Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File:                     WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier:          +UKabACtZxVRyt/2zbNuksulll9KcDUe1BJaNvAFVds=
Subject key identifier:   5B:41:BB:EA:37:1F:80:D1:F9:36:65:DB:2E:DB:4F:AE:94:A0:22:79
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer:       /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial:       0193598A37B9762CC5793680213B76D89241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number:          08C0
Signing time:             Sat 23 Nov 2024 15:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:50 +0000
Files and hashes:         1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: iZkGkQ/0snLOvBHOVf1qDMAZke+JrX0r/TLY2Wr9xlc=)
                          2: ls09SLbJF8oRlhhxYa071cLLPCk.roa (hash: mFXYiKZlwiRsxhT1L8dqnSGqORUTkcqR3iHw8ia+WIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:8a:37:b9:76:2c:c5:79:36:80:21:3b:76:d8:92:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
        Validity
            Not Before: Nov 23 15:00:50 2024 GMT
            Not After : Nov 24 15:00:50 2024 GMT
        Subject: CN=5b41bbea371f80d1f93665db2edb4fae94a02279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:6e:0a:a9:6f:44:21:c6:5c:3d:ad:ce:b6:
                    3d:82:84:95:0d:bc:4a:40:4a:14:ff:cc:e2:59:36:
                    2d:6b:c4:c0:56:77:75:3a:d8:be:80:dd:fa:b7:e7:
                    3c:a1:29:d4:fa:42:77:d5:1c:26:0d:d8:0e:d4:d2:
                    cc:d4:54:1e:e2:d9:ee:24:7c:1f:b2:f4:b8:3f:3a:
                    9f:f8:d6:66:a2:4e:26:c2:f0:b1:68:4f:49:e2:3a:
                    4c:c9:e3:d7:20:38:8a:de:de:18:6e:99:ce:39:06:
                    b0:44:86:fb:81:d0:d1:ac:f8:02:39:69:1e:3e:6f:
                    be:b3:01:9e:b8:ed:9f:a3:13:27:c1:1e:cd:dc:15:
                    c9:68:24:87:20:1b:33:73:a4:f2:75:1a:cd:99:7c:
                    dc:52:4b:9f:7c:99:71:08:2c:56:3d:27:58:3b:72:
                    7d:75:bc:f9:e7:8a:04:5d:7e:c9:0a:be:65:bb:3e:
                    d7:b1:eb:b8:36:29:98:34:68:0a:ca:a7:4e:4c:26:
                    13:7a:a0:3f:aa:c8:34:d4:5c:59:f2:a1:ab:98:da:
                    af:e4:62:b2:15:16:28:c8:aa:10:ed:9c:e9:7e:21:
                    f3:95:cf:d5:e3:fd:67:aa:d1:3d:2c:9f:cd:47:c6:
                    3d:90:64:46:c4:bb:e8:7b:8f:05:24:a3:1b:7c:26:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:41:BB:EA:37:1F:80:D1:F9:36:65:DB:2E:DB:4F:AE:94:A0:22:79
            X509v3 Authority Key Identifier:
                keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:32:72:41:00:bf:f3:ea:61:9d:70:34:54:29:6d:8a:c7:
         43:e1:99:e4:36:fa:c6:54:fb:6e:00:af:d1:c8:a5:13:b2:a4:
         20:8c:5f:ab:7f:a4:4f:96:82:43:60:0e:8c:e1:04:5b:0e:18:
         fe:0e:f8:ab:a9:58:5d:ae:65:b2:42:3d:cf:be:72:af:4b:e4:
         6c:0f:4e:47:1d:16:e2:c7:b3:7a:e5:ac:e7:46:ff:27:64:9c:
         5b:8a:20:d3:5c:4a:2d:20:df:ef:9c:58:f5:46:64:9b:a3:6b:
         69:37:b4:48:fa:06:ba:d2:61:30:42:6b:9c:02:87:43:15:dd:
         70:8f:24:3f:8a:6d:9a:00:ab:c2:5d:9d:a8:27:fd:de:5b:9e:
         d6:bb:dd:ca:58:0b:01:f8:4d:fe:76:3e:48:11:12:a1:83:46:
         04:68:a2:a1:69:25:3e:79:0b:ad:fb:25:7d:0d:76:8a:fe:34:
         bf:8e:d9:4b:7d:af:00:29:b5:1f:0a:a1:bf:64:5b:df:0e:01:
         0c:49:60:7e:de:cd:e7:5b:c5:e8:ed:aa:23:eb:52:80:f5:f1:
         a2:80:90:80:45:ec:6f:d0:7f:18:62:04:c6:1f:0b:05:a0:63:
         51:3f:47:0f:78:75:94:34:9d:f0:5e:51:1a:f5:15:f4:7d:84:
         08:ec:a3:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZije5dizFeTaAITt22JJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz
NDg5YjAwHhcNMjQxMTIzMTUwMDUwWhcNMjQxMTI0MTUwMDUwWjAzMTEwLwYDVQQD
Eyg1YjQxYmJlYTM3MWY4MGQxZjkzNjY1ZGIyZWRiNGZhZTk0YTAyMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ1uCqlvRCHGXD2tzrY9goSVDbxK
QEoU/8ziWTYta8TAVnd1Oti+gN36t+c8oSnU+kJ31RwmDdgO1NLM1FQe4tnuJHwf
svS4Pzqf+NZmok4mwvCxaE9J4jpMyePXIDiK3t4YbpnOOQawRIb7gdDRrPgCOWke
Pm++swGeuO2foxMnwR7N3BXJaCSHIBszc6TydRrNmXzcUkuffJlxCCxWPSdYO3J9
dbz554oEXX7JCr5luz7Xseu4NimYNGgKyqdOTCYTeqA/qsg01FxZ8qGrmNqv5GKy
FRYoyKoQ7ZzpfiHzlc/V4/1nqtE9LJ/NR8Y9kGRGxLvoe48FJKMbfCZ5QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtBu+o3H4DR+TZl2y7bT66UoCJ5MB8GA1UdIwQY
MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt
MDk4ZjdjNWZkOTc1LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1
LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+oyckEA
v/PqYZ1wNFQpbYrHQ+GZ5Db6xlT7bgCv0cilE7KkIIxfq3+kT5aCQ2AOjOEEWw4Y
/g74q6lYXa5lskI9z75yr0vkbA9ORx0W4sezeuWs50b/J2ScW4og01xKLSDf75xY
9UZkm6NraTe0SPoGutJhMEJrnAKHQxXdcI8kP4ptmgCrwl2dqCf93lue1rvdylgL
AfhN/nY+SBESoYNGBGiioWklPnkLrfslfQ12iv40v47ZS32vACm1Hwqhv2Rb3w4B
DElgft7N51vF6O2qI+tSgPXxooCQgEXsb9B/GGIExh8LBaBjUT9HD3h1lDSd8F5R
GvUV9H2ECOyjkw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:17 2024 by rpki-client on console-fra.rpki-client.org