Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File:                     WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier:          ldVl5UK9Kr9xrvYRoRATsrIbtzmpWrSnEErJl9P+wus=
Subject key identifier:   6E:9B:F6:E5:60:7A:2C:D1:59:22:DE:DA:DC:0D:87:0C:86:9C:8E:5E
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer:       /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial:       019356BF90FBAFB456A03152390F054E08E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number:          02AA
Signing time:             Sat 23 Nov 2024 02:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:15 +0000
Files and hashes:         1: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: BemXv7XDs6yY2KO7Y0dhV/4E0+KjiceiugO8J9HM7PE=)
                          2: cslt4q3Y_3k-04sesouHZY90bkM.roa (hash: 3agKJpUMmsl7NwpiC53lvhF33f84jKmR8VHZyZUGhtg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:90:fb:af:b4:56:a0:31:52:39:0f:05:4e:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
        Validity
            Not Before: Nov 23 02:00:15 2024 GMT
            Not After : Nov 24 02:00:15 2024 GMT
        Subject: CN=6e9bf6e5607a2cd15922dedadc0d870c869c8e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:e9:96:ed:21:00:8b:2c:14:f0:d3:02:e7:
                    e9:ef:6a:25:bc:20:c2:27:69:e3:97:c9:83:d6:fa:
                    7b:00:e1:53:b9:bb:b7:92:45:1c:86:de:e3:96:5c:
                    1a:1e:5a:5e:25:78:77:f4:47:61:c4:e4:df:94:54:
                    bb:4c:1c:6f:19:c4:a9:97:e7:86:66:a8:5d:ce:6b:
                    ec:41:c9:da:12:d5:6f:0e:8f:24:7f:8e:09:14:19:
                    7b:69:33:c3:c3:35:4b:e9:29:7a:2c:ed:86:3b:21:
                    67:3b:c7:7c:30:e4:73:ce:b8:d3:53:ae:69:ef:20:
                    7b:37:84:8f:20:30:8e:d5:b6:68:d7:62:f4:62:4e:
                    49:97:13:f4:e6:f4:2a:21:81:d7:09:74:aa:be:c2:
                    4a:b6:8b:c7:f0:1d:02:80:d6:f9:e1:91:9f:2d:49:
                    ed:8d:28:74:5a:37:ec:bb:82:22:46:fd:e8:fa:4d:
                    42:81:14:a2:01:42:c7:85:0f:29:6c:4b:83:67:78:
                    bd:31:2d:cb:34:63:49:65:c6:fa:6e:16:e9:20:ca:
                    1e:d6:8c:01:f3:93:97:98:d3:09:f0:4a:a0:a3:7f:
                    e3:46:8f:26:b6:ae:d5:96:7b:cd:4c:f5:c7:9e:93:
                    4d:9e:93:31:3b:94:dd:1a:c2:a8:88:cb:1e:a5:26:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9B:F6:E5:60:7A:2C:D1:59:22:DE:DA:DC:0D:87:0C:86:9C:8E:5E
            X509v3 Authority Key Identifier:
                keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:eb:59:34:3e:db:fb:67:ff:95:5f:fd:cc:49:0e:57:5d:0b:
         04:c2:76:f3:ae:88:3b:99:0b:5a:8f:66:40:78:f1:3d:6c:f7:
         29:ee:96:95:21:a8:b6:df:86:c5:64:16:0e:c2:2b:e2:c4:32:
         b0:c2:e5:71:f1:13:c4:42:ac:8b:a7:a6:ed:12:4a:e9:96:c4:
         a3:48:e1:91:14:67:50:4b:ec:86:52:37:6b:c7:b9:ca:95:53:
         b9:7e:23:ba:15:ee:c1:6c:f1:1b:e9:02:cb:1d:16:5f:6a:7f:
         c7:44:88:7d:15:64:9c:3d:36:2b:76:89:01:f3:0f:9e:c5:fc:
         08:5e:9e:67:46:97:d4:6c:65:e8:a0:83:e0:b6:cb:d9:71:8f:
         f1:50:47:bb:b6:3e:83:71:ff:47:35:9e:5d:5d:12:eb:22:19:
         3e:21:ae:be:c5:21:e1:84:98:4a:b4:3d:10:ae:fe:82:04:af:
         57:f4:96:1f:53:44:bf:b4:6a:d3:80:c8:5e:79:83:6d:d6:24:
         b2:2d:d0:7e:f1:81:5c:35:ce:22:eb:29:a5:32:92:32:fc:a8:
         f5:51:ae:e2:7b:dc:7d:7c:dd:b2:05:93:90:36:27:b0:4b:c8:
         cc:3b:d0:7e:ab:83:6c:f0:7d:9c:ac:2e:d8:79:ee:d9:0c:70:
         5f:7b:35:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv5D7r7RWoDFSOQ8FTgjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGU1MDQ0ZWQ4Mzg3NWM3ZTllZThlY2I4N2RkNmQzMWRk
NWM0YWUwHhcNMjQxMTIzMDIwMDE1WhcNMjQxMTI0MDIwMDE1WjAzMTEwLwYDVQQD
Eyg2ZTliZjZlNTYwN2EyY2QxNTkyMmRlZGFkYzBkODcwYzg2OWM4ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD7plu0hAIssFPDTAufp72olvCDC
J2njl8mD1vp7AOFTubu3kkUcht7jllwaHlpeJXh39EdhxOTflFS7TBxvGcSpl+eG
ZqhdzmvsQcnaEtVvDo8kf44JFBl7aTPDwzVL6Sl6LO2GOyFnO8d8MORzzrjTU65p
7yB7N4SPIDCO1bZo12L0Yk5JlxP05vQqIYHXCXSqvsJKtovH8B0CgNb54ZGfLUnt
jSh0Wjfsu4IiRv3o+k1CgRSiAULHhQ8pbEuDZ3i9MS3LNGNJZcb6bhbpIMoe1owB
85OXmNMJ8Eqgo3/jRo8mtq7VlnvNTPXHnpNNnpMxO5TdGsKoiMsepSb0uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6b9uVgeizRWSLe2twNhwyGnI5eMB8GA1UdIwQY
MBaAFFjeUETtg4dcfp7o7Lh91tMd1cSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQt
YWE5NTg3ODhlZWJmLzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQtYWE5NTg3ODhlZWJm
LzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0OtZND7b
+2f/lV/9zEkOV10LBMJ2866IO5kLWo9mQHjxPWz3Ke6WlSGott+GxWQWDsIr4sQy
sMLlcfETxEKsi6em7RJK6ZbEo0jhkRRnUEvshlI3a8e5ypVTuX4juhXuwWzxG+kC
yx0WX2p/x0SIfRVknD02K3aJAfMPnsX8CF6eZ0aX1Gxl6KCD4LbL2XGP8VBHu7Y+
g3H/RzWeXV0S6yIZPiGuvsUh4YSYSrQ9EK7+ggSvV/SWH1NEv7Rq04DIXnmDbdYk
si3QfvGBXDXOIusppTKSMvyo9VGu4nvcfXzdsgWTkDYnsEvIzDvQfquDbPB9nKwu
2Hnu2QxwX3s1FA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:55 2024 by rpki-client on console-ams.rpki-client.org