Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File:                     wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier:          yLTx96xKg7GU0Ay4zA0r39Us1rBK6zNG+QSKal2Z8Uo=
Subject key identifier:   70:CF:DA:98:24:FD:AE:DC:0D:AE:82:BD:77:D8:2E:B0:CF:8D:57:5D
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer:       /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial:       0191FA4735676A23B89261401FA1816CC77E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number:          AD
Signing time:             Mon 16 Sep 2024 10:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 10:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 10:00:56 +0000
Files and hashes:         1: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: 0NHJs6+4VllIdn/GTK3Pzv7RvI3WMryLfoxxw+8qRcE=)
                          2: z6wIR0UsXq5UZOGHB8ms9Qe6IBc.roa (hash: XsTQZVZplduOW9GFSbcOil4UWOKJV9TAKo2XcwR8txY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:35:67:6a:23:b8:92:61:40:1f:a1:81:6c:c7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
        Validity
            Not Before: Sep 16 10:00:56 2024 GMT
            Not After : Sep 17 10:00:56 2024 GMT
        Subject: CN=70cfda9824fdaedc0dae82bd77d82eb0cf8d575d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:cc:34:e7:61:86:5a:55:bc:07:c1:17:c3:
                    6a:bb:7e:5b:fb:9f:59:f9:47:81:a0:88:12:24:d9:
                    44:3c:fe:94:13:bc:9b:da:ad:2c:48:5b:c7:99:dc:
                    d8:4e:cf:b5:bd:bf:76:26:f4:cc:2a:0c:be:17:30:
                    84:de:df:b0:a4:7c:cc:aa:24:d8:97:f6:36:68:5f:
                    06:8c:30:ea:cb:b1:37:c4:dd:bd:5a:65:d3:af:17:
                    8f:c5:b8:99:43:b7:65:ff:d9:44:9b:5a:4a:3c:e4:
                    e3:63:bf:c3:9d:b5:d1:ba:51:09:58:b9:cb:99:57:
                    8f:81:ba:67:78:79:ea:33:c9:21:bc:c5:ee:a1:06:
                    d9:e0:6e:63:13:25:69:e5:dd:81:95:0d:dd:5a:79:
                    d5:9d:53:64:86:28:8b:6e:12:ae:b5:fd:4a:59:26:
                    85:d1:f4:cd:8e:84:7b:bc:07:2f:dc:0e:d3:ad:59:
                    84:a8:63:f0:5e:ca:4c:62:0d:44:7d:f4:ef:1a:89:
                    da:7e:9e:df:ce:7b:b0:e5:c7:79:26:f6:9b:63:a1:
                    4c:3c:ca:7b:8f:b6:7e:af:f2:ad:62:2d:1c:e3:6c:
                    b8:34:ea:fa:0c:cf:36:f7:22:9a:f8:ce:5a:6c:a3:
                    31:bb:87:ea:fb:5e:cf:28:79:73:cf:56:5b:13:2b:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CF:DA:98:24:FD:AE:DC:0D:AE:82:BD:77:D8:2E:B0:CF:8D:57:5D
            X509v3 Authority Key Identifier:
                keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:93:74:e7:c1:5e:53:d8:dc:18:7f:8a:ee:24:e0:72:4f:20:
         2d:51:f4:84:28:ee:b7:3e:81:6b:23:ac:29:95:42:75:ec:f4:
         d9:a8:6f:a3:57:54:d2:dc:8d:ea:96:c4:4e:54:68:93:76:eb:
         04:09:a5:76:39:ac:d3:b2:c0:07:1b:a0:21:c9:a4:29:68:e9:
         53:97:eb:e6:d1:99:5d:7c:e3:7c:9c:89:dc:85:b5:fa:a0:b5:
         2e:a3:4c:1e:ab:3d:f2:ce:8b:8d:e2:cc:90:f9:99:95:34:70:
         a5:31:e5:83:4a:0b:59:30:51:2f:d4:5e:3b:d5:fb:e2:71:2f:
         9f:5d:da:8f:b9:f6:b0:cd:c1:f2:9e:bd:da:fd:d2:2d:c4:b9:
         0a:14:cb:8c:56:00:f6:9b:ea:9a:90:9e:9b:7d:56:af:cc:33:
         12:13:71:c4:7c:e1:7c:4a:92:b8:99:ff:1f:a6:bb:b1:7e:cd:
         c4:45:35:d8:fc:3f:c7:e4:a2:af:8b:8d:da:96:47:e0:0d:c1:
         b0:f8:88:ba:dc:f0:a7:9f:dc:3c:45:fc:61:64:f6:6d:d1:b0:
         1d:de:46:05:fd:b4:95:26:9a:0e:3f:f8:7a:22:da:83:16:bf:
         08:36:27:ea:5a:ea:62:93:63:08:c1:e0:33:a9:73:59:3f:37:
         49:da:39:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6RzVnaiO4kmFAH6GBbMd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGYwMDhjMWNjY2E2MmU2ZmMzNTZkNjM0MjA1NWE2Mjdk
YzZjZjIwHhcNMjQwOTE2MTAwMDU2WhcNMjQwOTE3MTAwMDU2WjAzMTEwLwYDVQQD
Eyg3MGNmZGE5ODI0ZmRhZWRjMGRhZTgyYmQ3N2Q4MmViMGNmOGQ1NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl7MNOdhhlpVvAfBF8Nqu35b+59Z
+UeBoIgSJNlEPP6UE7yb2q0sSFvHmdzYTs+1vb92JvTMKgy+FzCE3t+wpHzMqiTY
l/Y2aF8GjDDqy7E3xN29WmXTrxePxbiZQ7dl/9lEm1pKPOTjY7/DnbXRulEJWLnL
mVePgbpneHnqM8khvMXuoQbZ4G5jEyVp5d2BlQ3dWnnVnVNkhiiLbhKutf1KWSaF
0fTNjoR7vAcv3A7TrVmEqGPwXspMYg1EffTvGonafp7fznuw5cd5JvabY6FMPMp7
j7Z+r/KtYi0c42y4NOr6DM829yKa+M5abKMxu4fq+17PKHlzz1ZbEysIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDP2pgk/a7cDa6CvXfYLrDPjVddMB8GA1UdIwQY
MBaAFMIPAIwczKYub8NW1jQgVaYn3GzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUt
N2Q3ZmNlNWRiMDVjLzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUtN2Q3ZmNlNWRiMDVj
LzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5N058Fe
U9jcGH+K7iTgck8gLVH0hCjutz6BayOsKZVCdez02ahvo1dU0tyN6pbETlRok3br
BAmldjms07LABxugIcmkKWjpU5fr5tGZXXzjfJyJ3IW1+qC1LqNMHqs98s6LjeLM
kPmZlTRwpTHlg0oLWTBRL9ReO9X74nEvn13aj7n2sM3B8p692v3SLcS5ChTLjFYA
9pvqmpCem31Wr8wzEhNxxHzhfEqSuJn/H6a7sX7NxEU12Pw/x+Sir4uN2pZH4A3B
sPiIutzwp5/cPEX8YWT2bdGwHd5GBf20lSaaDj/4eiLagxa/CDYn6lrqYpNjCMHg
M6lzWT83Sdo5hA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:32:55 2024 by rpki-client on console-fra.rpki-client.org