Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File:                     WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier:          VXYmEi5O0jnIx1fU9SpdjjjHP2qpU56uqmZnR9FIJMA=
Subject key identifier:   F8:43:D2:8B:24:14:03:BC:F6:47:4D:95:CF:A8:A6:13:98:BC:0F:00
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer:       /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial:       018F9A9A145369695650027F98D985388CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number:          1185
Signing time:             Tue 21 May 2024 10:02:19 +0000
Manifest this update:     Tue 21 May 2024 10:02:19 +0000
Manifest next update:     Wed 22 May 2024 10:02:19 +0000
Files and hashes:         1: Ev8SGvmsQrnuD8ae4V9_p_o8VRI.roa (hash: CKaQDX5cirCXdBtt3FNYkZwu0tkh4NzQ012wzeXdQfY=)
                          2: KOgnCQq2e_EiOqSOCIumPoYtzNE.roa (hash: alVXywodtTLvU07tkVFVGj6Rb2PrhdJcOLjb0+ZAIkU=)
                          3: KOi4x8IHdJ5Stu1MNoVaZQJnYe4.roa (hash: Z1ibA9L04LunQH4TGEiiDR8FqkoMLgZODKH0HPzLH6Q=)
                          4: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: Xz3sVFlnFjSKBld76WJu0McD4hXGCUaXxfDOoH49kQc=)
                          5: XIwK18_GB5dBJUx0gyZUAiwWYc8.roa (hash: 6DgZEO5hhZKa66777bxezti+NRSRejtBfBXvep4VMME=)
                          6: ecWVSUbjWBO2oIo4yKbKbAQtFMc.roa (hash: OdvTRi7rtCaOog25SlWlT1jHWCrGKRfFJ24ynVGUBmw=)
                          7: kEKEUvdU-ZG69qsSiMb8vq-5av4.roa (hash: bri6Y4b0BezF2wKHisZjlAWqkk13BYb8wU37wiJ4usk=)
                          8: qHzUgADKGEkwJlAz53szPYAqlO4.roa (hash: sAD4+fm4JXvKo1Kz9KEwZgIAz6Re5WsL0M9WBzjsGwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:9a:14:53:69:69:56:50:02:7f:98:d9:85:38:8c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
        Validity
            Not Before: May 21 10:02:19 2024 GMT
            Not After : May 22 10:02:19 2024 GMT
        Subject: CN=f843d28b241403bcf6474d95cfa8a61398bc0f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:d3:39:23:fa:f0:eb:fb:8e:c4:6b:31:1e:
                    2e:2c:52:ff:b0:4a:6a:bf:95:cb:4c:b3:3b:e1:a8:
                    5d:41:d5:bd:3a:9c:02:97:8d:44:3a:33:cb:c4:43:
                    1b:74:4a:e4:62:90:43:ce:26:b8:5c:a7:6c:54:39:
                    ff:2d:74:55:d6:3b:99:fb:48:d8:19:de:1f:c5:a7:
                    e2:41:66:11:0a:1a:86:2f:1d:55:6c:26:b7:2f:48:
                    6c:e5:43:48:f1:d8:4c:08:1c:2f:69:12:f2:29:3b:
                    c8:f9:3d:c4:6e:72:1e:b6:7b:dc:c2:1c:51:fa:9e:
                    29:63:d4:23:ac:55:15:0e:e8:7a:f5:04:5c:80:f0:
                    58:62:d8:7b:c5:23:6a:a4:d2:fc:33:78:4b:1e:0a:
                    f0:2d:40:fe:cb:c2:68:c2:50:b5:f0:ad:2f:12:d2:
