Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier:          suRJGSKPo9HkyjJTgWZB16mxsBffK33qdmMv7J1InLM=
Subject key identifier:   3D:30:85:AB:98:E4:92:05:0E:49:B9:EF:3B:03:91:0E:AD:57:C8:19
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       019511352EF2F360A4A99CFF2F0999E97B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number:          1458
Signing time:             Mon 17 Feb 2025 00:00:52 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:52 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:52 +0000
Files and hashes:         1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
                          2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: Z/MzUXWvzZ0b5VIm1XPzdQ4p9RTO2hfl0n5ChwUXyWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:2e:f2:f3:60:a4:a9:9c:ff:2f:09:99:e9:7b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Feb 17 00:00:52 2025 GMT
            Not After : Feb 18 00:00:52 2025 GMT
        Subject: CN=3d3085ab98e492050e49b9ef3b03910ead57c819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:a0:21:4a:08:ff:43:94:49:81:e4:fb:fa:
                    13:2c:ca:49:60:2e:73:13:ef:af:5b:2f:83:f6:51:
                    1a:ce:14:df:84:b9:26:5d:7e:67:3d:9e:d9:8b:46:
                    bb:2c:cf:07:02:64:0c:c5:14:b9:ca:a9:ae:7f:35:
                    db:bb:91:d7:30:92:73:2b:96:b1:d8:6e:06:86:23:
                    e2:86:e2:f4:d4:99:48:ff:3f:e2:97:e6:b1:d7:93:
                    3a:b8:3c:b6:ba:3a:71:45:50:43:fa:61:35:51:0b:
                    25:4e:c0:a8:f4:13:9d:be:be:2f:e5:14:5e:63:7a:
                    c4:4d:62:ea:37:b9:cc:de:23:43:f5:82:34:99:24:
                    be:3c:af:09:04:2c:b9:d2:84:b4:b8:12:ff:9c:1e:
                    7b:e7:62:d8:66:fc:fc:c0:d4:7a:e4:7a:e5:06:db:
                    3f:7e:79:3a:6e:a7:c3:96:ca:af:8e:76:f5:7f:38:
                    41:81:f0:35:af:ad:74:b8:38:35:b7:46:dc:16:8c:
                    c3:c5:41:7b:05:ba:f0:65:50:28:7e:30:83:e2:e3:
                    8f:e9:98:50:59:0e:d2:d1:c6:70:62:87:46:ee:79:
                    99:a7:1e:2b:bf:ca:b2:28:e5:17:12:0a:b3:d0:4b:
                    8c:cc:72:52:72:a1:3f:63:1a:95:13:5b:7f:7a:18:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:85:AB:98:E4:92:05:0E:49:B9:EF:3B:03:91:0E:AD:57:C8:19
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:98:a3:a1:61:a0:cf:40:9f:30:45:ec:4b:02:58:7c:a0:42:
         e8:cf:ca:6e:77:da:18:8e:26:a0:20:d9:06:a4:5f:b0:aa:3a:
         3c:37:58:37:0e:79:13:32:ea:e2:ad:e0:ec:e3:46:58:f6:48:
         65:ee:45:f4:ee:fc:06:bc:e3:be:a9:53:b4:e8:35:71:2d:da:
         46:77:bc:5d:58:6b:3d:f1:c6:50:92:d9:d8:22:4a:23:dc:1e:
         58:62:de:17:04:d3:f2:33:de:41:b4:4a:27:d8:cd:ac:c8:97:
         0c:c0:9c:48:3d:a0:8e:68:1b:ef:8e:79:b4:61:8b:eb:77:93:
         8a:ae:a1:0e:9e:c8:94:3b:96:e8:59:84:8c:a1:37:99:2d:8e:
         87:20:0f:6a:31:74:63:d5:7e:92:67:ee:91:fc:6c:0e:f3:24:
         ed:9c:5d:e3:0e:bd:d7:9b:8f:9d:39:3c:30:6c:7d:01:05:dd:
         e9:ed:e7:f7:d0:cf:ca:b1:a1:8f:05:24:ac:53:79:e0:75:61:
         97:e1:d8:3e:f8:ea:e8:65:a3:ba:04:89:0c:3d:2d:0c:e2:d5:
         b9:e6:c6:8a:f1:0f:e0:a4:0f:e7:bb:5c:93:af:74:26:09:f6:
         2a:3a:3e:0b:f2:7b:65:9d:42:59:86:fa:37:3c:27:bf:78:ba:
         66:07:16:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNS7y82CkqZz/LwmZ6XuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWU2MzY1NDlmNTZkODQ4NThmZjk2YzhiMTYzMGU4Y2I4
YTQ4YWYwHhcNMjUwMjE3MDAwMDUyWhcNMjUwMjE4MDAwMDUyWjAzMTEwLwYDVQQD
EygzZDMwODVhYjk4ZTQ5MjA1MGU0OWI5ZWYzYjAzOTEwZWFkNTdjODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbOgIUoI/0OUSYHk+/oTLMpJYC5z
E++vWy+D9lEazhTfhLkmXX5nPZ7Zi0a7LM8HAmQMxRS5yqmufzXbu5HXMJJzK5ax
2G4GhiPihuL01JlI/z/il+ax15M6uDy2ujpxRVBD+mE1UQslTsCo9BOdvr4v5RRe
Y3rETWLqN7nM3iND9YI0mSS+PK8JBCy50oS0uBL/nB5752LYZvz8wNR65HrlBts/
fnk6bqfDlsqvjnb1fzhBgfA1r610uDg1t0bcFozDxUF7BbrwZVAofjCD4uOP6ZhQ
WQ7S0cZwYodG7nmZpx4rv8qyKOUXEgqz0EuMzHJScqE/YxqVE1t/ehjXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0whauY5JIFDkm57zsDkQ6tV8gZMB8GA1UdIwQY
MBaAFMGuY2VJ9W2EhY/5bIsWMOjLikivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YjkwOGQtZjQzYS00ODgyLWE2NmYt
YjIxNjg0NGFjMWU0LzEvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80YjkwOGQtZjQzYS00ODgyLWE2NmYtYjIxNjg0NGFjMWU0
LzEvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5ijoWGg
z0CfMEXsSwJYfKBC6M/KbnfaGI4moCDZBqRfsKo6PDdYNw55EzLq4q3g7ONGWPZI
Ze5F9O78BrzjvqlTtOg1cS3aRne8XVhrPfHGUJLZ2CJKI9weWGLeFwTT8jPeQbRK
J9jNrMiXDMCcSD2gjmgb7455tGGL63eTiq6hDp7IlDuW6FmEjKE3mS2OhyAPajF0
Y9V+kmfukfxsDvMk7Zxd4w6915uPnTk8MGx9AQXd6e3n99DPyrGhjwUkrFN54HVh
l+HYPvjq6GWjugSJDD0tDOLVuebGivEP4KQP57tck690Jgn2Kjo+C/J7ZZ1CWYb6
Nzwnv3i6ZgcW7w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:07 2025 by rpki-client