Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.mft
File:                     wbye_y2_1UQlrm1wm4TkjB8F_D4.mft (raw, json)
Hash identifier:          gRXtgLjq9om5gVUiXeOohHy0KLOrmaGGcC8rPJ1rxz8=
Subject key identifier:   76:4E:73:49:B0:DA:A7:83:DB:07:50:23:1F:CD:04:AC:F4:1C:32:75
Authority key identifier: C1:BC:9E:FF:2D:BF:D5:44:25:AE:6D:70:9B:84:E4:8C:1F:05:FC:3E
Certificate issuer:       /CN=c1bc9eff2dbfd54425ae6d709b84e48c1f05fc3e
Certificate serial:       018F874A27847A3F98C3C9A4E6774A5A7F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbye_y2_1UQlrm1wm4TkjB8F_D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.mft
Manifest number:          0A28
Signing time:             Fri 17 May 2024 16:02:14 +0000
Manifest this update:     Fri 17 May 2024 16:02:14 +0000
Manifest next update:     Sat 18 May 2024 16:02:14 +0000
Files and hashes:         1: QH873RJVvKAWXwllCCJIDVOzgFc.roa (hash: /Ft7kWa5G4as6guiuZOnOC2rXcP3azK4nNwJMX400YQ=)
                          2: wbye_y2_1UQlrm1wm4TkjB8F_D4.crl (hash: BgKIqi3FNcq+QWS/X7m9yPlQyBmX7N64X/K8NohMszk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbye_y2_1UQlrm1wm4TkjB8F_D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:27:84:7a:3f:98:c3:c9:a4:e6:77:4a:5a:7f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bc9eff2dbfd54425ae6d709b84e48c1f05fc3e
        Validity
            Not Before: May 17 16:02:14 2024 GMT
            Not After : May 18 16:02:14 2024 GMT
        Subject: CN=764e7349b0daa783db0750231fcd04acf41c3275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:63:ac:62:41:78:72:65:af:f1:24:f7:20:
                    69:e5:c0:ce:38:78:23:0e:d9:8a:3a:c2:2c:ce:e7:
                    03:ca:9c:87:b8:c3:c5:42:17:dc:89:de:cc:40:65:
                    19:fa:92:72:ef:4f:d4:b5:67:4b:67:67:9e:75:cd:
                    f2:58:8a:6b:4d:75:10:6c:8e:37:8c:a2:63:ff:94:
                    ff:e3:e0:82:1e:44:7a:af:4a:7c:5b:0b:53:b3:93:
                    c3:c0:68:d0:48:17:d7:34:d0:b3:20:38:57:34:d8:
                    8e:e6:56:64:23:1c:a9:ca:a0:b0:c7:0a:f3:40:08:
                    4d:b6:0d:b8:96:30:75:ba:e3:e6:4c:2d:f4:2b:19:
                    41:0c:4e:56:da:27:46:20:a5:7c:31:0e:9f:c5:d9:
                    71:a9:30:79:5d:7e:fa:ce:0c:d7:6a:02:85:07:d9:
                    52:36:a7:69:b2:42:d8:16:5f:9c:28:b5:3a:a1:6d:
                    b4:86:66:ca:e7:90:ce:d4:60:31:60:57:af:d0:eb:
                    9d:c3:3f:f4:0e:82:7f:e0:96:0b:6c:97:0d:86:3a:
                    00:e0:e7:d7:f4:25:47:70:02:f5:94:cb:07:e7:8b:
                    d5:f4:7b:a0:30:3a:15:60:ca:a3:af:8a:43:92:41:
                    af:46:87:cf:1c:a8:7c:11:f6:b0:d7:e0:8a:7b:6c:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4E:73:49:B0:DA:A7:83:DB:07:50:23:1F:CD:04:AC:F4:1C:32:75
            X509v3 Authority Key Identifier:
                keyid:C1:BC:9E:FF:2D:BF:D5:44:25:AE:6D:70:9B:84:E4:8C:1F:05:FC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbye_y2_1UQlrm1wm4TkjB8F_D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:50:11:a4:47:a1:f2:cd:b6:6e:36:5e:78:3a:4c:4e:f5:03:
         7b:8a:ba:9c:45:df:dc:bb:a5:93:df:46:cb:4b:a4:60:c1:8b:
         38:e9:9a:67:5c:61:be:b6:14:a5:66:7e:8c:20:df:5c:17:c4:
         fc:61:22:e2:c3:c6:4c:1a:1a:60:2d:42:c5:72:59:25:d2:6e:
         1b:20:e3:17:95:c2:5e:27:82:e4:99:5b:f6:89:a5:7f:b5:2d:
         54:aa:20:5f:34:ff:9a:b5:33:a5:62:d9:27:a3:35:5b:b0:ff:
         3e:95:f6:30:09:e7:90:72:8e:cd:bf:0d:1e:21:5e:ae:f3:53:
         c9:db:f2:93:5d:4c:b2:c9:a1:c3:b1:92:ce:05:4d:f7:7c:cd:
         1d:be:36:99:85:87:3c:c2:73:10:78:4d:d7:2c:e3:ac:5f:61:
         a2:ab:9a:37:d6:f4:72:39:7b:d7:0a:c1:86:46:e0:d0:0a:1f:
         16:f3:ac:5a:6e:d7:0d:03:87:72:a4:81:e7:00:8f:12:30:56:
         2c:c1:a7:85:bf:f6:cb:8a:75:45:94:93:2b:1b:18:a8:a2:ca:
         17:86:44:58:51:36:d8:90:dd:f1:a1:bb:10:bf:aa:4d:ed:bc:
         75:7f:ad:a1:df:7e:41:3a:d3:07:cc:27:c7:8e:aa:67:e2:f9:
         11:a2:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:36 2024 by rpki-client on console-fra.rpki-client.org