Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File:                     WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier:          9JYx+p/qSrRbmm+Jz6rergzZNW8M1rN2Tzu+rcqOKAo=
Subject key identifier:   CA:28:70:0C:D4:FC:C8:E3:5D:F1:4C:AB:07:B5:A7:32:F2:7E:72:32
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer:       /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial:       018F874A6F39CD138B1C32380507F02F12C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number:          10F2
Signing time:             Fri 17 May 2024 16:02:33 +0000
Manifest this update:     Fri 17 May 2024 16:02:33 +0000
Manifest next update:     Sat 18 May 2024 16:02:33 +0000
Files and hashes:         1: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: F0p1T1R+1pkBESd8ykvFmoycgd1V28kR4JSAV3JKZh0=)
                          2: exOTydkwAp9SDeJLr0iypTvgWho.roa (hash: MXqng491I5qx0v3hXfso96hyA3iz3HDnK6B10nHdbZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:6f:39:cd:13:8b:1c:32:38:05:07:f0:2f:12:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b243a7233e571c3c173eb8249111906326019
        Validity
            Not Before: May 17 16:02:33 2024 GMT
            Not After : May 18 16:02:33 2024 GMT
        Subject: CN=ca28700cd4fcc8e35df14cab07b5a732f27e7232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:1a:da:ca:dd:5f:58:9e:5f:e6:f8:22:0c:
                    36:28:ec:b8:dc:5a:08:20:7b:84:71:49:09:3b:d7:
                    34:2b:ec:9f:72:5f:61:5c:a6:f4:a7:13:9e:74:eb:
                    00:17:0d:ec:23:0b:4e:fe:3d:cd:a5:d6:f9:63:60:
                    cd:9e:9f:01:5b:ae:1c:f0:d9:41:0e:fe:b5:ec:33:
                    7e:d0:1f:cc:3d:56:02:8c:08:68:15:fc:66:e9:27:
                    61:77:e7:da:c4:11:1f:44:00:af:f5:af:69:9a:1e:
                    cb:47:07:6f:7a:27:a3:60:c9:f9:81:a8:11:32:2b:
                    8a:6f:38:b4:d7:22:95:be:21:cf:97:80:13:af:f2:
                    a7:e4:91:c4:18:88:78:fb:64:38:cf:81:e5:2c:bb:
                    8e:9a:16:58:e8:f9:7c:c2:71:47:7e:02:5c:a6:e9:
                    89:07:3d:5e:ef:9e:f4:a9:9c:8a:37:17:2a:cd:bc:
                    9d:93:63:63:17:c3:7b:93:90:a4:b1:69:f5:64:a1:
                    59:71:ad:c3:fe:ad:73:ba:6e:cc:99:cf:a6:81:81:
                    7b:c7:11:bf:33:be:4a:91:01:a5:43:01:0f:83:5a:
                    c2:e6:fb:1e:e2:84:09:1f:c9:1c:d7:ef:4b:56:5d:
                    43:ba:11:b4:27:a8:f5:b9:6c:da:ee:79:1c:b7:7b:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:28:70:0C:D4:FC:C8:E3:5D:F1:4C:AB:07:B5:A7:32:F2:7E:72:32
            X509v3 Authority Key Identifier:
                keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:27:94:82:53:3c:0a:21:24:0b:21:e1:35:b0:84:01:6c:9f:
         15:24:57:6b:f5:d3:82:a4:b5:f8:5b:c6:51:f8:86:22:30:98:
         81:a1:d5:c8:af:b1:42:6b:45:bc:67:41:91:dd:d5:59:47:da:
         65:de:9a:7e:55:72:30:ea:a0:b4:c5:a7:38:f3:b4:e9:22:46:
         34:dc:89:3a:b4:26:90:ba:17:06:a5:62:ae:55:5e:26:c9:44:
         64:02:fa:32:8b:99:81:72:0f:1e:28:85:3b:95:44:70:71:80:
         21:fa:0d:40:bb:40:25:75:5d:76:88:a5:9a:eb:83:ad:38:8a:
         ae:59:ef:82:fc:32:33:07:9f:aa:9f:58:c7:d2:f6:e9:d2:d6:
         87:95:96:bb:29:68:34:20:8b:17:8e:e8:a3:27:15:32:07:83:
         65:53:da:7b:0d:93:d8:d8:f1:8f:97:77:ce:23:c6:c5:56:24:
         aa:35:b5:4d:3f:f0:ab:12:00:69:46:46:2f:a8:b4:73:9e:cd:
         22:ff:11:57:bd:ca:0c:ad:dd:91:b1:2a:37:f9:c4:71:8c:16:
         99:18:36:09:70:86:b5:c9:9a:5e:ed:c2:a6:98:9e:18:1c:03:
         72:dc:43:3e:b6:8c:29:a9:66:32:f1:a7:00:5f:12:f0:13:87:
         c5:34:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:50 2024 by rpki-client on console-fra.rpki-client.org