Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          a0XaXPeeSpq5qpMEyYPuVgMqKdjNiJnkKvMt6tAzev4=
Subject key identifier:   8A:9D:8B:72:E7:32:B2:50:D9:DA:1E:FA:1A:EF:E1:0B:CE:E1:11:76
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       018F885AFC6B7100A3717437F12A06EF12C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 21:00:15 +0000
Manifest this update:     Fri 17 May 2024 21:00:15 +0000
Manifest next update:     Sat 18 May 2024 21:00:15 +0000
Files and hashes:         1: I2bACCxph7PfiexR4cPaqqdfJkk.roa (hash: zqYwZLUEQx6DvdVChLlPKhrwACiHHguJq8RaiiVSEws=)
                          2: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: rf9UwNxuORi5gLxdnQ3R8aUAWxsph4m71Vsgw4Vr8Ds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:fc:6b:71:00:a3:71:74:37:f1:2a:06:ef:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: May 17 21:00:15 2024 GMT
            Not After : May 18 21:00:15 2024 GMT
        Subject: CN=8a9d8b72e732b250d9da1efa1aefe10bcee11176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:7e:6f:f3:7d:80:fd:f2:ab:fa:19:9f:9e:
                    b7:81:54:67:c7:6c:dd:4b:5b:fa:87:e7:a8:2a:3c:
                    fc:83:90:a1:98:eb:88:5f:8d:0f:02:94:6f:f1:22:
                    28:ae:f3:a3:74:39:b6:5d:2f:45:a1:70:d5:fa:a2:
                    91:64:66:05:01:2b:8c:8f:ee:39:19:87:10:7c:bc:
                    e0:6f:48:e2:59:f7:a5:a1:a4:d1:09:c0:b2:71:ab:
                    11:e6:4c:de:cc:79:11:92:31:f4:fb:2a:5c:ae:ed:
                    3f:f1:a7:0f:d0:83:e2:3a:84:f8:e3:c8:77:db:84:
                    0f:07:93:56:41:f5:65:70:4d:fb:a2:ba:7d:25:62:
                    78:50:eb:3f:d2:59:48:8f:64:23:02:cc:fc:d0:b2:
                    38:cc:ab:41:e8:d9:0f:3a:12:ed:71:2e:de:9f:8a:
                    27:be:a8:c4:fe:4e:6b:dd:9d:7a:17:60:8e:aa:8a:
                    8a:b8:a8:be:2b:37:13:1f:a7:cc:4a:55:5b:e0:80:
                    d1:9e:74:81:f8:25:4f:35:0e:6d:52:da:a2:dd:b4:
                    12:af:54:a3:3e:c4:6e:f8:b0:43:08:e7:55:8d:d9:
                    86:61:23:96:ae:5b:36:40:c0:cc:d6:78:ac:b4:bf:
                    7f:22:24:07:51:ce:64:83:5b:e2:f9:d4:3c:ab:37:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9D:8B:72:E7:32:B2:50:D9:DA:1E:FA:1A:EF:E1:0B:CE:E1:11:76
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:cc:03:f9:25:a1:66:d4:0a:7e:48:ce:e8:52:9b:03:88:
         f2:f2:9d:24:85:11:79:f4:f6:6d:d7:0a:0c:b8:66:0b:8d:4b:
         fb:f3:60:5b:11:dc:ac:a7:16:fa:1c:5c:b0:c5:c0:64:07:98:
         d1:bb:71:af:12:0f:5c:72:68:ce:b4:7f:78:6f:29:87:91:f1:
         e2:d6:9e:2f:6a:5a:7f:04:f9:0b:fe:98:b9:8d:66:e4:59:8c:
         1c:97:b8:e0:b0:d9:0f:06:06:4e:43:fa:a7:ab:da:4b:3c:b4:
         50:74:d8:2f:18:68:32:42:cb:1c:e5:dd:f3:50:9f:e8:39:d2:
         73:d3:b3:7e:71:e4:1e:25:37:8e:8e:99:ff:96:20:e3:2a:a9:
         7e:eb:60:d5:e5:dc:90:86:34:e1:83:de:e0:d3:fc:e5:c3:68:
         70:32:fc:dd:7a:1a:9b:4d:72:14:dc:59:f1:09:93:01:92:d6:
         8f:3c:cb:ab:48:f4:b9:3a:c9:51:d0:c0:3e:b3:85:a0:ab:8e:
         81:dc:2c:b8:d5:53:bc:68:79:0d:b3:54:93:32:af:a4:29:d4:
         37:91:1c:06:43:fb:3b:7b:85:b2:3a:72:af:4c:de:6e:9e:f0:
         c9:4b:f2:b6:6d:3f:c0:06:7c:51:1b:cd:f7:14:0f:83:52:16:
         9b:f5:2f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWvxrcQCjcXQ38SoG7xLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwY2IzYWI0MzkyZWFhMGIzOGYxOTY1ZDU0ZmNiZWViNTA2
N2FkMWMwHhcNMjQwNTE3MjEwMDE1WhcNMjQwNTE4MjEwMDE1WjAzMTEwLwYDVQQD
Eyg4YTlkOGI3MmU3MzJiMjUwZDlkYTFlZmExYWVmZTEwYmNlZTExMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYR+b/N9gP3yq/oZn563gVRnx2zd
S1v6h+eoKjz8g5ChmOuIX40PApRv8SIorvOjdDm2XS9FoXDV+qKRZGYFASuMj+45
GYcQfLzgb0jiWfeloaTRCcCycasR5kzezHkRkjH0+ypcru0/8acP0IPiOoT448h3
24QPB5NWQfVlcE37orp9JWJ4UOs/0llIj2QjAsz80LI4zKtB6NkPOhLtcS7en4on
vqjE/k5r3Z16F2COqoqKuKi+KzcTH6fMSlVb4IDRnnSB+CVPNQ5tUtqi3bQSr1Sj
PsRu+LBDCOdVjdmGYSOWrls2QMDM1nistL9/IiQHUc5kg1vi+dQ8qzfnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqdi3LnMrJQ2doe+hrv4QvO4RF2MB8GA1UdIwQY
MBaAFMDLOrQ5LqoLOPGWXVT8vutQZ60cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01zNnREa3VxZ3M0OFpaZFZQeS02MUJuclJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jZTQ4MjItYzk5MS00MGYwLWIxNTQt
YjhiYmNhODYzNmNjLzEvd01zNnREa3VxZ3M0OFpaZFZQeS02MUJuclJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9jZTQ4MjItYzk5MS00MGYwLWIxNTQtYjhiYmNhODYzNmNj
LzEvd01zNnREa3VxZ3M0OFpaZFZQeS02MUJuclJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtDMA/kl
oWbUCn5IzuhSmwOI8vKdJIURefT2bdcKDLhmC41L+/NgWxHcrKcW+hxcsMXAZAeY
0btxrxIPXHJozrR/eG8ph5Hx4taeL2pafwT5C/6YuY1m5FmMHJe44LDZDwYGTkP6
p6vaSzy0UHTYLxhoMkLLHOXd81Cf6DnSc9OzfnHkHiU3jo6Z/5Yg4yqpfutg1eXc
kIY04YPe4NP85cNocDL83Xoam01yFNxZ8QmTAZLWjzzLq0j0uTrJUdDAPrOFoKuO
gdwsuNVTvGh5DbNUkzKvpCnUN5EcBkP7O3uFsjpyr0zebp7wyUvytm0/wAZ8URvN
9xQPg1IWm/UvyQ==
-----END CERTIFICATE-----
Generated at Sat May 18 00:40:37 2024 by rpki-client on console-ams.rpki-client.org