Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          E9BXvV4XW5V9HFt3rVSMb1MVntd8vjP4WYkvrzoTcOw=
Subject key identifier:   5E:BA:99:55:CB:8B:1E:17:C2:1E:EA:C1:35:C2:C2:7A:A4:18:F2:B3
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       018FA2F7A5CE3A4E9B1304E9DC16EEC41B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          1188
Signing time:             Thu 23 May 2024 01:01:29 +0000
Manifest this update:     Thu 23 May 2024 01:01:29 +0000
Manifest next update:     Fri 24 May 2024 01:01:29 +0000
Files and hashes:         1: BDV5h-uf036rT8MfxntggzJDzk8.roa (hash: AsJGU1Ra6YyFB2JUcIMbGcIplRsSDPkmgO4Z5bENLHY=)
                          2: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: IMtzY+6me0R7LvaLJuw16wDwBGWBmdrS0cN7Fjh2Lk0=)
                          3: XwtTzgmbaOEUpqfGYf24GnyAEj0.roa (hash: p/9fWNiDnigkJrBOhUuTQkdrSzcw6vDImyW1B2N5V6E=)
                          4: YIHHz30ItkklVM8LB36TIFYDY_g.roa (hash: sya4R2cJ2GYcBVKd3/v69J/jKr2a1W3LQasvtjygfHI=)
                          5: Zn9ZH3VhlpDzwehpVSjoKX12jqs.roa (hash: qQZrbFJ2GH/O4uTXOU3tNNpdJ2brKmI6Aj36wzUGVrU=)
                          6: bZWRIOHLScv4G_o29PUjg9ElAJU.roa (hash: /3adZNaAEmI6/Dn1P0IxzbxypSyk06ylEQ7X7CVs0ng=)
                          7: xFHDl2EFXLlhwJW765m3wGHugoc.roa (hash: XKiKtBjnxIJjDalqTIJR/kKEV1HUg360dUwEk9ImX4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 01:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:f7:a5:ce:3a:4e:9b:13:04:e9:dc:16:ee:c4:1b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: May 23 01:01:29 2024 GMT
            Not After : May 24 01:01:29 2024 GMT
        Subject: CN=5eba9955cb8b1e17c21eeac135c2c27aa418f2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:70:b1:04:2c:19:65:34:16:c0:34:eb:80:
                    9e:7e:bf:6b:82:a3:cc:aa:10:64:69:1a:51:07:8d:
                    6a:b4:fd:2e:2f:e4:e9:e5:7c:e0:cc:88:03:57:ac:
                    70:4a:7e:64:4f:22:c4:8a:7d:e6:ee:04:7c:9e:08:
                    7d:fe:af:2a:1a:42:1b:85:90:18:d7:cd:0f:41:68:
                    ba:af:ad:fa:63:23:9f:98:4d:30:df:7c:43:63:a7:
                    90:51:ab:80:19:c2:5e:8c:ac:89:ac:b3:8a:89:ad:
                    b3:27:f3:52:6f:fd:09:48:bd:57:da:d4:89:c2:35:
                    01:db:c4:c2:cd:6f:66:cb:36:13:b4:20:cd:01:e4:
                    be:eb:5c:6f:f9:35:97:3f:24:fb:7b:b9:52:d5:f7:
                    e4:23:a8:4c:a3:06:c7:73:f0:46:d4:3c:53:e6:70:
                    e4:82:84:57:37:d8:b0:c7:8e:e8:83:4e:14:d8:d2:
                    2f:f7:f8:e9:69:36:28:fe:cd:92:89:c9:4b:f2:94:
                    84:84:36:4c:13:91:c1:60:cd:f7:71:46:89:a2:01:
                    66:0c:2b:9f:0c:de:84:7b:5a:63:c9:73:b9:cb:b0:
                    21:e0:91:9e:8a:fe:bf:55:1a:08:c8:46:ee:4e:04:
                    b0:fb:4b:f9:cf:91:6e:0b:c3:a9:b3:3b:ce:ed:87:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BA:99:55:CB:8B:1E:17:C2:1E:EA:C1:35:C2:C2:7A:A4:18:F2:B3
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:48:a2:f0:9b:b0:60:aa:c4:27:35:a6:ae:1c:b9:c0:c6:
         1d:c6:75:98:b0:ad:06:ed:3f:86:36:87:46:28:b3:9f:ac:44:
         15:c7:c9:3f:f5:b9:0f:e7:8f:72:71:1d:3d:1c:85:18:f5:4b:
         09:c5:fa:88:06:20:1b:64:fd:a9:6d:58:24:38:00:40:06:31:
         db:f9:ae:1b:c8:c1:c1:e3:4d:fa:db:a3:7b:1b:87:9e:b4:78:
         82:57:d6:28:cc:9e:1f:5a:41:1a:32:f0:48:dd:36:6b:5b:65:
         d3:e2:b3:5b:0f:36:cf:e4:dd:a9:18:61:7a:5c:49:60:93:e1:
         93:da:57:37:7e:19:03:4e:a6:b6:f4:a7:d5:45:3d:d2:05:f9:
         e7:ec:59:d2:25:00:d1:8f:24:9f:c7:55:84:9c:f3:1f:c6:fa:
         3f:2c:a0:1b:d0:af:11:39:81:6f:8d:7d:52:1a:4d:d8:ba:f0:
         14:52:81:17:01:90:c4:cb:7a:e2:19:6b:d1:dc:f3:05:e1:d2:
         83:c0:ee:77:35:d7:da:06:d2:14:bc:2f:1e:8f:30:8f:3a:b8:
         a9:0b:a9:fc:2d:c0:03:7f:6d:93:96:6f:32:76:56:e4:f0:97:
         43:51:ec:4c:0f:69:08:9a:0c:5a:41:0f:62:ff:98:36:e0:11:
         11:de:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 09:58:24 2024 by rpki-client on console-fra.rpki-client.org