Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
File:                     WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json)
Hash identifier:          JMlYcW9dvRe1d7qXYc+wNc8Cs1zpuGE6A6LWqufNXrk=
Subject key identifier:   40:80:48:9A:7F:45:EB:3B:9F:CB:5D:49:F1:BE:1B:D8:34:1E:E0:EB
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Certificate issuer:       /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial:       018F89A4EF11237B3B143AE403B8A4EB33A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
Manifest number:          0698
Signing time:             Sat 18 May 2024 03:00:38 +0000
Manifest this update:     Sat 18 May 2024 03:00:38 +0000
Manifest next update:     Sun 19 May 2024 03:00:38 +0000
Files and hashes:         1: IKDhPPGH_RXZSqbQio4TCd_lsDU.roa (hash: fjFMaCJFcNVij0uP7qkH1aqBHpsHSy3flJ8eMXKYU34=)
                          2: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: tTpey9OtVT0eolhsZPvLhQVNPaw3/iAjl1vhTpcDfsg=)
                          3: XSldRWkSGuC6YB0qaeT_nhOpDig.roa (hash: LGr9475jNOzPSK9vTbm1WBLiqvYR+5T/t5ixpKSkdo8=)
                          4: gDEvOg6OcYYWFD0bqTTnsX8UN8g.roa (hash: 3kha1myd2ZeAwF5PZ/6/eeOkNP7jQs4Zq3IwPTRi+Hg=)
                          5: vcoMlqcrC1B6zFmITckl3MznyZ0.roa (hash: dC0I/7irx7DbzR1RxwjIteMddmtQXJwEeI+W5SYpEF0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:a4:ef:11:23:7b:3b:14:3a:e4:03:b8:a4:eb:33:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
        Validity
            Not Before: May 18 03:00:38 2024 GMT
            Not After : May 19 03:00:38 2024 GMT
        Subject: CN=4080489a7f45eb3b9fcb5d49f1be1bd8341ee0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:43:d8:e5:0f:5b:2f:46:13:ea:04:57:8a:
                    6f:47:9d:85:08:a0:fd:6c:17:d9:c1:dc:2e:fc:44:
                    24:c0:62:a8:92:ab:8e:55:b5:89:b4:56:67:6b:35:
                    53:59:e2:57:de:20:b2:7a:07:9c:09:17:d1:ec:c6:
                    fb:14:05:76:fc:b2:a5:aa:c6:b4:05:45:0f:bb:65:
                    96:b1:83:b9:2c:c8:15:e2:0e:4e:ac:af:b2:19:22:
                    4d:a2:53:ff:d2:7f:75:ad:7d:53:b3:68:ea:49:9e:
                    2a:b3:1b:05:b5:c0:6d:fd:11:64:60:2f:3e:c5:d5:
                    ea:7d:b6:01:23:9f:42:ba:c6:c3:15:b8:42:85:7f:
                    b7:1f:7d:7a:1d:2e:3b:7e:f8:e4:15:8b:72:ca:bf:
                    de:af:75:3c:a1:7f:9e:0e:d6:98:54:5e:7b:20:4d:
                    d5:7e:5d:80:27:37:73:18:0f:b0:af:61:1d:98:fd:
                    ed:82:0e:0e:99:72:25:d5:85:a8:a9:b7:e1:b6:c2:
                    e3:ca:53:59:c8:3c:a9:64:07:e2:9c:ae:e7:02:fc:
                    c3:51:4f:52:33:41:74:e7:e7:1a:7c:cc:41:dc:32:
                    d6:24:e6:eb:33:a0:19:65:49:0f:aa:26:5d:4f:a7:
                    6d:68:90:96:5a:6e:c1:68:f1:51:c5:2d:bb:e0:9e:
                    72:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:80:48:9A:7F:45:EB:3B:9F:CB:5D:49:F1:BE:1B:D8:34:1E:E0:EB
            X509v3 Authority Key Identifier:
                keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:d5:73:94:f6:57:b3:bc:93:42:d6:3b:f7:06:12:ad:24:
         57:d3:1b:b7:25:bb:bc:4e:4d:73:6e:3a:77:5a:7a:fd:9d:01:
         9c:d4:18:6f:5a:8b:ae:3d:c0:9c:b3:03:bf:25:2d:c0:75:d0:
         53:80:c8:8f:5a:cd:a4:b5:06:79:ae:e7:6a:9d:82:48:c7:33:
         b6:bf:61:88:37:35:34:7e:56:71:6c:0b:63:55:13:0c:3e:28:
         ce:96:0e:96:e8:0c:c1:44:3e:0e:ca:d0:f5:7f:09:df:f8:6a:
         bf:58:7f:db:2e:1b:6c:f6:f4:d0:47:0c:b3:c3:16:b7:19:c3:
         1b:04:60:2d:81:a1:ba:8a:d8:8a:b3:11:9e:da:34:6c:2a:65:
         ed:69:6e:81:f6:5d:fd:91:1f:e0:59:7b:62:97:bd:67:1c:eb:
         26:fb:b2:2d:c9:42:eb:22:40:18:47:ab:7e:f9:61:a9:95:fa:
         0a:aa:ab:d5:03:d6:e7:26:14:f4:db:ab:c8:d0:1b:7b:47:4b:
         bd:11:3b:bb:68:e9:2f:02:dc:94:01:9a:d4:4a:b3:f1:a9:ef:
         af:2b:e3:93:20:ea:98:68:54:91:e3:79:74:15:ed:47:c7:22:
         94:f4:21:a4:2a:7e:83:34:0b:20:15:44:1d:f7:b7:83:f6:e6:
         c6:d2:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:45:11 2024 by rpki-client on console-fra.rpki-client.org