Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File:                     WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier:          ZyCK9F96vxb6NmbZVNm7537/pGMG078MEpr6BjBnETk=
Subject key identifier:   1C:B0:6D:11:0A:04:8C:16:D3:6C:E7:55:91:04:D9:35:87:8F:A2:5A
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer:       /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial:       018F9A9983054F3B206862685EA4908C2B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number:          0EA5
Signing time:             Tue 21 May 2024 10:01:42 +0000
Manifest this update:     Tue 21 May 2024 10:01:42 +0000
Manifest next update:     Wed 22 May 2024 10:01:42 +0000
Files and hashes:         1: 5xwanXVqGN8cbDL31ePd1pPr3Rw.roa (hash: QjLz0ILY1vJwG0Oo4kLq7m+PhEr/Ws71uI4XJimrElo=)
                          2: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: qdHi/VLJFCUjePmuvyKg+ru4UEOinbEYHFQFD0OHj+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:99:83:05:4f:3b:20:68:62:68:5e:a4:90:8c:2b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
        Validity
            Not Before: May 21 10:01:42 2024 GMT
            Not After : May 22 10:01:42 2024 GMT
        Subject: CN=1cb06d110a048c16d36ce7559104d935878fa25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:fa:51:ca:d7:5b:06:db:7f:7c:7c:3c:dc:
                    67:0e:d4:e6:da:d7:14:17:3c:ef:fd:72:8d:d4:a1:
                    42:1e:5b:04:29:86:05:e3:59:e0:ce:80:92:f5:18:
                    ee:e3:87:7c:68:a0:cb:46:59:39:e7:e9:2e:7d:55:
                    ab:c5:f7:af:32:4c:0b:7a:91:b5:db:a2:c0:a5:25:
                    2c:9f:65:09:f6:4c:d4:73:bb:6d:b9:0e:f3:83:0e:
                    63:09:35:04:b0:fb:48:64:61:54:8e:c7:de:6b:d2:
                    68:79:1b:ae:a5:89:65:e9:f4:6a:88:c0:6e:c1:68:
                    a8:22:fb:85:37:6e:29:6b:46:7a:36:40:29:39:d8:
                    d4:67:5f:96:99:2f:e6:2c:87:1c:ad:74:80:d0:fd:
                    df:dd:d7:4e:da:74:84:ce:39:54:a9:de:d8:7a:43:
                    56:4f:f6:da:e9:35:b3:f1:c4:c9:36:ae:90:16:2a:
                    f7:7b:07:fe:89:6a:36:cb:ef:3e:e8:06:9d:be:cd:
                    d0:7e:42:79:cf:82:7e:1c:60:5a:1f:7e:d4:69:7a:
                    eb:10:8c:b3:e8:24:85:5d:5b:43:89:0f:53:91:a3:
                    b3:b1:73:45:be:9d:b0:b8:1a:f1:fd:56:53:52:8c:
                    81:76:26:89:d8:50:a3:5a:05:36:1c:68:6b:44:15:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B0:6D:11:0A:04:8C:16:D3:6C:E7:55:91:04:D9:35:87:8F:A2:5A
            X509v3 Authority Key Identifier:
                keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:bd:d5:0a:2b:8d:bf:67:3c:b9:95:3d:9f:a3:47:3e:8e:9d:
         e0:c1:aa:2e:8a:5b:93:1a:4a:c7:8e:a3:0e:51:1f:d2:83:19:
         c7:b2:33:5d:80:fb:8a:83:a8:78:9d:12:95:8b:3e:c6:1e:35:
         c1:f7:29:ff:a5:02:ac:7b:d3:0e:ac:a2:bc:0c:70:0c:d2:c2:
         84:f1:ea:1b:89:84:10:ed:97:b5:ce:a8:41:35:06:03:69:f2:
         30:a7:80:15:c9:60:af:97:96:7e:5e:7f:b4:e2:06:ed:eb:18:
         e7:1a:67:1c:2c:f8:24:0a:09:d5:c8:47:1e:90:c4:d1:ad:ec:
         4f:48:c4:e2:44:c5:71:ae:38:fc:0e:00:98:bc:94:84:90:63:
         db:48:96:1f:8c:30:ac:6d:cc:41:c7:8a:c5:e1:3a:83:77:6a:
         72:75:bf:c6:49:f4:6f:ae:30:f2:37:bb:25:f1:0c:b9:4d:93:
         f8:ba:91:cf:b1:f8:49:5e:15:d2:6b:84:e2:a1:53:b7:91:c6:
         27:e0:36:f1:00:fd:b2:fc:83:68:1a:bc:d6:0e:86:4f:57:33:
         5e:52:94:75:f6:03:34:cc:ed:ea:17:8b:82:4f:22:53:fd:f5:
         3f:e9:1f:bd:6e:31:bd:55:cb:95:c5:81:9a:62:a4:2f:40:38:
         28:91:5d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+amYMFTzsgaGJoXqSQjCsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGQ0MmFiMzQ2MDI3OTcwOWMxMzRiNTcwZjc2ZTM0ZTRk
OTViOTEwHhcNMjQwNTIxMTAwMTQyWhcNMjQwNTIyMTAwMTQyWjAzMTEwLwYDVQQD
EygxY2IwNmQxMTBhMDQ4YzE2ZDM2Y2U3NTU5MTA0ZDkzNTg3OGZhMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gj6UcrXWwbbf3x8PNxnDtTm2tcU
Fzzv/XKN1KFCHlsEKYYF41ngzoCS9Rju44d8aKDLRlk55+kufVWrxfevMkwLepG1
26LApSUsn2UJ9kzUc7ttuQ7zgw5jCTUEsPtIZGFUjsfea9JoeRuupYll6fRqiMBu
wWioIvuFN24pa0Z6NkApOdjUZ1+WmS/mLIccrXSA0P3f3ddO2nSEzjlUqd7YekNW
T/ba6TWz8cTJNq6QFir3ewf+iWo2y+8+6Aadvs3QfkJ5z4J+HGBaH37UaXrrEIyz
6CSFXVtDiQ9TkaOzsXNFvp2wuBrx/VZTUoyBdiaJ2FCjWgU2HGhrRBV9FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBywbREKBIwW02znVZEE2TWHj6JaMB8GA1UdIwQY
MBaAFFjdQqs0YCeXCcE0tXD3bjTk2VuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgt
NmUzMTM0N2QwNGQ5LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgtNmUzMTM0N2QwNGQ5
LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdr3VCiuN
v2c8uZU9n6NHPo6d4MGqLopbkxpKx46jDlEf0oMZx7IzXYD7ioOoeJ0SlYs+xh41
wfcp/6UCrHvTDqyivAxwDNLChPHqG4mEEO2Xtc6oQTUGA2nyMKeAFclgr5eWfl5/
tOIG7esY5xpnHCz4JAoJ1chHHpDE0a3sT0jE4kTFca44/A4AmLyUhJBj20iWH4ww
rG3MQceKxeE6g3dqcnW/xkn0b64w8je7JfEMuU2T+LqRz7H4SV4V0muE4qFTt5HG
J+A28QD9svyDaBq81g6GT1czXlKUdfYDNMzt6heLgk8iU/31P+kfvW4xvVXLlcWB
mmKkL0A4KJFdbg==
-----END CERTIFICATE-----
Generated at Tue May 21 14:39:39 2024 by rpki-client on console-ams.rpki-client.org