Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File:                     WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier:          IhiFbUFfsx1JDAGlfVbCJU4X4kq+IKW9AHgipAst3x4=
Subject key identifier:   64:D7:6F:26:73:E1:15:F4:C1:8B:79:B7:6E:AF:CD:EC:63:8F:7B:DD
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer:       /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial:       018F8749E08F8A8A13A633E5275FBCF60F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number:          0270
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: w5QOfx43983vS8lGYIbMgENNBQApHjVA1+hQgB5nLFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e0:8f:8a:8a:13:a6:33:e5:27:5f:bc:f6:0f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=64d76f2673e115f4c18b79b76eafcdec638f7bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:61:54:87:8b:e2:c6:05:45:38:9c:9f:88:
                    2d:f3:10:29:4f:e6:5d:7a:63:c5:ae:6f:50:b9:8b:
                    57:35:44:7a:76:3d:34:14:fe:a0:00:9b:5e:03:f4:
                    77:b2:a9:af:39:19:45:74:7c:19:1c:f6:b3:04:a9:
                    be:72:f9:85:f9:14:dd:f8:77:86:ae:f9:43:21:aa:
                    f2:6f:2f:17:23:fa:0c:3a:aa:e6:c3:10:d9:c0:c6:
                    e3:e8:f9:12:3b:d9:23:fe:5f:82:fb:45:6f:9c:3c:
                    54:6a:61:f2:43:9e:e7:7d:f0:67:56:d9:4f:9c:f1:
                    7b:d2:a6:3e:64:9e:53:aa:d5:3f:c9:8a:50:83:c8:
                    fa:f3:dd:0f:ae:6f:ad:87:e3:19:02:c3:bd:cc:c3:
                    b9:0a:e1:75:85:d3:c5:56:ed:2c:aa:47:f3:1c:27:
                    8d:15:53:75:fb:bd:c6:6a:e1:78:65:e6:b0:11:fb:
                    c5:30:a6:0b:7e:3f:9c:2f:01:e0:82:96:d9:ce:6b:
                    92:a7:22:ab:16:76:19:15:0f:6a:96:37:c0:73:be:
                    22:3b:00:ea:b3:e1:ba:dd:4c:6c:13:66:73:ca:39:
                    83:a4:fc:74:f8:7f:68:f3:51:82:af:3f:ce:ed:f7:
                    af:f6:f4:a6:11:c8:59:4b:d3:17:f2:7a:70:cb:f7:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:6F:26:73:E1:15:F4:C1:8B:79:B7:6E:AF:CD:EC:63:8F:7B:DD
            X509v3 Authority Key Identifier:
                keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:4f:ca:ba:7c:4d:b4:37:25:99:41:d1:21:00:f1:89:8f:
         07:ac:83:4a:7e:30:2b:1a:db:ce:cb:23:a7:dc:3d:0d:f4:2e:
         61:3e:71:77:b6:60:2a:0f:8a:80:af:cf:d6:1d:e5:85:99:55:
         f1:8a:15:cc:fa:60:0b:40:20:76:eb:5d:9c:c0:12:c6:94:96:
         e2:cf:84:7d:f3:3c:ab:4d:c7:8c:84:69:26:a0:5a:22:55:18:
         f1:04:45:1e:66:8c:a3:0f:3e:b7:57:53:de:90:02:7a:c9:d1:
         5d:9a:9e:89:f1:39:91:ee:7e:24:ec:1f:eb:78:b4:0f:58:17:
         dd:1e:67:1e:dd:d9:67:5f:0c:7a:e4:c9:ad:fb:43:d2:35:bc:
         6e:a1:1d:2b:23:39:d9:cf:41:7a:dc:e8:59:af:3a:a8:97:9b:
         ad:18:3b:aa:51:ed:12:c2:90:16:21:79:4d:aa:a0:9c:0d:9f:
         cb:ea:fb:8c:3d:92:29:31:72:55:37:1b:50:17:22:62:c4:95:
         71:36:fa:ad:62:97:3b:5a:05:42:35:1b:2d:ad:b1:e3:17:fd:
         26:74:2e:48:d8:e6:ae:c1:c9:ca:b9:28:b4:4c:d6:23:7b:49:
         f0:54:6c:d5:89:ab:dd:9a:8e:1e:10:71:bf:0b:d5:eb:bc:3d:
         e5:2f:b7:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSeCPiooTpjPlJ1+89g95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZThlY2JlNjk1NTEyZGE0ZTBmMDJiNmRjMGU3YmRhOTYw
ZGMzM2EwHhcNMjQwNTE3MTYwMTU2WhcNMjQwNTE4MTYwMTU2WjAzMTEwLwYDVQQD
Eyg2NGQ3NmYyNjczZTExNWY0YzE4Yjc5Yjc2ZWFmY2RlYzYzOGY3YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2xhVIeL4sYFRTicn4gt8xApT+Zd
emPFrm9QuYtXNUR6dj00FP6gAJteA/R3sqmvORlFdHwZHPazBKm+cvmF+RTd+HeG
rvlDIaryby8XI/oMOqrmwxDZwMbj6PkSO9kj/l+C+0VvnDxUamHyQ57nffBnVtlP
nPF70qY+ZJ5TqtU/yYpQg8j6890Prm+th+MZAsO9zMO5CuF1hdPFVu0sqkfzHCeN
FVN1+73GauF4ZeawEfvFMKYLfj+cLwHggpbZzmuSpyKrFnYZFQ9qljfAc74iOwDq
s+G63UxsE2ZzyjmDpPx0+H9o81GCrz/O7fev9vSmEchZS9MX8npwy/fW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTXbyZz4RX0wYt5t26vzexjj3vdMB8GA1UdIwQY
MBaAFFro7L5pVRLaTg8CttwOe9qWDcM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMjdhM2ItYWNmOC00NjY4LTk4OWYt
ODNjZjQ2Njg5Mzc1LzEvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iMjdhM2ItYWNmOC00NjY4LTk4OWYtODNjZjQ2Njg5Mzc1
LzEvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvVPyrp8
TbQ3JZlB0SEA8YmPB6yDSn4wKxrbzssjp9w9DfQuYT5xd7ZgKg+KgK/P1h3lhZlV
8YoVzPpgC0AgdutdnMASxpSW4s+EffM8q03HjIRpJqBaIlUY8QRFHmaMow8+t1dT
3pACesnRXZqeifE5ke5+JOwf63i0D1gX3R5nHt3ZZ18MeuTJrftD0jW8bqEdKyM5
2c9BetzoWa86qJebrRg7qlHtEsKQFiF5TaqgnA2fy+r7jD2SKTFyVTcbUBciYsSV
cTb6rWKXO1oFQjUbLa2x4xf9JnQuSNjmrsHJyrkotEzWI3tJ8FRs1Ymr3ZqOHhBx
vwvV67w95S+3cQ==
-----END CERTIFICATE-----