Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          p6KhsMgdBPRLzDJxmGA5C4it9Z5R/ZX+jAiNPKkIyug=
Subject key identifier:   98:A1:EE:3F:5D:4D:F0:BE:5C:8C:E8:5C:07:B1:BD:99:B0:7F:4E:05
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       018F885ADF5C3A8FA946FFF05C1946235E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 21:00:07 +0000
Manifest this update:     Fri 17 May 2024 21:00:07 +0000
Manifest next update:     Sat 18 May 2024 21:00:07 +0000
Files and hashes:         1: 9N7rVK9sVeCCSaW55rXdnovM4mU.roa (hash: nahZTc9wkR4wQ1Q34NJGLh1zb7hIigcT1EckCWCRKYM=)
                          2: FXsBMHT8GMR9DxRaKPfirydKdTE.roa (hash: 6aQA+Nvc6Kcv4h7MqC/vu0C8p+/We4hvD08ZeotzaB4=)
                          3: _gwaheNkUtx9BBWenbCVyjQTTPQ.roa (hash: m8R0BbZ3qvKevX/xBTKqNmmB7NYYv6xM4saot5BRY9E=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: RPMsFcia/7csdEkKVNFiEIwFhbf4XO9Jf9pfgHo+gh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:df:5c:3a:8f:a9:46:ff:f0:5c:19:46:23:5e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: May 17 21:00:07 2024 GMT
            Not After : May 18 21:00:07 2024 GMT
        Subject: CN=98a1ee3f5d4df0be5c8ce85c07b1bd99b07f4e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:0d:9c:cb:aa:c1:3c:a5:53:ff:91:f6:5c:
                    14:21:11:82:62:0d:a6:03:ac:00:8e:89:cb:38:8f:
                    79:6c:20:d4:b4:e3:29:54:89:90:51:95:ed:19:c5:
                    2c:8f:f5:75:0c:62:9a:25:1e:36:f2:0c:cb:b4:24:
                    2f:7b:ea:eb:79:c9:6b:e0:05:a5:75:73:19:de:ec:
                    a5:d7:00:ae:b1:6f:df:16:87:22:db:e6:5b:84:6b:
                    98:e2:76:e1:9e:3a:73:f4:1c:b2:50:11:9a:68:ba:
                    30:ab:ba:b2:a7:0c:30:2e:0c:5a:ce:9c:0d:85:ad:
                    31:1e:d5:60:c1:a9:b8:d4:70:0a:2a:ab:10:84:9c:
                    d5:7a:cb:e8:12:15:ca:e0:8d:87:6b:d7:a2:9e:72:
                    b3:d3:80:95:7c:b0:44:16:f7:87:d4:6a:72:0b:dd:
                    13:75:66:7a:43:e9:bd:5e:04:50:d7:2a:34:15:cb:
                    52:59:91:17:13:52:98:3b:d1:70:44:42:48:bc:d8:
                    3d:08:79:c3:d9:b0:2a:6b:92:ff:7f:f2:46:17:e6:
                    5e:7b:7f:c3:2e:a2:1f:8d:e8:04:98:a0:a5:44:2c:
                    f6:eb:0c:25:e9:d9:c8:46:88:3d:77:5d:13:58:22:
                    55:cf:15:6a:95:75:cd:cd:9d:f3:ae:c8:1b:58:b7:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A1:EE:3F:5D:4D:F0:BE:5C:8C:E8:5C:07:B1:BD:99:B0:7F:4E:05
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:b4:0a:29:c3:99:09:b8:5e:fa:c6:b2:9d:75:fd:44:87:
         63:f2:ba:67:a6:68:e4:78:6f:92:76:fc:3e:d1:9b:d4:c8:f6:
         a8:a9:d8:1e:6a:09:2b:b9:aa:44:2c:c6:8c:5a:e4:0a:f0:aa:
         07:ab:e4:c3:ff:f0:9c:cd:5b:b7:06:4a:1c:20:16:91:d2:13:
         df:7c:34:94:4a:8e:e1:00:49:64:0c:b1:24:d4:73:3c:40:41:
         56:91:fe:90:6d:30:69:72:5a:09:7f:aa:0f:df:de:69:81:96:
         d0:84:1b:e4:38:ef:47:b9:20:56:d7:54:45:41:c5:12:a2:78:
         34:b0:96:15:cb:e2:71:45:2f:a6:33:c0:09:57:c5:09:82:58:
         90:77:05:35:1e:2f:b7:cf:87:5b:7f:5e:fe:24:ac:63:a9:a5:
         4b:27:77:62:03:82:5f:fd:05:d9:4a:e5:c7:7e:63:ef:8b:78:
         82:cc:a5:af:a2:3a:74:32:e1:66:17:b2:71:ae:74:a9:98:95:
         1d:aa:86:24:75:80:44:34:25:4d:f3:37:6e:ef:81:97:4c:0c:
         6b:b9:b7:f4:4f:a5:4f:5a:8f:d5:ea:10:fc:52:f6:c6:a4:07:
         44:f6:eb:17:8b:37:52:ee:4e:4e:ea:03:7b:fc:ab:a8:fd:73:
         1f:c0:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:43:21 2024 by rpki-client on console-fra.rpki-client.org