Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
File:                     wHWxQ7LHigOdslu47hj-klT8kPM.mft (raw, json)
Hash identifier:          wLNiPHyRaDODbnDvdr9BMIaPWpu2H5p2t+Nylf0se7U=
Subject key identifier:   42:19:60:BB:8A:F9:36:DB:FE:EA:0D:09:84:8A:3C:40:32:11:54:85
Authority key identifier: C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3
Certificate issuer:       /CN=c075b143b2c78a039db25bb8ee18fe9254fc90f3
Certificate serial:       018F89385FCEF61C8DB71F7EB1186CD4D0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
Manifest number:          08A3
Signing time:             Sat 18 May 2024 01:02:04 +0000
Manifest this update:     Sat 18 May 2024 01:02:04 +0000
Manifest next update:     Sun 19 May 2024 01:02:04 +0000
Files and hashes:         1: wHWxQ7LHigOdslu47hj-klT8kPM.crl (hash: 2J4S6PIKSBAE3TzlqztS3/GAg5v/ih6Fx7u4N7vSS+o=)
                          2: wPgg6cqy6rf9BO8zaD6ucdD8Be0.roa (hash: RdjE7LrYg26BEsRadevOuBVgb+toppFi5F+BXDxpKHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 23:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:5f:ce:f6:1c:8d:b7:1f:7e:b1:18:6c:d4:d0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c075b143b2c78a039db25bb8ee18fe9254fc90f3
        Validity
            Not Before: May 18 01:02:04 2024 GMT
            Not After : May 19 01:02:04 2024 GMT
        Subject: CN=421960bb8af936dbfeea0d09848a3c4032115485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:e4:df:a2:a5:2b:ac:5f:e6:0b:38:26:d6:
                    79:74:bd:6f:51:37:99:e8:6a:98:54:d3:f0:cf:0b:
                    d5:cf:9e:8b:67:47:e9:45:f2:85:f9:1c:81:b4:ad:
                    af:12:57:00:eb:d3:7b:ea:f5:46:2a:4b:06:70:c8:
                    98:f5:86:7e:7e:98:35:b0:91:4e:ee:ef:a4:d3:f6:
                    b7:c2:f3:d5:89:07:92:18:5c:cb:43:b0:f7:9c:5e:
                    bd:74:33:44:5c:9c:99:ec:ce:0f:ec:a6:c6:ad:46:
                    77:d5:1b:fd:fd:db:32:e2:a7:b7:5f:59:87:83:c5:
                    d1:2b:8f:ec:9c:91:2c:64:a6:d1:76:18:8b:6a:c3:
                    72:6e:c8:6c:ba:83:6c:71:e0:5c:c3:bf:64:70:58:
                    54:2f:2b:31:1e:92:2e:ac:c8:3c:63:4a:7e:5e:a1:
                    2a:d7:e8:94:96:27:77:f3:8b:27:a0:04:e1:39:42:
                    8c:1e:44:86:e6:2b:7d:c6:0c:92:45:4b:e1:4a:ce:
                    9f:3f:2f:b1:ac:d4:75:78:bd:1d:e7:4c:13:d4:4a:
                    06:af:3e:e7:eb:a6:8a:4c:0f:28:68:4b:3c:a9:29:
                    c7:98:f4:15:6b:24:32:0b:a8:83:e3:37:b7:2e:bb:
                    5a:d2:86:d6:9a:08:f2:6e:d8:ca:23:d1:03:dc:d5:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:19:60:BB:8A:F9:36:DB:FE:EA:0D:09:84:8A:3C:40:32:11:54:85
            X509v3 Authority Key Identifier:
                keyid:C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:c1:68:8f:81:fb:6a:66:2a:c1:80:7b:db:c7:59:b9:fc:
         8b:2b:ee:1e:07:9e:d2:55:29:7b:6c:40:1e:7f:89:3b:f6:17:
         cb:a6:c4:29:04:11:e7:dd:70:45:08:89:8a:b1:9b:12:93:73:
         ea:6d:3b:9e:9e:f5:77:d2:b0:39:c6:a3:5e:7e:f9:26:ce:68:
         89:aa:b2:66:52:81:29:bf:f3:9b:89:1a:4f:0b:ee:86:3a:7a:
         94:09:6d:0e:c9:38:50:ea:37:4b:dc:26:e0:eb:a9:c6:0c:f9:
         16:fa:98:27:00:ca:f7:32:34:fa:2c:0f:2d:fc:dc:a9:28:99:
         be:60:78:4e:16:9e:04:7f:d8:ee:c8:f5:d6:e5:52:7f:5c:e4:
         e3:84:20:5c:5d:55:a5:3c:9f:dc:6f:c0:ce:ae:76:84:66:5c:
         75:2d:56:48:c1:e6:94:26:56:4e:47:38:02:cd:a8:b0:14:a4:
         60:81:46:e9:05:28:d8:7b:85:13:23:ae:4b:75:ba:ad:de:dd:
         f4:46:d1:92:fc:f8:bd:71:9d:c8:b9:dd:6a:6f:bf:c0:e5:10:
         c2:24:0b:95:ab:df:38:85:92:31:b4:a4:60:00:ed:c2:9f:59:
         a0:ae:c7:69:4d:2e:fb:95:66:b4:e6:7a:bc:6f:63:12:73:b8:
         92:68:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:55:10 2024 by rpki-client on console-fra.rpki-client.org