Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
File:                     Wki138AUKmjDC9qsVQYD6eRdEIo.mft (raw, json)
Hash identifier:          OVF2cAO454J7Z93YhtMIeuc8xO5xg0J5gsbHp2mIjVA=
Subject key identifier:   64:A2:B3:37:EF:21:59:CE:4B:DF:53:5E:C7:91:2B:6C:71:C1:1B:F7
Authority key identifier: 5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
Certificate issuer:       /CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Certificate serial:       019072E4274706F1AE228129867982D9A1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
Manifest number:          0962
Signing time:             Tue 02 Jul 2024 10:01:13 +0000
Manifest this update:     Tue 02 Jul 2024 10:01:13 +0000
Manifest next update:     Wed 03 Jul 2024 10:01:13 +0000
Files and hashes:         1: O6dVM41jwEqSPKRr_0SQxKFdewk.roa (hash: K3Nkn6e169cXrCSQbjs8m8AnUUsEejBqhQ4xDYUqaGI=)
                          2: Wki138AUKmjDC9qsVQYD6eRdEIo.crl (hash: dHRVlt6LrU3dCDQpm67iMK5cv+6k7wytN/FBZgZ1bvg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e4:27:47:06:f1:ae:22:81:29:86:79:82:d9:a1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
        Validity
            Not Before: Jul  2 10:01:13 2024 GMT
            Not After : Jul  3 10:01:13 2024 GMT
        Subject: CN=64a2b337ef2159ce4bdf535ec7912b6c71c11bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:91:65:ab:3b:a9:0d:85:56:32:32:a9:97:
                    4a:0d:c5:0a:39:4d:64:24:07:89:c1:8f:5c:f9:4e:
                    b1:e7:58:44:78:1f:20:ba:3b:3b:14:50:56:ce:d9:
                    2d:bf:ad:1d:f6:ed:35:79:1e:09:e2:95:3b:2b:30:
                    fd:37:00:c3:6b:dd:c5:9c:8f:64:0b:99:27:c4:c1:
                    91:0d:0d:ac:3c:97:55:ea:55:93:de:66:ce:ad:7e:
                    14:2c:69:91:4c:28:2f:d1:d0:68:54:73:9f:8b:c6:
                    c5:da:4b:64:f7:64:4e:f6:88:26:3e:c9:8b:39:4a:
                    e6:b7:38:f8:f1:55:2c:c0:c0:70:45:a2:55:d5:35:
                    3d:0c:9a:40:3f:84:28:79:09:16:c9:ed:6f:94:90:
                    85:27:af:57:ea:35:13:6c:b1:70:2c:6d:f4:cf:4f:
                    97:3a:1a:9e:d2:d0:df:5d:30:91:46:da:2c:11:cf:
                    b4:f2:00:2f:4f:f1:0b:8e:18:64:77:7d:c1:4b:ed:
                    ee:d7:26:19:7e:73:4f:d9:8a:c9:3f:47:68:06:f6:
                    7a:f8:86:cf:45:b1:a6:ef:ef:c0:d7:e1:ee:f9:d3:
                    f0:8b:27:34:0e:94:bd:7e:69:5e:4f:96:e7:a4:64:
                    d3:20:b2:ba:52:27:70:f7:ff:da:88:4a:c7:86:d6:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:B3:37:EF:21:59:CE:4B:DF:53:5E:C7:91:2B:6C:71:C1:1B:F7
            X509v3 Authority Key Identifier:
                keyid:5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:4e:43:a3:03:2a:a1:c4:77:25:7e:53:4d:ef:2c:05:8b:
         16:84:30:60:53:0a:ae:d7:a2:68:f8:46:f3:c5:d0:ff:1f:6d:
         69:29:7a:c9:9b:64:c9:34:a7:ad:a5:c6:b7:ae:4b:fe:ad:a7:
         fb:e3:69:c4:6d:de:9f:13:f9:cd:f0:4d:5d:5f:2e:c6:bb:85:
         9a:48:bb:f8:20:40:36:14:66:dd:2c:71:a3:b6:2f:cd:a9:6d:
         92:1c:6a:a1:d5:c3:67:57:32:25:ee:38:26:32:b3:bc:87:1f:
         88:2d:0e:5e:ce:0f:51:f5:3e:f1:1a:d8:f5:de:c7:6a:8b:84:
         bf:7d:05:ff:17:fb:7c:a3:1e:41:12:5a:0a:ef:35:22:6e:74:
         bf:ae:e9:fe:4a:5f:8a:52:06:ca:24:a6:9c:6b:e9:3f:be:0f:
         b8:3a:57:47:94:61:62:da:a0:c9:52:20:95:d8:d0:b6:cf:a2:
         f4:a6:93:30:cd:d4:45:6d:87:f7:63:53:21:42:70:00:72:6e:
         fe:c8:d5:ad:44:e1:f4:8d:64:22:8c:35:71:ac:35:86:c7:fa:
         28:ee:4a:94:72:67:ae:22:1c:49:2e:a9:91:27:37:39:45:c4:
         48:43:ea:aa:91:38:24:03:64:cf:58:b7:92:e5:d6:52:c9:d9:
         b3:30:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:30:57 2024 by rpki-client on console-ams.rpki-client.org