Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
File:                     WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json)
Hash identifier:          2ye9M2PqXgBYRwGJ5YLwSzeHJDgELGIB5pSL1qRrts4=
Subject key identifier:   9D:BA:2D:33:71:5B:40:92:22:F3:BA:9A:8C:C5:90:3C:72:8E:68:76
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Certificate issuer:       /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial:       0195786B6FE366278AC5A8B33259CD745BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
Manifest number:          148D
Signing time:             Sun 09 Mar 2025 01:01:01 +0000
Manifest this update:     Sun 09 Mar 2025 01:01:01 +0000
Manifest next update:     Mon 10 Mar 2025 01:01:01 +0000
Files and hashes:         1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=)
                          2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: G7Mc7vXvE/u4vnr86h19vMLLSYAUenxY54BHJFssjQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:78:6b:6f:e3:66:27:8a:c5:a8:b3:32:59:cd:74:5b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
        Validity
            Not Before: Mar  9 01:01:01 2025 GMT
            Not After : Mar 10 01:01:01 2025 GMT
        Subject: CN=9dba2d33715b409222f3ba9a8cc5903c728e6876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:da:9f:6d:b9:54:45:2c:ab:5f:58:99:3f:
                    2e:74:15:30:2b:41:8c:b7:57:80:99:90:36:12:5d:
                    c2:3c:27:ff:6e:fe:4e:82:a2:de:b8:12:1f:64:ca:
                    ee:e2:95:01:a5:52:88:b7:e3:fd:48:74:3b:dd:0e:
                    a8:ff:89:91:f5:2d:38:1e:bf:66:b3:eb:85:f5:60:
                    50:d5:85:4c:64:5a:cd:b1:a9:7c:3b:9a:4b:0d:57:
                    67:35:b6:a0:3e:13:08:bc:39:d1:29:5b:18:de:27:
                    17:11:b8:35:fb:1b:43:ec:e2:da:0f:97:59:bc:a5:
                    a7:d7:07:63:2b:fd:54:05:70:9e:35:9d:a3:ba:d0:
                    88:20:f7:fa:ed:1a:c4:ba:27:cb:fc:63:4f:da:5d:
                    e8:54:ed:de:a0:e9:e7:a7:af:41:88:35:13:8b:fe:
                    4d:36:8c:39:db:0d:70:45:ce:ee:9e:6b:37:70:9a:
                    d9:6f:2b:5b:e4:a6:96:e0:1a:e5:60:63:24:3d:71:
                    cf:ef:1b:e7:2b:88:23:61:d6:70:eb:9c:01:cb:5a:
                    a2:a8:4f:bd:11:00:41:9d:9f:04:28:83:ec:d8:f8:
                    1f:cc:36:27:60:4a:80:b7:44:62:9a:f6:33:a1:c0:
                    8e:db:7a:aa:23:14:9e:db:86:10:47:d4:dc:79:4d:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BA:2D:33:71:5B:40:92:22:F3:BA:9A:8C:C5:90:3C:72:8E:68:76
            X509v3 Authority Key Identifier:
                keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:80:53:38:2f:c6:b4:31:95:52:67:89:8a:fc:7a:63:b1:fc:
         5c:9f:66:3b:be:37:25:9f:66:13:3b:79:84:3b:45:da:59:60:
         88:85:c9:c2:74:48:a4:b6:f1:c1:68:a7:93:3b:c6:16:0a:8d:
         3e:b9:19:e0:43:32:e7:d7:97:28:c8:f8:62:2a:f6:cf:ad:62:
         3e:2a:41:99:52:dd:5e:1a:d6:c2:77:85:3c:f1:39:ad:ef:e2:
         40:8d:f3:a7:8d:37:46:59:ab:4b:5d:34:61:14:b9:21:09:70:
         18:41:65:07:ca:fc:eb:15:fe:a3:06:9b:26:92:0d:33:37:17:
         96:88:66:fb:62:8a:05:f7:d5:83:30:33:ea:a1:a2:2a:f8:23:
         a5:93:0d:64:b3:8d:9e:33:0f:2a:ff:71:9a:36:56:2d:6a:ea:
         84:3a:83:a7:70:32:90:f2:18:b5:9c:b3:a3:18:36:a2:16:91:
         fc:21:3c:4b:4c:94:83:c4:5b:77:19:cc:6e:ec:84:94:71:90:
         5f:f7:6c:bf:19:3d:06:67:d0:ec:7f:50:48:ec:71:8f:a3:bd:
         bc:32:45:54:17:ed:7c:32:59:42:fd:15:4b:ca:ee:5d:af:87:
         f0:a0:39:f0:fb:4b:62:82:52:c6:51:87:ef:b5:a5:9c:db:95:
         e7:75:72:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV4a2/jZieKxaizMlnNdFvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODMzZGVjNjU1ZTFhODg3MzNhMTdhMmRmM2RhMDk4NWFi
NjYwZDUwHhcNMjUwMzA5MDEwMTAxWhcNMjUwMzEwMDEwMTAxWjAzMTEwLwYDVQQD
Eyg5ZGJhMmQzMzcxNWI0MDkyMjJmM2JhOWE4Y2M1OTAzYzcyOGU2ODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhban225VEUsq19YmT8udBUwK0GM
t1eAmZA2El3CPCf/bv5OgqLeuBIfZMru4pUBpVKIt+P9SHQ73Q6o/4mR9S04Hr9m
s+uF9WBQ1YVMZFrNsal8O5pLDVdnNbagPhMIvDnRKVsY3icXEbg1+xtD7OLaD5dZ
vKWn1wdjK/1UBXCeNZ2jutCIIPf67RrEuifL/GNP2l3oVO3eoOnnp69BiDUTi/5N
Now52w1wRc7unms3cJrZbytb5KaW4BrlYGMkPXHP7xvnK4gjYdZw65wBy1qiqE+9
EQBBnZ8EKIPs2PgfzDYnYEqAt0RimvYzocCO23qqIxSe24YQR9TceU1hmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ26LTNxW0CSIvO6mozFkDxyjmh2MB8GA1UdIwQY
MBaAFFiDPexlXhqIczoXot89oJhatmDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjct
MmZmYWVkMDQ3MzhhLzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjctMmZmYWVkMDQ3Mzhh
LzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIBTOC/G
tDGVUmeJivx6Y7H8XJ9mO743JZ9mEzt5hDtF2llgiIXJwnRIpLbxwWinkzvGFgqN
PrkZ4EMy59eXKMj4Yir2z61iPipBmVLdXhrWwneFPPE5re/iQI3zp403RlmrS100
YRS5IQlwGEFlB8r86xX+owabJpINMzcXlohm+2KKBffVgzAz6qGiKvgjpZMNZLON
njMPKv9xmjZWLWrqhDqDp3AykPIYtZyzoxg2ohaR/CE8S0yUg8RbdxnMbuyElHGQ
X/dsvxk9BmfQ7H9QSOxxj6O9vDJFVBftfDJZQv0VS8ruXa+H8KA58PtLYoJSxlGH
77WlnNuV53Vy6w==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:48:13 2025 by rpki-client