Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          arV2ycNawNcdG4CIUDgBvYN4MIpW7X/MoZwKPfIQHpg=
Subject key identifier:   96:85:E7:2A:6A:B0:96:8E:95:17:2D:86:18:07:F0:CC:51:95:B9:56
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       0193647B6C10AA5303BBDAFDDB829E6057AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          12DE
Signing time:             Mon 25 Nov 2024 18:00:30 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:30 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:30 +0000
Files and hashes:         1: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: e4DBUFvwfEqKB3GuD1B+Ly7YfCSW9QDn3mLGCvkpIdA=)
                          2: mV9BdmYQdL5DOMSHI7CQggt-JV0.roa (hash: pw157J2x08EpCqWBK4ZLj1XWIZDp2zyHf71lbpdxdKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:6c:10:aa:53:03:bb:da:fd:db:82:9e:60:57:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Nov 25 18:00:30 2024 GMT
            Not After : Nov 26 18:00:30 2024 GMT
        Subject: CN=9685e72a6ab0968e95172d861807f0cc5195b956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:8f:60:6f:a4:34:f4:66:20:fa:d8:bf:3c:
                    7c:64:83:eb:72:39:c9:7f:a8:38:5c:c8:2c:cb:80:
                    e6:f2:ac:56:fc:47:ed:08:72:0f:e3:74:26:86:3f:
                    97:19:c6:a4:ff:5e:41:27:9c:2b:2d:08:49:fe:e9:
                    56:b4:b2:b6:8d:5e:fd:5f:4c:49:b6:b5:c4:81:93:
                    4e:c2:64:e3:7e:d3:70:8c:6d:3b:5a:61:48:8b:ab:
                    ee:17:82:e6:f5:f6:6c:c0:6b:38:15:08:40:48:07:
                    ea:86:99:01:63:33:be:b7:e8:85:41:0f:6f:59:10:
                    aa:75:5f:fa:97:75:af:dc:26:8b:00:48:3d:21:6b:
                    f1:0a:87:44:1d:37:3a:a7:73:f2:75:75:37:f7:0d:
                    8c:39:81:9a:0a:2f:fd:d3:9d:f2:e8:0e:0d:4b:1c:
                    c9:62:8b:9f:2f:5b:b8:bc:0d:37:2c:b4:e1:41:f8:
                    4b:a9:8b:7c:2b:1e:2d:eb:0f:39:3c:4c:83:ba:51:
                    54:3f:fb:3c:6f:39:a3:19:73:c0:f4:4d:b3:72:50:
                    07:e2:34:6f:07:09:6d:e5:6c:32:69:f7:54:be:35:
                    10:30:3d:61:e3:33:09:09:fb:ee:53:ff:50:eb:08:
                    5b:ed:22:49:28:d1:59:cc:be:ae:06:06:33:f0:8a:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:85:E7:2A:6A:B0:96:8E:95:17:2D:86:18:07:F0:CC:51:95:B9:56
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a6:bb:08:0d:5b:2d:7b:49:7d:c6:04:09:22:91:60:a5:cf:
         82:e1:0e:a4:00:97:c2:45:09:99:ba:ca:80:b1:07:c5:95:51:
         bf:c8:21:0f:9b:92:79:f2:a5:7f:48:24:0d:0c:6c:f3:29:3f:
         43:d8:5f:90:df:0d:0a:9e:bd:60:b0:36:10:d7:53:fd:ed:55:
         4e:34:ce:52:73:eb:36:77:56:df:2a:e1:aa:1b:ab:f3:eb:45:
         04:16:f7:38:bf:8f:82:0c:d9:67:8e:de:1a:c2:c4:a0:01:8b:
         09:9d:cc:6a:be:e4:e3:14:ef:dd:58:e4:dd:e8:b5:5e:56:ba:
         20:da:99:1a:d2:c5:92:e4:fe:c3:49:0b:6b:47:0b:03:bd:9d:
         82:73:67:9f:ca:c0:83:06:a2:ec:60:6d:e2:0d:2b:7f:86:72:
         c0:8b:8b:a2:76:90:7f:1d:7a:d2:74:bc:60:e3:cd:77:05:0d:
         c3:66:a2:00:5c:e6:3e:13:d6:02:c4:29:1e:dd:37:ed:08:a9:
         7e:6e:4b:99:d1:ef:8a:74:fb:c5:f6:d8:01:84:92:38:70:7b:
         d8:50:03:61:0b:54:e6:a6:7c:2e:5b:02:b7:a4:59:e4:fd:c5:
         83:cc:0d:d1:18:35:bc:be:5d:b1:fc:e2:3c:d7:65:c3:db:3e:
         3f:d2:ca:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNke2wQqlMDu9r924KeYFesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2
NjkyNTAwHhcNMjQxMTI1MTgwMDMwWhcNMjQxMTI2MTgwMDMwWjAzMTEwLwYDVQQD
Eyg5Njg1ZTcyYTZhYjA5NjhlOTUxNzJkODYxODA3ZjBjYzUxOTViOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYGPYG+kNPRmIPrYvzx8ZIPrcjnJ
f6g4XMgsy4Dm8qxW/EftCHIP43Qmhj+XGcak/15BJ5wrLQhJ/ulWtLK2jV79X0xJ
trXEgZNOwmTjftNwjG07WmFIi6vuF4Lm9fZswGs4FQhASAfqhpkBYzO+t+iFQQ9v
WRCqdV/6l3Wv3CaLAEg9IWvxCodEHTc6p3PydXU39w2MOYGaCi/9053y6A4NSxzJ
YoufL1u4vA03LLThQfhLqYt8Kx4t6w85PEyDulFUP/s8bzmjGXPA9E2zclAH4jRv
Bwlt5WwyafdUvjUQMD1h4zMJCfvuU/9Q6whb7SJJKNFZzL6uBgYz8IprnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaF5ypqsJaOlRcthhgH8MxRlblWMB8GA1UdIwQY
MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt
OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm
LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKa7CA1b
LXtJfcYECSKRYKXPguEOpACXwkUJmbrKgLEHxZVRv8ghD5uSefKlf0gkDQxs8yk/
Q9hfkN8NCp69YLA2ENdT/e1VTjTOUnPrNndW3yrhqhur8+tFBBb3OL+PggzZZ47e
GsLEoAGLCZ3Mar7k4xTv3Vjk3ei1Xla6INqZGtLFkuT+w0kLa0cLA72dgnNnn8rA
gwai7GBt4g0rf4ZywIuLonaQfx160nS8YOPNdwUNw2aiAFzmPhPWAsQpHt037Qip
fm5LmdHvinT7xfbYAYSSOHB72FADYQtU5qZ8LlsCt6RZ5P3Fg8wN0Rg1vL5dsfzi
PNdlw9s+P9LKyw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:15:47 2024 by rpki-client on console-ams.rpki-client.org