:a8:e6:85:9d:09:0c:7a:e7:52:27:a4:
         0b:77:ca:26:f0:81:12:98:f0:aa:4d:d9:12:1a:ae:48:09:3e:
         d8:ae:29:14:84:64:b0:ff:e2:ee:91:1b:3a:31:4e:46:7d:a3:
         21:b4:58:90:60:d4:a0:6a:65:f0:c9:3a:4a:7b:9e:a5:0b:d3:
         68:41:1d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBjcyWiElFnChYJfEHdcU6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw
YTg3YTQwHhcNMjQwNjI5MTAwMzI4WhcNMjQwNjMwMTAwMzI4WjAzMTEwLwYDVQQD
Eyg1MDc3ZGIyYzIyYTQxYjFlMTUxNTY5YzVlYTJhMWYyZWViNDNmOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYSab0YYQqAJxRNTEry74E7/QSMt
CHlVc3fOaj0wxBhhkWB5M3VlMqFDNQJk3ZQ86nCoh5OuMGMj0dQ+x15kH8fW2lje
2cVX1Y/gVRwhaZRjph8eXeH14yEqyBxtdzNvQvW+rCWymrKPPzs6RKSfk9EqHfXc
krqx6jPAGSOKBj7GpXY3TpIbX0R+p9eHZCts/y2hBv5+8lwUlDXlsqrYkbbK9HBj
qoL9Xi2Ejj0YAUQZFNvOEj4pLGiYwtQkKNcReFQqCVZMgFJ/wTxMnGBRhUDyoNYi
HPWTYDPx3+2vkDbXYZPhqHNy47Nm/ompP6Up8w8dQRBvp03yu4OfwhN4MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB32ywipBseFRVpxeoqHy7rQ/juMB8GA1UdIwQY
MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt
OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi
LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgSwm4kf
HBeJo2MtgFrCl+fvRFgBFXEUQybssQrlIwKZZ9o6nM7n/3u4o1gMq2a/bv95MJvJ
F4O8s0fe+OJ4CK6NgdtMGEwMsrPzVRZaYMCZzYHXZ9Cl1w/2JnwOs3z/htKJgHJC
zo+ixNEkls5YjrQ5gZjDQfKTjxEcABplx7lrOeRMdQ7DFGkQlKMTXjjHCw2BXbRQ
4XQdLXwrvuhTKKSJr9/IU275FRHg1mkKS7hgsjA0jrjDa69cdKjmhZ0JDHrnUiek
C3fKJvCBEpjwqk3ZEhquSAk+2K4pFIRksP/i7pEbOjFORn2jIbRYkGDUoGpl8Mk6
SnuepQvTaEEdrg==
-----END CERTIFICATE-----
Generated at Sat Jun 29 17:33:47 2024 by rpki-client on console-ams.rpki-client.org