                    7e:67:79:58:e2:89:61:f1:28:8a:ba:46:f3:96:32:
                    69:20:1c:2b:41:2e:8f:f5:12:1d:4b:65:d3:ad:d8:
                    8b:f6:42:d8:3c:51:0d:9b:16:c8:d7:b7:af:7b:7a:
                    ae:92:b5:86:de:8b:e9:b7:96:41:7f:7e:3b:f3:c2:
                    4e:14:ec:13:dd:2a:51:20:cb:96:e7:ca:a4:67:89:
                    9f:0a:ac:2e:54:bf:80:08:be:a1:54:33:c3:89:de:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:43:D2:8B:24:14:03:BC:F6:47:4D:95:CF:A8:A6:13:98:BC:0F:00
            X509v3 Authority Key Identifier:
                keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:96:e5:56:a8:4a:e6:51:b4:50:20:65:7c:a8:82:ee:3a:f7:
         0c:83:29:35:ec:f9:d6:f1:5f:89:38:a5:df:d4:20:af:6d:14:
         dc:89:72:bb:ef:ac:f7:04:3e:00:b6:0a:70:52:ac:1b:58:ac:
         4a:97:8e:70:d0:9f:d7:64:18:b0:d2:b3:dd:23:e7:49:b3:5f:
         c2:cc:7a:32:1a:5c:b6:7e:1d:0d:be:75:3a:22:a3:e5:70:27:
         ff:9a:7d:b0:86:a3:3b:19:c5:07:b8:c0:21:45:30:f5:5c:8e:
         58:e1:f1:b1:ef:c7:a3:26:e4:9b:f2:57:32:d8:37:87:fa:a2:
         a4:94:03:53:e4:dc:32:55:10:0d:f4:22:5c:1e:4a:b1:92:bf:
         e9:e4:12:2b:be:61:24:c5:10:4a:91:b9:72:b0:54:84:32:d0:
         e8:58:4c:71:f5:77:95:9a:8b:20:50:06:92:06:3a:4f:5e:4b:
         16:0d:d5:59:39:93:78:66:cd:46:f7:10:de:b5:64:58:84:8c:
         f0:a5:52:35:74:db:b6:5d:52:4f:43:74:6e:a8:60:68:11:ca:
         04:b9:49:8c:8f:95:15:20:09:ab:b5:e0:bf:fd:ff:20:1e:0c:
         fd:02:2b:81:1b:3b:6c:7e:b4:d9:d7:4c:b8:9e:c2:d8:8a:ff:
         5d:21:69:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+amhRTaWlWUAJ/mNmFOIzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjQwNTIxMTAwMjE5WhcNMjQwNTIyMTAwMjE5WjAzMTEwLwYDVQQD
EyhmODQzZDI4YjI0MTQwM2JjZjY0NzRkOTVjZmE4YTYxMzk4YmMwZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyjTOSP68Ov7jsRrMR4uLFL/sEpq
v5XLTLM74ahdQdW9OpwCl41EOjPLxEMbdErkYpBDzia4XKdsVDn/LXRV1juZ+0jY
Gd4fxafiQWYRChqGLx1VbCa3L0hs5UNI8dhMCBwvaRLyKTvI+T3EbnIetnvcwhxR
+p4pY9QjrFUVDuh69QRcgPBYYth7xSNqpNL8M3hLHgrwLUD+y8JowlC18K0vEtJ+
Z3lY4olh8SiKukbzljJpIBwrQS6P9RIdS2XTrdiL9kLYPFENmxbI17eve3qukrWG
3ovpt5ZBf34788JOFOwT3SpRIMuW58qkZ4mfCqwuVL+ACL6hVDPDid6+5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhD0oskFAO89kdNlc+ophOYvA8AMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJblVqhK
5lG0UCBlfKiC7jr3DIMpNez51vFfiTil39Qgr20U3Ilyu++s9wQ+ALYKcFKsG1is
SpeOcNCf12QYsNKz3SPnSbNfwsx6Mhpctn4dDb51OiKj5XAn/5p9sIajOxnFB7jA
IUUw9VyOWOHxse/Hoybkm/JXMtg3h/qipJQDU+TcMlUQDfQiXB5KsZK/6eQSK75h
JMUQSpG5crBUhDLQ6FhMcfV3lZqLIFAGkgY6T15LFg3VWTmTeGbNRvcQ3rVkWISM
8KVSNXTbtl1ST0N0bqhgaBHKBLlJjI+VFSAJq7Xgv/3/IB4M/QIrgRs7bH602ddM
uJ7C2Ir/XSFpTA==
-----END CERTIFICATE-----
Generated at Tue May 21 19:56:52 2024 by rpki-client on console-fra.rpki-client.org