Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File:                     WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier:          cI5tZVBD7l2SWpi3Zz5Dcddm4ntp3pkQP66wf9D8vX8=
Subject key identifier:   E4:60:6F:F1:DE:5C:2C:FE:EB:69:5E:FF:4C:E4:8B:73:A4:BA:45:75
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer:       /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial:       019510C6FDB7C9EF58C2CEBC70B4FFBFDE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number:          1455
Signing time:             Sun 16 Feb 2025 22:00:31 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:31 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:31 +0000
Files and hashes:         1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=)
                          2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: iKT+05m1vEqIdbghzb+OPs9Ny56Pvgo+P2E0vVPURK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:fd:b7:c9:ef:58:c2:ce:bc:70:b4:ff:bf:de:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
        Validity
            Not Before: Feb 16 22:00:31 2025 GMT
            Not After : Feb 17 22:00:31 2025 GMT
        Subject: CN=e4606ff1de5c2cfeeb695eff4ce48b73a4ba4575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:5c:e8:bb:d2:31:83:bd:40:1c:e3:b4:2e:
                    4d:9b:ff:5d:25:ef:40:fb:db:93:78:4d:6e:63:62:
                    af:c0:2c:a6:44:e5:5b:29:cc:fa:a5:2b:24:3e:69:
                    20:95:27:a3:2f:b0:8c:3d:77:4b:48:f1:43:09:70:
                    ce:8d:6f:9b:bb:78:6e:3b:ef:34:e2:a5:15:ef:dd:
                    1c:e7:bc:de:45:a7:fb:89:9a:6a:17:c5:a2:86:a0:
                    6e:03:d2:f4:06:5b:b6:ed:7a:b7:c3:ea:d4:f9:06:
                    94:32:fe:fe:a3:9a:0d:58:5a:ce:9d:29:39:ae:72:
                    b0:e6:95:c5:83:be:a2:b7:95:53:14:a2:c8:91:24:
                    71:c1:7e:3b:33:0d:24:62:fd:eb:f2:82:35:c7:6b:
                    de:14:70:6b:7d:50:75:05:31:a2:6f:d7:ff:71:5c:
                    3b:d7:3e:2c:0a:09:e8:e3:0a:10:f9:37:28:af:17:
                    0b:8c:ee:f6:fb:dc:47:1a:b9:39:22:20:4c:f9:ff:
                    de:cc:61:77:b2:62:87:13:35:ef:42:65:cc:8f:72:
                    8d:e6:20:63:3c:ca:e2:d8:0f:5b:cd:9f:52:d8:83:
                    0a:0e:a6:27:c6:84:a6:9a:8b:f2:6b:77:24:e5:b1:
                    82:db:c6:a5:b0:87:9f:25:73:e8:6d:96:03:d4:65:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:60:6F:F1:DE:5C:2C:FE:EB:69:5E:FF:4C:E4:8B:73:A4:BA:45:75
            X509v3 Authority Key Identifier:
                keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:24:48:74:7a:12:8f:42:3b:0c:99:a4:56:95:bc:c4:3f:7f:
         9c:21:7d:2e:77:2a:e9:78:0b:d7:16:56:f0:aa:a5:c4:33:fb:
         dd:cd:8b:a5:fd:97:37:20:b3:f6:7e:0c:ec:0e:de:d4:c0:ac:
         b8:1c:c3:6a:88:2c:66:00:aa:d9:98:b6:0e:37:ef:63:63:ac:
         19:4b:53:ee:ef:07:87:2e:5d:25:25:a0:98:9a:a6:b4:5d:f9:
         a8:a0:2c:91:c9:d7:a4:70:df:b7:71:51:5e:88:66:31:e0:31:
         ca:fc:61:f6:02:ca:f6:72:0d:64:73:69:a9:ea:16:28:40:e8:
         77:e0:4b:91:0c:da:df:06:1f:6c:da:7d:05:c7:7c:b8:5e:60:
         1c:86:24:ff:82:ef:f6:58:5d:30:da:5d:ab:2e:5c:5f:a0:f5:
         4f:e5:63:c9:45:ee:64:02:c9:82:e8:79:ae:f7:2c:62:66:6f:
         0a:8a:5b:50:db:cd:11:9a:b7:d0:82:73:9f:14:df:cf:52:98:
         c3:6d:bb:c5:9e:9b:16:ce:99:bf:e1:ea:95:b5:ad:76:99:5f:
         4d:0d:f2:e7:9d:24:79:a8:39:06:dd:4e:6d:51:78:07:2a:2b:
         8a:18:fc:e6:de:ea:b3:ff:f6:6e:37:1d:d2:86:b2:30:9c:1b:
         ca:02:36:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxv23ye9Yws68cLT/v95EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh
OWY2MTAwHhcNMjUwMjE2MjIwMDMxWhcNMjUwMjE3MjIwMDMxWjAzMTEwLwYDVQQD
EyhlNDYwNmZmMWRlNWMyY2ZlZWI2OTVlZmY0Y2U0OGI3M2E0YmE0NTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOVc6LvSMYO9QBzjtC5Nm/9dJe9A
+9uTeE1uY2KvwCymROVbKcz6pSskPmkglSejL7CMPXdLSPFDCXDOjW+bu3huO+80
4qUV790c57zeRaf7iZpqF8WihqBuA9L0Blu27Xq3w+rU+QaUMv7+o5oNWFrOnSk5
rnKw5pXFg76it5VTFKLIkSRxwX47Mw0kYv3r8oI1x2veFHBrfVB1BTGib9f/cVw7
1z4sCgno4woQ+TcorxcLjO72+9xHGrk5IiBM+f/ezGF3smKHEzXvQmXMj3KN5iBj
PMri2A9bzZ9S2IMKDqYnxoSmmovya3ck5bGC28alsIefJXPobZYD1GUlgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORgb/HeXCz+62le/0zki3OkukV1MB8GA1UdIwQY
MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt
ZWYzODkxNGE4YWIwLzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw
LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSRIdHoS
j0I7DJmkVpW8xD9/nCF9Lncq6XgL1xZW8KqlxDP73c2Lpf2XNyCz9n4M7A7e1MCs
uBzDaogsZgCq2Zi2DjfvY2OsGUtT7u8Hhy5dJSWgmJqmtF35qKAskcnXpHDft3FR
XohmMeAxyvxh9gLK9nINZHNpqeoWKEDod+BLkQza3wYfbNp9Bcd8uF5gHIYk/4Lv
9lhdMNpdqy5cX6D1T+VjyUXuZALJguh5rvcsYmZvCopbUNvNEZq30IJznxTfz1KY
w227xZ6bFs6Zv+HqlbWtdplfTQ3y550keag5Bt1ObVF4Byorihj85t7qs//2bjcd
0oayMJwbygI26A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:53 2025 by rpki-client