Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File:                     wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier:          HRJxb1jnwssE2zk/kAJ57QNSIYJt+XmNIOywybKpR7g=
Subject key identifier:   75:A8:36:1F:4C:73:F7:4F:F6:53:CA:53:43:22:71:A6:07:0D:18:CC
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer:       /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial:       018F96BDADED50783396FDB357271ABFB7B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number:          07DF
Signing time:             Mon 20 May 2024 16:02:44 +0000
Manifest this update:     Mon 20 May 2024 16:02:44 +0000
Manifest next update:     Tue 21 May 2024 16:02:44 +0000
Files and hashes:         1: kglE00ssZNeFFmeQlW1jZvNpQ9c.roa (hash: Hw5FbGAV3P8+kVFOpoitbUxS4NcvRff0jC6zACa35DE=)
                          2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: fK76lcbwBRUJrHMsQawIuYo42BOx8kkMycExSM7Q+hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:ad:ed:50:78:33:96:fd:b3:57:27:1a:bf:b7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
        Validity
            Not Before: May 20 16:02:44 2024 GMT
            Not After : May 21 16:02:44 2024 GMT
        Subject: CN=75a8361f4c73f74ff653ca53432271a6070d18cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a3:2a:31:1d:28:d5:14:b0:55:9b:9c:05:6f:
                    ea:91:1a:ef:b0:91:06:d9:da:19:0e:22:bc:13:7b:
                    33:a6:b8:df:43:f7:81:59:04:b5:ce:9a:88:d9:4e:
                    5c:81:9e:49:ff:52:3a:66:27:73:91:67:8f:08:4e:
                    d6:71:20:c5:8c:16:7b:64:ed:31:ac:d7:ca:2b:75:
                    32:00:6a:4b:ef:6f:69:a5:2a:fd:de:e5:1c:40:0e:
                    39:10:d8:0d:5c:26:83:c2:d3:a0:13:37:db:e2:a8:
                    53:a0:24:4d:11:0d:8e:58:7b:a4:b4:21:e5:e0:fa:
                    60:39:fd:2a:9d:9b:e6:af:e5:cd:26:84:c8:2d:db:
                    33:86:39:0a:a1:86:0c:25:d1:f0:c9:58:c0:f5:6f:
                    a4:c8:9f:59:66:00:ea:fb:42:a8:fb:36:ff:31:16:
                    11:96:d4:ae:6a:fc:0d:f3:d9:5d:8e:86:8a:f4:91:
                    2e:bf:5f:c6:a1:ab:a7:d3:48:0e:c7:8e:bc:86:c7:
                    54:4d:09:7c:e6:eb:14:c8:f4:e7:75:be:6e:6b:09:
                    d2:96:f2:ec:37:ff:7c:2f:78:09:68:9b:9e:ac:94:
                    4b:57:52:74:c8:c4:09:2a:6f:4d:28:19:04:e4:3b:
                    cb:87:62:57:54:b3:c0:0b:da:7a:39:e5:ce:3a:d3:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A8:36:1F:4C:73:F7:4F:F6:53:CA:53:43:22:71:A6:07:0D:18:CC
            X509v3 Authority Key Identifier:
                keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:94:5d:3f:b0:14:11:aa:87:b0:fe:41:44:5a:fa:4d:18:
         19:f6:30:35:62:fd:ed:4a:7d:55:8a:5c:4b:9e:2b:0f:1b:da:
         6a:db:50:8a:0c:94:d6:29:82:fb:30:7a:6f:db:98:64:19:c7:
         74:4f:8a:da:ff:e4:99:27:70:bb:93:fd:e0:d7:8c:7b:c9:ea:
         73:ca:2d:ae:50:38:85:35:e8:b2:cc:51:6a:74:7b:db:6f:6f:
         1f:e1:e8:a5:90:9f:ed:73:4a:90:80:60:77:86:aa:7a:1f:70:
         87:dc:e2:9f:37:d5:81:14:c2:e0:86:a4:cf:3f:55:1a:60:59:
         66:17:96:90:49:2a:d9:6c:ce:6f:46:6a:61:28:37:a6:b6:9b:
         38:54:89:b0:13:4e:c7:ae:85:17:c5:44:44:54:bd:4e:a5:8d:
         c2:44:f8:04:36:18:74:17:87:8e:6b:4b:dd:76:6c:b8:20:ef:
         06:91:64:af:4e:02:ad:65:09:c9:26:fc:6c:14:a7:74:d1:bb:
         a1:7f:09:37:5d:42:40:d7:d9:4e:dc:61:22:08:8d:e3:c2:dd:
         1f:ef:12:30:09:fc:1b:be:3f:2c:60:9f:52:5e:bc:b7:f9:ba:
         fe:a0:63:7e:3f:f8:46:7d:a1:66:30:aa:67:44:4e:84:33:64:
         f6:c4:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:33:00 2024 by rpki-client on console-ams.rpki-client.org