Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft
File:                     W9dOOd2kANE2Em5sPvsc-TRCd-8.mft (raw, json)
Hash identifier:          c3y2n3kdWrOoz+0eRDHYMVNTxNH8/UXkQ9FyNDN5RRA=
Subject key identifier:   05:96:99:55:79:61:95:09:AA:A3:CF:23:E1:2D:A6:7F:8F:78:78:39
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Certificate issuer:       /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial:       018F87ED45C1804F48764A1B120506FEE91A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft
Manifest number:          08A2
Signing time:             Fri 17 May 2024 19:00:25 +0000
Manifest this update:     Fri 17 May 2024 19:00:25 +0000
Manifest next update:     Sat 18 May 2024 19:00:25 +0000
Files and hashes:         1: 7HwQ0o-IE4JdFZkCXwuH3K0p00o.roa (hash: 8sXEhmrxq8sR2yAta7kUZXVzndSjdzDsjxq5SEyEx9A=)
                          2: KK7CBMWEBoRztK8tYv0zCXRtP28.roa (hash: aOOBfKCctJdT0y9dLEXCT5bSrNHSxRr41cwVhsJ9Ov0=)
                          3: LYkiDJ0yD3DDXewjrrST8s3cvSc.roa (hash: 2WJ4qleQGScjM0I0Fp4K78ncrjK2fe4YjYZDo+juQ4E=)
                          4: W9dOOd2kANE2Em5sPvsc-TRCd-8.crl (hash: V2V5e92MvuG0TUQSuH3wsHS4+oxdG1DTZoXZs2OnaZY=)
                          5: f4du952mG7voblxBazx5ujmITWY.roa (hash: P+UtA3XzQwDV9nFtYDVzSg1jnFxX6NnUWf6p4T9hTG0=)
                          6: g0Mq21pitBaJFNJ2Rv76lap1Hp4.roa (hash: Ke6igV9j3ZmlWj3szxkvv3fh0g763qTS2VjRfwIiGTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:45:c1:80:4f:48:76:4a:1b:12:05:06:fe:e9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
        Validity
            Not Before: May 17 19:00:25 2024 GMT
            Not After : May 18 19:00:25 2024 GMT
        Subject: CN=0596995579619509aaa3cf23e12da67f8f787839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:a9:d1:2d:64:66:4d:ea:47:73:47:f8:89:
                    ad:d2:ce:07:60:bf:79:93:84:fc:38:d3:18:83:de:
                    78:59:0c:23:37:af:af:38:8f:6f:78:cd:27:ac:e4:
                    a2:52:00:52:a7:d2:02:4c:7c:f2:03:7b:5e:64:04:
                    16:95:fe:e6:f7:62:83:ed:88:22:9b:f4:69:72:b6:
                    ad:00:0d:f4:fa:2c:29:08:b9:16:d5:8f:f2:6d:78:
                    20:c2:61:8f:cb:98:04:48:1c:3a:8a:f2:8f:f3:b3:
                    70:4f:c6:26:6c:66:51:35:78:38:78:e5:72:e7:71:
                    c6:59:25:86:7f:6f:40:c6:69:fb:88:4e:71:49:b7:
                    cc:e6:5e:ed:a4:3e:03:ca:b8:cf:d6:aa:6b:2b:a3:
                    1b:e9:29:f3:04:12:1f:d3:d5:e2:be:3b:df:06:82:
                    cc:29:33:ef:62:c0:1c:45:98:46:ef:be:8e:e8:63:
                    3e:ac:0b:91:0d:a2:d7:5f:0e:7f:3b:45:bf:3f:35:
                    06:d7:cf:73:d8:77:59:42:e2:d8:5d:de:ea:39:15:
                    70:bd:58:a3:9e:5a:2b:17:ac:87:39:43:a2:82:32:
                    7f:ef:8e:8b:d0:9c:17:d0:38:c5:d9:37:63:aa:c0:
                    59:9c:7b:28:07:f8:f3:b3:a3:0f:49:68:da:6c:1b:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:96:99:55:79:61:95:09:AA:A3:CF:23:E1:2D:A6:7F:8F:78:78:39
            X509v3 Authority Key Identifier:
                keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:16:17:27:ae:f8:80:43:03:3c:1c:80:af:e3:07:b9:e1:f0:
         64:07:93:ba:c2:77:8e:7a:36:5d:3d:67:6b:29:93:19:e1:6f:
         8b:54:b0:eb:ce:94:3d:e4:ea:45:6b:12:e6:a3:16:97:56:90:
         db:e0:b4:36:03:c5:ba:d2:f5:dc:76:a5:b3:49:7a:e3:43:25:
         2a:ca:d3:81:ea:a8:62:1a:fb:c6:f5:49:89:d7:d2:3e:5b:ff:
         b9:6c:1d:e2:96:7e:8f:43:48:a2:1c:58:ae:02:09:f1:8b:ca:
         b4:5f:af:df:f1:44:25:b2:40:04:e5:d1:de:2d:fc:0f:fb:ed:
         0e:8d:d0:2f:20:b7:e4:7b:b2:4a:87:e3:2d:aa:25:be:7c:1b:
         a8:60:90:cd:8e:79:f4:25:70:76:c9:6d:a8:dc:b6:b9:1a:a3:
         b9:72:36:49:7b:92:8a:91:52:3e:13:32:c3:b2:71:d2:79:b4:
         af:34:c5:7b:52:1b:a4:e9:d5:2b:a7:d3:eb:81:92:0f:f2:fd:
         88:c7:89:f9:dd:dd:71:69:a6:00:b9:e8:67:18:92:e1:65:6b:
         b6:da:3d:52:73:1d:74:8a:d6:21:85:1e:57:6d:73:32:db:b7:
         cb:ac:73:3e:42:d3:93:78:a2:89:60:98:04:20:eb:14:08:2c:
         ba:a3:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:30 2024 by rpki-client on console-fra.rpki-client.org