Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File:                     wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier:          d+04V1gZaquucsmClN1U5iOcldCaJ/bTi+VnPo/O7w0=
Subject key identifier:   44:D5:E0:31:06:CE:46:27:C4:5C:67:E2:6D:A9:C3:2B:4A:DC:B3:3E
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer:       /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial:       018F874A17751C32F6B7CC4F9212ED555364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number:          05D7
Signing time:             Fri 17 May 2024 16:02:10 +0000
Manifest this update:     Fri 17 May 2024 16:02:10 +0000
Manifest next update:     Sat 18 May 2024 16:02:10 +0000
Files and hashes:         1: nEchU6k7kvcU-FZR4aYSthSxaAg.roa (hash: 9rlnMA5bH/R5zCHWoh6xDCX2QAmAz6mRB2BGxo9C9XE=)
                          2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: oQRPy3Ibl9av1t5FybphBGRMG9jQo5ZBRizj34BVLn4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:17:75:1c:32:f6:b7:cc:4f:92:12:ed:55:53:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
        Validity
            Not Before: May 17 16:02:10 2024 GMT
            Not After : May 18 16:02:10 2024 GMT
        Subject: CN=44d5e03106ce4627c45c67e26da9c32b4adcb33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:96:d1:2b:87:62:bd:17:5b:f3:0e:00:5b:
                    0c:ce:a2:74:dd:03:ce:2c:cf:f2:91:7d:bc:39:ce:
                    c3:4a:a5:ba:1a:d2:e6:fc:07:ac:43:69:f6:f3:5f:
                    b8:7b:12:c7:c7:00:43:42:a6:4a:0b:fd:f1:b8:9b:
                    b8:3a:f6:af:f5:55:a1:a7:97:41:c9:b2:dc:7f:23:
                    d7:4a:8d:ba:11:99:f6:7c:a0:3f:2a:2a:17:86:ec:
                    f3:97:c9:97:bb:0b:8c:1d:44:d2:56:13:77:d6:61:
                    7d:88:6a:d2:12:b8:c4:0d:41:84:69:8e:4e:de:e7:
                    0d:03:40:47:75:47:1c:02:b4:59:a9:cb:31:36:96:
                    f5:22:ef:0a:46:0f:93:46:fd:28:ff:37:d5:84:cd:
                    7f:5f:eb:5d:39:5f:c4:ed:97:95:06:89:6b:50:aa:
                    01:a3:24:84:2d:d6:d6:1a:b4:df:ed:0a:d2:20:f1:
                    6f:74:1e:33:a9:94:4e:40:03:0e:75:e3:a8:3b:ad:
                    7e:23:85:c8:3c:ca:2b:89:89:7a:cc:4f:1b:de:05:
                    3a:9a:0a:d1:f5:e9:24:cb:4f:7f:a2:64:fb:05:2b:
                    1c:1f:d1:fa:6b:98:0a:db:e4:df:1b:6f:23:a3:d0:
                    26:82:da:e8:90:1c:14:0e:b6:7e:85:2e:5b:06:aa:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:E0:31:06:CE:46:27:C4:5C:67:E2:6D:A9:C3:2B:4A:DC:B3:3E
            X509v3 Authority Key Identifier:
                keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:32:2d:09:ef:c0:3f:d2:10:ea:68:02:ea:fc:4a:a7:7c:53:
         ac:1d:b8:68:4c:56:36:cd:56:9a:11:96:f3:b9:8a:80:51:ca:
         9c:1d:48:1e:ae:4e:a9:d7:4c:fc:98:da:39:0e:81:1c:1c:95:
         d0:e8:36:f9:2f:c9:43:7a:38:36:a8:fb:38:94:55:64:ff:25:
         ce:f7:8e:a8:4f:4a:bd:51:c3:9c:18:14:b0:9d:00:c2:11:6d:
         2e:8a:f0:d3:72:cb:c2:f9:7b:8f:0c:e1:d3:64:a6:a7:d3:70:
         65:65:32:dd:de:af:db:a3:9f:42:1d:e8:93:61:c5:60:ae:2d:
         c3:01:d0:76:30:5c:c8:f5:00:b6:5f:cf:e4:97:7a:81:77:21:
         31:e5:76:15:41:ff:33:df:d8:e9:e9:d1:53:a6:ac:f8:ac:5d:
         be:f6:8a:25:73:9e:1e:10:c7:b4:2a:28:69:64:8b:a2:0c:bd:
         5a:af:33:25:5c:71:0b:e5:3f:64:e0:62:06:62:54:2a:6c:d5:
         24:af:e5:04:a5:8a:4e:07:79:68:4f:34:40:60:ea:ed:a1:6a:
         a5:b7:79:10:1d:9a:89:2a:fd:79:98:70:da:1a:2c:d5:9d:04:
         44:fd:c6:24:b4:db:b7:34:b4:0b:e6:b6:4a:b4:da:ea:40:69:
         3b:98:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:52:58 2024 by rpki-client on console-fra.rpki-client.org