Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          Pitq79yYdMZ6kbAypd01hJXPXxTbYbrCpqN33BlURQ4=
Subject key identifier:   21:72:F3:A4:07:DE:2A:E6:C0:45:D8:1C:F2:2E:94:98:5B:E0:4D:A6
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       018F998598F9C6CDC50745D87B85140DDE25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          1182
Signing time:             Tue 21 May 2024 05:00:20 +0000
Manifest this update:     Tue 21 May 2024 05:00:20 +0000
Manifest next update:     Wed 22 May 2024 05:00:20 +0000
Files and hashes:         1: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: 56oDlLY13kio+x6hEz2kj6YiSTCwjMSLz9HGXdjXVGo=)
                          2: nip39Msco-TsQkKqgBTkypNbyZs.roa (hash: /FBsbMMSaLJTRRstDDKRHG1bapU+wS4ANGurNZ1hMfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:85:98:f9:c6:cd:c5:07:45:d8:7b:85:14:0d:de:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: May 21 05:00:20 2024 GMT
            Not After : May 22 05:00:20 2024 GMT
        Subject: CN=2172f3a407de2ae6c045d81cf22e94985be04da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:90:93:3c:9c:18:6b:10:70:85:b8:af:ed:
                    91:64:83:a6:18:52:8a:00:11:ec:a7:fa:fd:18:0d:
                    2b:0f:13:10:94:b5:4c:60:42:e6:19:b3:25:33:74:
                    5f:69:bd:4e:27:cb:26:a3:c6:58:3d:32:d4:92:b5:
                    e4:45:dd:55:42:67:c9:85:84:7e:78:84:e9:6f:b5:
                    ef:74:d4:23:6e:7d:ee:c9:bb:77:0d:7c:8a:a2:ca:
                    f8:ba:1c:ae:af:bb:18:45:5d:e7:cf:42:a1:d1:00:
                    78:9e:d0:40:66:00:94:35:6b:ae:e9:5f:91:ca:8a:
                    0e:47:fe:5a:4c:57:f1:c6:5e:74:b1:85:86:33:41:
                    83:23:5c:89:56:69:d5:d9:27:37:54:58:6c:05:bc:
                    d4:53:e3:0e:7b:b8:e2:c3:70:85:d9:8b:5e:6a:70:
                    52:d0:1d:cd:0d:63:43:a3:18:80:ef:de:4f:ca:9f:
                    49:f6:3f:3d:be:f5:d7:6c:f4:6a:f4:d0:1a:e8:61:
                    5f:53:f5:1e:30:9d:54:de:60:10:f2:0f:ff:94:ee:
                    e0:4b:e3:f1:95:99:f1:4d:c6:b1:04:69:3a:7d:aa:
                    21:1e:db:99:fe:b7:70:27:66:99:40:34:dc:35:bb:
                    1a:d5:24:7e:95:5b:45:63:98:55:ad:52:fa:71:a3:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:72:F3:A4:07:DE:2A:E6:C0:45:D8:1C:F2:2E:94:98:5B:E0:4D:A6
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:70:d3:5c:4f:5e:6e:41:3c:7c:a5:45:19:59:ce:b0:30:2d:
         44:eb:49:81:6b:97:f3:c7:71:88:4c:30:c6:cd:e9:fa:10:eb:
         f7:a2:7c:b4:36:cc:ef:de:01:12:87:1b:06:4b:06:2b:a0:d1:
         01:ad:0f:2f:05:ff:54:98:3d:5c:b5:7e:11:04:80:94:ea:8e:
         bd:d4:c3:f2:22:58:58:52:83:1f:30:dc:d8:b2:a9:43:7a:3d:
         27:85:ad:e7:01:b2:74:03:ad:7d:78:9a:8d:3b:b8:d0:8b:2f:
         86:1f:8f:76:98:44:88:43:47:24:36:4c:3f:d1:52:5d:40:61:
         9e:a8:c6:72:ce:e0:d8:f3:a9:42:0d:1e:6c:53:dd:15:e6:23:
         84:63:01:c7:56:78:e4:74:3d:e0:54:4e:dd:d4:db:0e:f3:ec:
         c3:d8:1b:16:d2:25:b9:6e:a1:aa:24:3e:26:ab:0e:51:8a:5e:
         88:42:72:f7:e9:1b:29:63:13:40:46:ac:0f:a3:e4:a6:c2:1a:
         c7:b2:56:36:f9:21:f9:ef:bc:2e:74:3d:25:a1:99:15:87:dd:
         e9:6a:fe:1b:e1:af:1b:4a:0d:83:57:0b:ee:3a:ff:8f:9d:f1:
         99:0d:21:a5:3e:20:6b:55:6a:c2:f6:3d:58:29:27:61:1e:52:
         8a:b7:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:29:52 2024 by rpki-client on console-ams.rpki-client.org