Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
File:                     WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft (raw, json)
Hash identifier:          a4oxTOteJ322BP9fjfP9KdNJQj5cwCJ1pEWeXAoETJ0=
Subject key identifier:   4A:74:27:8F:DD:9E:39:D8:91:3E:EB:7A:9D:C2:2F:CF:2D:BF:A3:8D
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Certificate issuer:       /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial:       018FADE9239C6E3183090767F0AD386E0970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
Manifest number:          0E68
Signing time:             Sat 25 May 2024 04:01:28 +0000
Manifest this update:     Sat 25 May 2024 04:01:28 +0000
Manifest next update:     Sun 26 May 2024 04:01:28 +0000
Files and hashes:         1: 8opu-cj5eak0qkKoAb4qE1JYzbI.roa (hash: UCXBHIaA/R9oklyYrvyS3oE6nzn/xqE8Da4FrCMvrLQ=)
                          2: Iya732ujnt78FRvcKvBuy2CN6S8.roa (hash: pb6pGrbIOEz3gvBgI6gbx84VRyTa2eOl8jWc7WGQ3PI=)
                          3: WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl (hash: +xBSccjjip7RVnMX2vpHOHvb7soYTSRYZ9fC3Dy0mBs=)
                          4: p0mW0_xq2HSGhiIwJXscHUFmFbE.roa (hash: KI3yEotZNkWUWnJQ0A7GnaTcsKVZHPvtu26FJHeWomg=)
                          5: p_FrBgbJKMqk7JXenxoCK3jnAm8.roa (hash: viBHWgUbDKXGBurXfE5vJ298Ljh2+Fc2OkP/E+83FWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ad:e9:23:9c:6e:31:83:09:07:67:f0:ad:38:6e:09:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
        Validity
            Not Before: May 25 04:01:28 2024 GMT
            Not After : May 26 04:01:28 2024 GMT
        Subject: CN=4a74278fdd9e39d8913eeb7a9dc22fcf2dbfa38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:34:8f:4a:0a:a0:0c:61:51:72:b3:4c:27:
                    6e:14:40:b8:24:1c:91:c0:13:bd:81:31:45:7b:8f:
                    55:dd:15:2c:f7:51:bf:e6:f7:ce:de:ad:d4:c6:da:
                    46:a9:9f:0f:2a:78:72:53:e8:b3:14:74:1d:69:1e:
                    eb:54:b8:80:ad:bd:b7:7d:3d:4c:2a:c8:2c:49:55:
                    40:6b:46:de:b3:68:ff:0f:57:d5:fc:c0:25:97:cc:
                    cb:6e:c5:1b:73:49:26:dc:98:0d:6a:75:7b:b6:6e:
                    76:fe:30:fd:89:49:e6:ad:a3:3a:3f:d3:1b:4a:f4:
                    70:83:86:15:b9:72:ea:d7:cf:50:b9:d1:25:84:3c:
                    e3:1f:a2:d6:34:fe:46:b7:3d:7d:7f:31:13:30:9c:
                    55:a4:f8:d3:38:61:59:4f:f8:75:aa:a5:18:2b:6a:
                    6d:b2:bb:ab:b7:57:91:7a:d4:af:82:65:ca:4e:95:
                    50:72:7d:28:9c:27:8a:3a:bf:92:e0:e1:34:e6:7e:
                    97:09:e8:a0:20:f5:06:09:4a:00:1c:54:90:08:ac:
                    1c:d2:60:a3:d4:63:8a:51:31:c2:02:7f:77:4e:24:
                    e9:8c:6e:36:4c:11:3d:3f:16:5b:ad:bc:d3:4d:17:
                    36:51:b6:b2:f6:7f:9a:07:02:93:5a:5c:4c:9a:8a:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:74:27:8F:DD:9E:39:D8:91:3E:EB:7A:9D:C2:2F:CF:2D:BF:A3:8D
            X509v3 Authority Key Identifier:
                keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:18:d4:e4:61:c9:1c:13:d9:25:6d:86:8b:8a:17:2b:75:6d:
         c3:e0:c1:3e:a4:1e:de:0a:e8:d5:1d:06:58:29:7b:61:cb:99:
         5e:62:49:80:1c:24:66:5c:c0:7c:cb:81:20:f7:07:a4:59:d8:
         67:dd:91:78:c9:5a:22:51:6f:e0:9a:a7:6a:18:ea:fc:9d:4a:
         1d:84:16:a2:f8:56:0d:dd:9e:be:75:c3:f0:a9:36:e9:84:ca:
         a8:3d:ca:8c:b0:27:3e:9b:17:49:7e:8d:f9:d5:4b:d6:d9:26:
         a3:f4:c9:ba:90:9c:9b:52:fc:87:f3:8b:41:40:8a:b5:64:46:
         bf:cb:f4:05:28:c2:29:e2:95:a6:f5:f6:9d:af:0c:6e:2f:83:
         f0:f4:33:a3:57:07:6d:c6:78:8f:2a:55:8c:6d:d1:1a:1d:3b:
         d6:bf:53:16:23:7a:97:14:0f:75:59:18:11:5c:51:dd:bf:3b:
         40:be:a5:33:e9:e8:c0:7c:38:1a:21:00:a7:b1:73:ec:e9:64:
         aa:07:8b:6c:ca:ee:ec:cb:4c:b7:cb:af:6f:d3:11:cf:42:e5:
         b5:b2:ad:c7:c5:3c:98:dd:12:67:74:a8:97:f7:bc:44:29:3c:
         59:66:40:b4:25:37:35:af:31:d3:9b:32:13:cf:e6:78:fb:28:
         28:62:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:25:45 2024 by rpki-client on console-fra.rpki-client.org