Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          rXJ5VSHmBO63uKAlWYghYOnFz0EersRDmcbnB05aR4w=
Subject key identifier:   FE:90:D4:0B:B5:F1:28:F7:67:98:1E:42:3D:75:BB:A5:4C:FC:62:01
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       018F953B54D1A253E2D8427E376CB1A2AC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          10E5
Signing time:             Mon 20 May 2024 09:00:44 +0000
Manifest this update:     Mon 20 May 2024 09:00:44 +0000
Manifest next update:     Tue 21 May 2024 09:00:44 +0000
Files and hashes:         1: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: uMKwaoug/KQspc+J1KDebOUFKw+9vqqKey0ae9o02KQ=)
                          2: mV9BdmYQdL5DOMSHI7CQggt-JV0.roa (hash: pw157J2x08EpCqWBK4ZLj1XWIZDp2zyHf71lbpdxdKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:3b:54:d1:a2:53:e2:d8:42:7e:37:6c:b1:a2:ac:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: May 20 09:00:44 2024 GMT
            Not After : May 21 09:00:44 2024 GMT
        Subject: CN=fe90d40bb5f128f767981e423d75bba54cfc6201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:09:93:8a:fc:f7:fd:3c:54:08:b9:32:92:
                    2d:6c:ad:80:78:47:02:0b:f8:32:d9:4e:9b:75:40:
                    bd:d3:8a:08:82:41:45:2c:d8:35:8e:f4:e6:0e:25:
                    78:2d:9e:6e:a9:ff:78:22:a6:62:89:37:41:f4:ca:
                    4a:56:2e:52:ce:4c:b8:0a:4a:51:72:33:3e:bd:a9:
                    43:c4:f5:3e:6d:74:b7:3a:95:13:a6:ee:59:da:3e:
                    98:99:8f:72:69:0e:49:54:42:99:fa:9d:4d:dd:32:
                    9b:93:13:4b:31:1e:40:5c:21:80:13:8c:2b:98:51:
                    03:cc:63:dd:40:2b:99:95:36:a6:6b:a4:24:80:dc:
                    f2:0c:44:68:40:11:78:14:78:15:52:07:23:39:dc:
                    d8:af:4d:42:94:3b:ed:1c:48:87:ca:bf:22:40:46:
                    a3:14:83:b1:26:8b:0c:b6:5a:1b:c0:41:76:99:d4:
                    c8:ea:79:31:db:60:7d:5d:fb:bb:9a:2a:54:c3:ea:
                    da:1b:ab:f3:31:a0:b4:66:9d:0f:a4:20:25:2e:48:
                    01:aa:49:7c:3f:a7:b1:82:f0:64:f0:c9:55:4b:97:
                    d7:d1:93:e1:78:94:61:6c:38:4e:ee:de:fe:07:17:
                    be:9c:23:ac:5d:60:aa:0c:07:3c:08:9a:39:98:16:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:D4:0B:B5:F1:28:F7:67:98:1E:42:3D:75:BB:A5:4C:FC:62:01
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:12:ec:ae:29:f2:5a:81:20:1b:96:a8:c1:be:a2:2b:53:ef:
         b4:40:8b:76:10:68:62:7a:c6:f5:a3:de:0d:a4:0d:a5:98:21:
         24:dc:35:8a:29:c5:c9:fd:a1:61:73:ba:02:db:f3:8c:89:64:
         12:b2:3a:b6:b3:19:e5:36:58:d5:ea:70:8e:88:8a:2d:1e:5b:
         c1:5f:8a:e5:5d:06:5b:43:72:59:f0:7b:58:c0:29:cb:f8:8c:
         3d:3d:28:f5:1c:b3:93:3d:1c:17:a5:ce:10:02:59:4c:5f:a7:
         52:85:4d:50:43:23:6e:10:2b:c6:b6:68:74:5d:1c:d0:ae:2e:
         09:ca:d0:8f:85:33:39:5e:ff:76:61:8d:68:bf:8d:9a:97:b9:
         50:8e:aa:e3:b0:97:25:21:8d:20:28:aa:9e:f5:41:6f:54:9c:
         49:77:c8:e1:da:47:ea:00:d7:9c:55:63:b9:35:39:ff:be:1b:
         82:32:54:05:85:f7:bc:de:30:1f:9a:09:9d:ce:58:73:ef:da:
         b1:a5:5c:9b:00:f5:0b:54:03:a1:b6:06:90:d1:d4:76:a1:b0:
         96:c9:f6:ee:1b:ac:3c:0a:58:b4:0e:ac:59:d5:f2:17:d8:f8:
         f7:ff:3f:c7:57:c5:33:54:6e:ac:9f:e1:af:d3:30:b0:2d:d5:
         be:6b:12:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+VO1TRolPi2EJ+N2yxoqwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2
NjkyNTAwHhcNMjQwNTIwMDkwMDQ0WhcNMjQwNTIxMDkwMDQ0WjAzMTEwLwYDVQQD
EyhmZTkwZDQwYmI1ZjEyOGY3Njc5ODFlNDIzZDc1YmJhNTRjZmM2MjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQJk4r89/08VAi5MpItbK2AeEcC
C/gy2U6bdUC904oIgkFFLNg1jvTmDiV4LZ5uqf94IqZiiTdB9MpKVi5Szky4CkpR
cjM+valDxPU+bXS3OpUTpu5Z2j6YmY9yaQ5JVEKZ+p1N3TKbkxNLMR5AXCGAE4wr
mFEDzGPdQCuZlTama6QkgNzyDERoQBF4FHgVUgcjOdzYr01ClDvtHEiHyr8iQEaj
FIOxJosMtlobwEF2mdTI6nkx22B9Xfu7mipUw+raG6vzMaC0Zp0PpCAlLkgBqkl8
P6exgvBk8MlVS5fX0ZPheJRhbDhO7t7+Bxe+nCOsXWCqDAc8CJo5mBZ2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6Q1Au18Sj3Z5geQj11u6VM/GIBMB8GA1UdIwQY
MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt
OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm
LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhLsriny
WoEgG5aowb6iK1PvtECLdhBoYnrG9aPeDaQNpZghJNw1iinFyf2hYXO6AtvzjIlk
ErI6trMZ5TZY1epwjoiKLR5bwV+K5V0GW0NyWfB7WMApy/iMPT0o9Ryzkz0cF6XO
EAJZTF+nUoVNUEMjbhArxrZodF0c0K4uCcrQj4UzOV7/dmGNaL+Nmpe5UI6q47CX
JSGNICiqnvVBb1ScSXfI4dpH6gDXnFVjuTU5/74bgjJUBYX3vN4wH5oJnc5Yc+/a
saVcmwD1C1QDobYGkNHUdqGwlsn27husPApYtA6sWdXyF9j49/8/x1fFM1RurJ/h
r9MwsC3VvmsSag==
-----END CERTIFICATE-----