Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          FVxtG1/6OgpSdoQQ0SRoa8rBivnkj3QW8IYIuI0dHjg=
Subject key identifier:   41:1B:2B:07:77:6E:18:B8:09:B3:C9:85:4B:89:D3:A5:84:AA:FD:74
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       019355769D0FBF4A5764392D4752D85E2945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          0561
Signing time:             Fri 22 Nov 2024 20:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:57 +0000
Files and hashes:         1: F1UC0-9Euyk7oFLSm57daOB2gfM.roa (hash: RLf8Qocntw8vjUUJ9XkXlCvWA1/7+BWi1gDSvxIqE6s=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: qydOuXEGS5dD7dRvUFR3bOgx24l90JgOCmdzmGRxH4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:9d:0f:bf:4a:57:64:39:2d:47:52:d8:5e:29:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Nov 22 20:00:57 2024 GMT
            Not After : Nov 23 20:00:57 2024 GMT
        Subject: CN=411b2b07776e18b809b3c9854b89d3a584aafd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:91:e2:ac:e9:f4:83:db:4b:9e:f1:f8:39:d4:
                    d7:1e:73:7c:70:2e:b2:45:dc:6c:0b:9d:f1:77:12:
                    2b:5a:23:2e:62:f3:11:f4:a6:91:01:4f:7e:4b:00:
                    97:f0:8a:ef:13:6a:77:02:b3:cc:84:f1:60:41:99:
                    df:41:b1:c9:ed:72:ae:43:d8:73:cf:b1:5d:67:cf:
                    11:9b:8e:84:4f:af:f9:da:ea:87:27:b8:f2:aa:a7:
                    68:2a:14:9a:b2:83:71:cb:53:9c:61:0a:02:4e:e2:
                    b4:9e:f0:8f:1e:e2:60:3f:8c:d4:d8:af:8b:46:52:
                    78:e9:eb:50:e7:18:da:14:3b:fc:e1:f2:98:06:46:
                    10:31:85:cf:61:1f:7b:c3:98:47:26:ca:84:bd:62:
                    73:09:30:b6:1e:25:f7:a5:de:57:68:24:10:e2:d4:
                    5f:c3:95:27:77:9f:b5:14:33:72:d2:42:91:64:4c:
                    00:f0:a0:e7:72:24:11:de:8b:09:c0:24:ea:5b:69:
                    ae:a5:64:09:94:cc:82:00:a2:fd:d0:f4:6b:fb:db:
                    24:9f:d8:6e:7b:66:d6:89:3e:81:cb:35:5c:0e:07:
                    0c:7f:6f:09:4b:8d:8a:4c:d9:36:08:d6:96:30:62:
                    92:90:1f:6b:8b:b6:26:7a:41:17:e8:26:75:34:ad:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:2B:07:77:6E:18:B8:09:B3:C9:85:4B:89:D3:A5:84:AA:FD:74
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:a3:cb:f5:95:fc:0f:a3:71:8c:27:5b:9d:94:2b:af:01:
         63:4b:5e:ee:0d:56:56:40:7a:a6:fe:3a:a9:3a:8d:94:46:29:
         1f:9b:93:41:9c:ba:9d:94:d8:ac:52:a0:a7:50:bf:c4:67:76:
         fb:43:c4:09:6b:69:8a:ba:61:4b:cb:7a:39:57:5f:f7:11:44:
         bf:da:f8:0e:5e:57:aa:8c:e1:89:97:1d:12:06:99:4b:6f:15:
         1d:fb:d0:2a:00:06:d9:98:9b:ca:2a:dc:92:55:a8:f7:d5:cb:
         bf:00:99:76:2c:10:b4:2c:7e:67:d4:7c:c1:71:23:1a:76:71:
         58:d8:d9:ce:56:15:35:22:bb:dd:c1:4c:60:e0:65:43:b7:6c:
         95:7f:df:1f:c8:70:5a:e9:d1:3d:3c:1d:0e:e8:7f:a5:56:b7:
         1d:cd:16:5a:a3:1f:1a:6d:a1:97:44:99:af:3a:e4:3c:40:a8:
         1e:08:8b:f6:ac:43:6f:c3:75:25:56:35:df:e7:0c:3d:46:6b:
         19:ca:e4:f7:5b:3f:3a:e9:7f:d3:46:6e:2e:d5:3b:c5:0b:cf:
         8c:be:ec:ba:94:5f:0e:36:76:69:90:02:3a:92:2f:09:87:aa:
         59:4d:ab:dd:1d:35:1b:45:10:09:ec:59:38:7b:f0:fd:2a:15:
         7b:3e:0d:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdp0Pv0pXZDktR1LYXilFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmUyMTcwYTdiY2JlYzMxMDE1NGYyYmNlOTk4MzNmZWMy
ODAxZmIwHhcNMjQxMTIyMjAwMDU3WhcNMjQxMTIzMjAwMDU3WjAzMTEwLwYDVQQD
Eyg0MTFiMmIwNzc3NmUxOGI4MDliM2M5ODU0Yjg5ZDNhNTg0YWFmZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85HirOn0g9tLnvH4OdTXHnN8cC6y
RdxsC53xdxIrWiMuYvMR9KaRAU9+SwCX8IrvE2p3ArPMhPFgQZnfQbHJ7XKuQ9hz
z7FdZ88Rm46ET6/52uqHJ7jyqqdoKhSasoNxy1OcYQoCTuK0nvCPHuJgP4zU2K+L
RlJ46etQ5xjaFDv84fKYBkYQMYXPYR97w5hHJsqEvWJzCTC2HiX3pd5XaCQQ4tRf
w5Und5+1FDNy0kKRZEwA8KDnciQR3osJwCTqW2mupWQJlMyCAKL90PRr+9skn9hu
e2bWiT6ByzVcDgcMf28JS42KTNk2CNaWMGKSkB9ri7YmekEX6CZ1NK2FYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEbKwd3bhi4CbPJhUuJ06WEqv10MB8GA1UdIwQY
MBaAFFguIXCnvL7DEBVPK86Zgz/sKAH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTct
YjJmZDliZjA5N2Y4LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTctYjJmZDliZjA5N2Y4
LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC+jy/WV
/A+jcYwnW52UK68BY0te7g1WVkB6pv46qTqNlEYpH5uTQZy6nZTYrFKgp1C/xGd2
+0PECWtpirphS8t6OVdf9xFEv9r4Dl5XqozhiZcdEgaZS28VHfvQKgAG2Zibyirc
klWo99XLvwCZdiwQtCx+Z9R8wXEjGnZxWNjZzlYVNSK73cFMYOBlQ7dslX/fH8hw
WunRPTwdDuh/pVa3Hc0WWqMfGm2hl0SZrzrkPECoHgiL9qxDb8N1JVY13+cMPUZr
Gcrk91s/Oul/00ZuLtU7xQvPjL7supRfDjZ2aZACOpIvCYeqWU2r3R01G0UQCexZ
OHvw/SoVez4Nog==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:35:28 2024 by rpki-client on console-ams.rpki-client.org