Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
File:                     wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json)
Hash identifier:          tzW1Zfg47yBRC1S9TOsL0be3rkmPe1YUQnwVWhFyeF0=
Subject key identifier:   D8:1A:B9:E2:01:9D:2C:43:FC:4C:5F:CC:91:2B:84:0C:D3:39:1F:B6
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Certificate issuer:       /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial:       018F855BC120CB1B39CDD73BB2D8D10F64F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
Manifest number:          1197
Signing time:             Fri 17 May 2024 07:02:13 +0000
Manifest this update:     Fri 17 May 2024 07:02:13 +0000
Manifest next update:     Sat 18 May 2024 07:02:13 +0000
Files and hashes:         1: 1JCW52nrIHjMMfc-RVAdo2qhwEM.roa (hash: VV/OFxazXo/N1ziQct231frBpIs6oKonzYAzsVnSTwI=)
                          2: AL5Gw-AZLeNBkZDxMDrWusaCokg.roa (hash: hjiYgaU+lwwWyg7vajhaVrnQ4vgEJ5vxu0ht2/KP/xk=)
                          3: CqCOspiZPaSMQj2EFF1KdKb0gVM.roa (hash: Kv7tfE615zIZEqoU92hnNnOz5q7LolO7fkWU7RBTXfg=)
                          4: ONmk4iaSMKdkiSw3gLo5kB24Prg.roa (hash: uce4BfDqHRSc2FWIX6cRZuVriIuAJu63g7u3Tly9gRw=)
                          5: XbIi8za6xUXBLEAT3qUx2fhlNh8.roa (hash: OvDxg5VMXplMMSz79nH8DRrHsM3VUESvGsMcG/5+7cc=)
                          6: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: 8FEUJmrBZV3xgz8tRjbMOLuFOP6tS76BZIofNxPXCIo=)
                          7: xL9ct7FFVJ0X2Z0jjTPHWlojBZ8.roa (hash: KP9xtgwZjEVpCQWslP4kfGPQdXbqvMtbY4uRy1ktDLY=)
                          8: zXPYeDIHs-OMGLv6HH_M7H9lbYk.roa (hash: uCZdrT7mzEOccqeIV2iS7Gmxa5fgiTAZvZ+mupdaRXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5b:c1:20:cb:1b:39:cd:d7:3b:b2:d8:d1:0f:64:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
        Validity
            Not Before: May 17 07:02:13 2024 GMT
            Not After : May 18 07:02:13 2024 GMT
        Subject: CN=d81ab9e2019d2c43fc4c5fcc912b840cd3391fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:c7:68:7a:25:25:ec:d6:a3:ba:31:5b:c5:
                    dd:d6:32:dc:fb:54:e1:0b:fc:07:bf:88:57:92:67:
                    5b:db:95:4b:cd:e5:ec:44:cc:b7:0f:78:49:ed:88:
                    e8:16:39:ba:8f:cb:f7:dc:15:61:69:31:2c:20:69:
                    71:3d:5f:00:ab:58:2f:58:6a:92:1e:6a:65:5c:8d:
                    d8:3d:2d:82:44:60:1f:b2:bf:c9:69:4e:b0:85:1d:
                    79:e3:0e:20:0e:94:2c:b3:e3:8f:70:0a:14:9c:d2:
                    13:14:50:2a:e9:cc:07:15:98:b2:b6:a2:69:6c:3c:
                    ee:86:79:5f:d5:5c:04:ce:e8:02:f1:1f:47:fd:4c:
                    e2:04:75:97:76:53:7b:ec:60:7a:25:7a:99:50:68:
                    97:91:57:e7:24:50:48:04:da:97:38:67:59:ff:57:
                    2e:c3:34:50:8d:c6:cb:37:67:18:58:a2:49:71:3d:
                    9e:0e:1a:e4:86:cb:1e:e9:7f:75:ac:83:bf:9d:46:
                    c9:ed:20:23:ee:17:9d:6c:21:0e:29:99:30:7e:74:
                    d2:df:16:3b:53:b3:c3:ec:15:04:88:e5:50:02:ca:
                    1e:47:d2:28:5e:f4:53:b7:f9:39:b6:01:3f:b7:42:
                    86:ee:22:61:47:3f:c4:ee:9f:f8:36:46:25:00:3b:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1A:B9:E2:01:9D:2C:43:FC:4C:5F:CC:91:2B:84:0C:D3:39:1F:B6
            X509v3 Authority Key Identifier:
                keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:06:86:75:8a:25:7f:e1:43:1b:cf:05:68:28:f6:c1:06:
         45:18:92:d3:5a:3c:a7:3f:23:0a:79:fd:00:40:aa:84:f7:5d:
         4a:29:d5:ad:12:9b:34:0f:a0:9e:cc:da:ad:44:0a:b4:7e:4a:
         45:d0:36:29:80:16:53:cd:89:7c:70:c5:f1:cb:66:a6:a6:d8:
         d7:69:37:45:41:ac:9a:e7:ca:40:bf:6a:84:c7:60:3d:01:27:
         17:15:04:87:f6:e3:63:fc:aa:55:a3:6a:e8:11:51:1f:d5:d1:
         f6:39:83:29:a6:f3:88:14:6f:d2:64:78:5c:18:9b:19:4b:a1:
         04:dc:33:9a:da:4a:a7:32:23:0b:4d:39:ef:56:d8:29:57:22:
         12:bd:69:29:2f:aa:8d:e7:ec:66:04:dc:7d:61:68:f5:32:f2:
         e5:22:63:b2:46:0c:48:ca:23:ed:0c:5e:34:74:b0:bd:14:a0:
         c3:b1:08:95:a9:a9:3b:41:2f:09:2b:60:bf:85:d6:fe:6e:86:
         db:96:c6:5e:35:41:4e:7e:e3:95:c1:bc:e1:47:92:c7:3d:30:
         89:7e:cc:02:2c:da:e5:a5:e6:72:42:ee:03:3e:85:cc:62:71:
         ab:9d:d7:c8:b0:f9:63:fe:5d:f4:67:84:61:a5:74:f9:7d:ea:
         b6:17:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:16:44 2024 by rpki-client on console-ams.rpki-client.org