Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File:                     wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier:          XWwxiiUx50WYoIpYLb00CfwR3MT5qt2KhrJn7JlQaVk=
Subject key identifier:   3B:43:B4:36:6D:98:15:67:8A:D9:33:CE:D9:97:73:69:92:59:34:43
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer:       /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial:       018F86360389A5A91AB44D631F1E733303E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number:          0497
Signing time:             Fri 17 May 2024 11:00:37 +0000
Manifest this update:     Fri 17 May 2024 11:00:37 +0000
Manifest next update:     Sat 18 May 2024 11:00:37 +0000
Files and hashes:         1: IcZYO6_Gvdh-akIFCAoueGmmEAY.roa (hash: jnZcYY/QkrtRs3IkqkZVKV9fJ7//dHgvOth3w4m2SAY=)
                          2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: 3N6AxELEnTaS7Hj1tg8rEAQUjPH2yVQxtnmS24JKrp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:03:89:a5:a9:1a:b4:4d:63:1f:1e:73:33:03:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
        Validity
            Not Before: May 17 11:00:37 2024 GMT
            Not After : May 18 11:00:37 2024 GMT
        Subject: CN=3b43b4366d9815678ad933ced997736992593443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:7f:77:cf:96:bf:8c:72:f4:09:1f:a2:2e:
                    73:ab:78:55:46:2a:e4:97:57:a0:7c:9d:e8:9b:71:
                    38:08:9e:bb:d6:fe:77:66:3c:2b:d3:48:b5:8f:ec:
                    23:32:38:43:2f:c6:1b:14:9c:67:76:0c:63:f1:88:
                    0a:a9:10:a1:ec:36:19:0a:b2:7c:bb:0b:f2:d6:e3:
                    92:bf:0b:b2:e1:e1:ac:4c:fe:c7:88:b7:84:30:51:
                    a2:6f:e0:7b:b4:7d:46:8d:47:8c:8e:e3:ef:7a:04:
                    9f:26:c8:49:7f:80:54:99:d1:78:ef:ce:f9:6a:76:
                    b8:7e:df:60:28:e2:ae:43:04:e0:54:48:31:d9:2a:
                    d8:3f:88:4a:c0:ee:b2:e9:be:14:15:05:c8:c3:64:
                    28:9b:7e:ba:95:a5:b3:2e:66:b5:1f:3d:d6:79:b2:
                    d0:90:df:6d:e9:8b:c1:7a:9f:04:45:76:fa:79:f2:
                    00:74:8e:07:db:1a:65:48:72:ce:41:5e:f0:74:c2:
                    98:d3:8a:74:aa:f8:08:c4:32:84:62:e7:cf:72:1d:
                    32:46:99:f7:14:30:08:ef:d1:e3:31:69:5f:cc:60:
                    8d:29:1f:0b:d9:83:40:c7:b3:40:c8:c3:63:6b:a9:
                    71:2f:4c:c9:c2:02:71:f2:50:a9:8a:ef:8f:73:18:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:B4:36:6D:98:15:67:8A:D9:33:CE:D9:97:73:69:92:59:34:43
            X509v3 Authority Key Identifier:
                keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:cc:c6:8a:f9:86:f0:87:a4:bd:e2:20:5f:3e:7f:bb:d1:
         4a:32:a7:1b:d1:23:cd:b1:4f:a3:4a:f7:47:19:eb:85:f9:01:
         cc:a9:af:73:4f:bf:79:91:be:35:86:e7:9e:6b:a2:4a:eb:35:
         e8:6f:91:bf:98:90:22:c9:9a:41:68:bf:0b:28:16:38:2d:17:
         e9:85:0c:eb:c3:7d:b5:ba:00:c9:c8:4a:63:f7:39:5d:6e:f5:
         e0:d2:ae:a6:b6:c9:3f:ab:7d:de:fb:ef:e8:b5:52:90:cf:ee:
         a6:69:20:f3:a5:60:8c:35:29:e6:f3:f1:65:29:3a:ef:84:74:
         9a:74:1a:10:5b:ab:35:f2:6b:c6:e9:68:7f:14:0b:be:c1:cf:
         45:80:fe:4b:9b:f5:fe:3f:47:63:7d:c5:b4:32:fe:ff:d9:ef:
         a3:3d:86:89:83:ab:1e:88:e6:b4:da:ee:fd:ab:6b:5d:7c:c8:
         83:72:48:f1:8a:4a:d3:d1:56:2f:df:82:8e:1c:be:f3:cd:67:
         58:f6:c2:b4:43:6b:ae:a9:4a:c2:04:ca:d9:0f:5d:58:cb:35:
         a5:70:5b:a6:54:89:c4:46:a3:b2:e0:3c:cd:dd:57:4c:6a:ba:
         6b:81:c7:83:d4:d7:68:b5:2b:98:eb:57:b2:44:5a:3d:78:9b:
         ff:14:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:45 2024 by rpki-client on console-fra.rpki-client.org