Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File:                     WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier:          iqWOX9ISRmdbmFio5B8ndf4aDAaS18rmQlKaQY4J+DA=
Subject key identifier:   5B:20:7E:F7:0D:B9:D8:05:CE:04:4C:49:4F:67:0C:5B:09:8D:7F:E4
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer:       /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial:       0190313BF64442698DA8A470CCB4C9FC6D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number:          010D
Signing time:             Wed 19 Jun 2024 16:02:11 +0000
Manifest this update:     Wed 19 Jun 2024 16:02:11 +0000
Manifest next update:     Thu 20 Jun 2024 16:02:11 +0000
Files and hashes:         1: MNgDj5Gl6rJbEqdHTTu9kvi6k38.roa (hash: fHJG5ppkxSSAYxzapTzzvuRJP/u/AsccBrHzbiUH36c=)
                          2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: jvrWpmxgGYPumoyQWrg7M0/PEwXBlBWgOjPgNqi+h5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:31:3b:f6:44:42:69:8d:a8:a4:70:cc:b4:c9:fc:6d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
        Validity
            Not Before: Jun 19 16:02:11 2024 GMT
            Not After : Jun 20 16:02:11 2024 GMT
        Subject: CN=5b207ef70db9d805ce044c494f670c5b098d7fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:e2:9d:e2:ff:9b:f7:4a:d5:a9:a4:d9:16:
                    b0:1e:29:99:56:dd:d3:f9:44:13:e9:d6:f7:1f:8a:
                    20:04:d5:bb:58:d2:3e:39:e8:8e:f1:35:a9:67:8f:
                    a5:41:f7:ca:36:41:99:38:6f:50:b0:17:60:5d:6f:
                    b1:f4:ac:fc:bf:19:5b:8b:10:be:63:5c:ff:f8:ae:
                    92:02:16:c1:13:a9:2f:ac:78:f3:3f:b4:7a:6c:a7:
                    f4:36:5b:95:e8:0b:d7:b9:fe:e7:a7:b5:af:23:0b:
                    97:47:49:a2:3b:ab:c5:ae:8d:26:94:06:a9:da:5a:
                    a7:a1:09:33:fe:b7:c6:db:2f:10:2c:f8:3d:d5:fb:
                    f2:41:bc:87:8e:34:0c:3a:33:19:70:51:a0:39:01:
                    1e:d0:04:ce:db:69:74:b8:9e:4a:31:6d:8a:2c:01:
                    4b:2f:84:e0:b9:1f:7a:7f:df:12:f7:43:12:8d:9f:
                    70:71:16:67:bb:0a:68:a3:77:33:a1:93:2b:43:ae:
                    f9:4b:9c:a1:d5:a9:1e:14:04:a0:9e:65:9e:c7:ea:
                    8b:e3:93:06:be:16:04:5a:90:53:ed:30:39:4b:0c:
                    89:a6:fc:92:ae:81:5f:79:c3:34:95:88:1b:e6:c6:
                    78:37:f6:84:79:52:70:4e:56:8c:31:0d:a5:41:97:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:20:7E:F7:0D:B9:D8:05:CE:04:4C:49:4F:67:0C:5B:09:8D:7F:E4
            X509v3 Authority Key Identifier:
                keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:63:d9:ec:58:d3:b9:14:90:94:49:27:8d:b2:a3:fe:42:
         b2:93:80:04:3d:79:ee:d5:54:be:e6:58:93:76:86:61:61:58:
         5d:d0:8d:29:8a:a3:42:a0:85:4c:b8:33:9d:f1:b3:6d:6e:30:
         03:da:54:7f:73:de:9d:1e:fe:ea:4e:31:a6:ea:fb:de:45:8e:
         5e:8c:e5:08:e1:af:67:56:e7:14:ed:b7:8b:89:ed:95:eb:71:
         5b:8f:d2:32:73:58:a2:58:e1:41:25:96:25:74:63:7c:02:f6:
         57:68:0e:3f:6c:17:27:0d:57:45:f0:43:41:00:40:5d:ef:9e:
         ee:fe:e6:30:67:c9:4a:07:b0:88:21:31:b7:96:4b:03:9c:a6:
         44:3a:54:b4:1a:35:c2:12:0a:40:60:48:67:14:c3:9a:85:51:
         b3:80:be:b8:d8:21:0f:38:94:06:12:cd:97:8d:5a:8a:c0:5a:
         a4:b6:7f:bf:0c:f7:88:18:91:6b:18:65:4a:ee:c8:02:9e:29:
         53:b7:87:1d:a9:a7:42:ad:61:8d:b9:d4:bc:20:65:69:b6:fb:
         6e:42:28:f3:a0:64:47:06:e8:b6:89:dd:cb:63:58:fe:08:de:
         25:dd:0e:4d:08:af:77:16:4c:c0:b1:57:ab:03:fc:54:04:ac:
         aa:0f:d8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAxO/ZEQmmNqKRwzLTJ/G0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDExMTY1MTNjMjNkODdhYWNiZjViMWJiZWUzOTk4MWM3
NjMxYzEwHhcNMjQwNjE5MTYwMjExWhcNMjQwNjIwMTYwMjExWjAzMTEwLwYDVQQD
Eyg1YjIwN2VmNzBkYjlkODA1Y2UwNDRjNDk0ZjY3MGM1YjA5OGQ3ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6PineL/m/dK1amk2RawHimZVt3T
+UQT6db3H4ogBNW7WNI+OeiO8TWpZ4+lQffKNkGZOG9QsBdgXW+x9Kz8vxlbixC+
Y1z/+K6SAhbBE6kvrHjzP7R6bKf0NluV6AvXuf7np7WvIwuXR0miO6vFro0mlAap
2lqnoQkz/rfG2y8QLPg91fvyQbyHjjQMOjMZcFGgOQEe0ATO22l0uJ5KMW2KLAFL
L4TguR96f98S90MSjZ9wcRZnuwpoo3czoZMrQ675S5yh1akeFASgnmWex+qL45MG
vhYEWpBT7TA5SwyJpvySroFfecM0lYgb5sZ4N/aEeVJwTlaMMQ2lQZdaYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsgfvcNudgFzgRMSU9nDFsJjX/kMB8GA1UdIwQY
MBaAFFrREWUTwj2Hqsv1sbvuOZgcdjHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAt
MjNhYzk3OWQ0MWFkLzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAtMjNhYzk3OWQ0MWFk
LzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwpj2exY
07kUkJRJJ42yo/5CspOABD157tVUvuZYk3aGYWFYXdCNKYqjQqCFTLgznfGzbW4w
A9pUf3PenR7+6k4xpur73kWOXozlCOGvZ1bnFO23i4ntletxW4/SMnNYoljhQSWW
JXRjfAL2V2gOP2wXJw1XRfBDQQBAXe+e7v7mMGfJSgewiCExt5ZLA5ymRDpUtBo1
whIKQGBIZxTDmoVRs4C+uNghDziUBhLNl41aisBapLZ/vwz3iBiRaxhlSu7IAp4p
U7eHHamnQq1hjbnUvCBlabb7bkIo86BkRwbotondy2NY/gjeJd0OTQivdxZMwLFX
qwP8VASsqg/YQg==
-----END CERTIFICATE-----
Generated at Wed Jun 19 18:00:17 2024 by rpki-client on console-fra.rpki-client.org