Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          NzTrt7Y6UintonmNGo55fmjMc39TyrqdVHLpWFj8XxQ=
Subject key identifier:   22:6D:48:A3:81:E3:83:A5:A4:A5:92:76:2B:A7:00:07:84:D2:CC:A0
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       018F8748561C1CE94ACE9FDEBD08E6852E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          0859
Signing time:             Fri 17 May 2024 16:00:15 +0000
Manifest this update:     Fri 17 May 2024 16:00:15 +0000
Manifest next update:     Sat 18 May 2024 16:00:15 +0000
Files and hashes:         1: 52qgMkRDkWj_X_FpVo4-AocZde4.roa (hash: iwosSNMasMRGWOBJu+XMfaSeSEYGydlmdYE7l3EP3Hs=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: qqbKUVyeW6jUuzmZA/hXAnxKvOGctMSKwJ6f1NViBEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:56:1c:1c:e9:4a:ce:9f:de:bd:08:e6:85:2e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: May 17 16:00:15 2024 GMT
            Not After : May 18 16:00:15 2024 GMT
        Subject: CN=226d48a381e383a5a4a592762ba7000784d2cca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:81:4a:37:a4:b8:ea:ee:84:1b:58:3d:d4:
                    c0:8e:53:5b:92:96:54:68:2e:91:41:6e:60:dc:38:
                    50:a0:7f:bc:35:ca:73:ff:e9:e9:0b:8b:89:3d:0f:
                    8e:6c:17:23:6a:09:89:97:fc:b1:46:46:dd:5d:2a:
                    d8:89:bf:36:6f:85:18:18:34:28:94:b1:b4:d5:09:
                    ff:a1:8f:1a:01:4a:07:54:ac:72:fd:ab:a1:30:80:
                    18:03:01:2e:fd:dd:cf:11:0f:cd:d6:77:72:e5:09:
                    cd:cb:01:f4:74:3b:b5:2a:33:55:50:be:9e:96:eb:
                    da:31:35:c9:be:06:ff:71:c7:a2:7b:2f:5b:a9:2e:
                    3d:41:da:62:ee:b8:31:7a:5a:0f:15:e9:5a:3a:93:
                    34:83:7c:3a:37:d8:23:ff:e8:9f:6f:c6:c6:a4:5a:
                    3f:4c:55:af:9b:b1:bb:2f:fc:fa:6b:97:c8:b2:e8:
                    6d:b0:71:1a:57:24:97:45:93:33:9e:ef:5c:0e:88:
                    b2:8f:93:95:6a:c6:71:4f:b5:bd:d8:10:b1:a4:b3:
                    8d:73:16:17:67:72:1c:74:3c:b5:67:a7:42:8b:aa:
                    63:37:c0:55:b7:e9:ae:a9:8b:f7:20:a2:14:bf:64:
                    3f:ac:a1:ad:95:9b:ec:cd:4f:35:d0:16:87:a4:df:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:48:A3:81:E3:83:A5:A4:A5:92:76:2B:A7:00:07:84:D2:CC:A0
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:51:ce:9c:ef:04:0e:82:f8:0a:59:b1:ab:9f:7b:7c:2f:72:
         81:2f:ae:cf:2b:44:d7:26:fb:3a:b4:93:40:73:9b:b0:a6:68:
         53:99:a9:ab:e4:a6:91:90:db:d6:6e:26:4e:70:7b:26:c1:22:
         35:85:a3:53:8d:6f:da:0b:42:8f:d8:85:26:98:d0:61:5b:60:
         65:eb:a9:7a:d7:36:8a:f4:d4:d5:d8:65:5a:5b:42:c5:31:7a:
         35:06:71:02:ba:8e:29:ec:a8:7b:64:a2:a5:4f:74:51:73:80:
         43:69:f9:b1:5d:32:4b:96:3c:4d:09:74:85:7f:59:ee:8d:6e:
         7d:a0:0a:0f:7f:6f:f6:13:17:d0:82:a2:c2:7e:f9:42:c5:fd:
         16:fb:3d:e5:c6:1d:a2:8c:68:fa:08:cf:7a:4e:4b:07:a7:33:
         85:f2:3f:8f:89:ed:3c:51:b3:1c:d2:95:36:f4:73:94:99:48:
         75:f0:47:cd:68:b6:dd:91:85:5e:91:1f:e7:85:c6:59:75:cb:
         f4:9a:8a:62:b5:36:d4:f1:82:dc:8f:f7:af:f3:d1:55:55:f2:
         a3:0d:26:c8:82:0b:f0:5e:69:f0:5f:bc:7f:3d:68:9e:e6:f9:
         e3:6c:a2:5e:e2:99:b6:a5:0b:a6:05:ef:0f:93:b1:98:a1:0f:
         55:41:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:54:02 2024 by rpki-client on console-ams.rpki-client.org