Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          Fo7Ov4iJae8FZscJ07YTgUQTyCg+cON17F84Qvmwc8E=
Subject key identifier:   23:42:50:6C:D3:90:BE:0D:2A:29:64:5E:F8:86:BD:72:58:EA:C5:67
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       018F5B832A8E151EC47CD5403E54C2FED950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          0DE1
Signing time:             Thu 09 May 2024 04:01:13 +0000
Manifest this update:     Thu 09 May 2024 04:01:13 +0000
Manifest next update:     Fri 10 May 2024 04:01:13 +0000
Files and hashes:         1: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: QQ2MRIWmvryTvWNrl8f3bQyyFCZCRJXMTmBxt7CZpRE=)
                          2: zM53Mpj6iZQbR_S6fR5GiiDXk7E.roa (hash: AZSXfS+ysI50XN8P0S+VbHkMg+hvzptDLcJ1cYj6Zx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5b:83:2a:8e:15:1e:c4:7c:d5:40:3e:54:c2:fe:d9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: May  9 04:01:13 2024 GMT
            Not After : May 10 04:01:13 2024 GMT
        Subject: CN=2342506cd390be0d2a29645ef886bd7258eac567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:17:4f:97:2f:0a:87:bc:2f:aa:89:c0:e8:
                    b3:ac:b3:36:17:48:52:79:af:64:bc:74:24:b2:bd:
                    fd:f5:59:c5:f2:6b:b8:7f:c7:ae:ec:e1:0c:de:51:
                    e3:1b:81:5a:02:b2:10:1a:73:84:d5:67:0f:66:10:
                    fb:16:e8:e7:3d:f8:05:6c:f0:5e:36:19:ab:23:38:
                    42:e9:fe:37:d2:11:fa:c8:63:16:5b:1f:cc:84:d7:
                    c6:c6:fe:88:ec:9d:03:aa:eb:90:71:d5:d3:4d:94:
                    65:35:6e:d1:d7:96:ef:71:7d:d6:ae:05:e5:65:d5:
                    2a:cb:a9:85:99:e5:a8:35:10:55:6d:cd:2a:ef:16:
                    e9:d0:1f:15:8a:9f:5a:a1:96:ee:4e:75:92:92:09:
                    4c:c4:9a:5a:19:1c:0a:40:3b:ca:0f:8c:4d:b6:23:
                    49:6f:37:b4:d1:f0:88:a3:02:9f:03:41:b4:81:4c:
                    43:40:d1:34:a7:b3:c2:f4:8c:c7:32:00:41:72:45:
                    fd:e2:fd:e0:3f:3e:2b:64:d9:87:b3:05:5d:e8:9c:
                    44:7c:4c:3a:a9:92:af:ba:be:98:78:46:f1:b6:b3:
                    34:e7:e7:d0:a9:06:38:e4:45:9f:78:57:df:3d:18:
                    e3:eb:d9:49:0d:6b:ac:0c:e1:ca:4c:44:4a:74:0c:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:42:50:6C:D3:90:BE:0D:2A:29:64:5E:F8:86:BD:72:58:EA:C5:67
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6d:40:8d:c6:af:d2:6a:98:3b:3e:30:57:cf:bf:45:4c:29:
         98:14:1c:13:b7:9b:ef:38:af:2f:2a:65:b7:fe:6e:b2:7d:58:
         26:9b:be:8a:3e:d1:f4:17:63:97:e3:ce:5c:b8:bd:bb:bb:ce:
         24:dd:da:bb:59:13:dc:85:88:b3:d4:ae:9d:ff:21:d5:0a:90:
         03:34:9e:c4:2c:be:0c:71:84:84:f9:22:8a:d5:69:c0:6f:74:
         f5:0c:2c:10:0f:c2:53:77:10:3f:03:4c:d7:0c:b7:e6:ce:88:
         ac:da:9d:db:8b:02:25:6e:38:80:dd:16:f0:f3:10:85:cc:25:
         72:38:e2:45:4f:fe:2e:fe:6b:01:2a:b7:b7:76:fe:24:11:fd:
         ab:f4:56:02:1e:ea:13:80:45:89:05:b6:74:f0:4e:24:8c:4e:
         48:9e:42:44:8d:64:8d:2e:80:4d:06:8b:34:64:86:73:5e:66:
         56:a7:4c:62:3c:49:ed:08:3c:27:81:43:3c:80:f1:47:7e:95:
         21:1b:94:0f:57:df:3d:5f:ef:b9:da:65:28:6b:7e:65:ef:9a:
         28:f4:fc:08:35:ac:50:6a:25:c6:4c:15:ab:8e:d2:a0:60:67:
         57:00:7e:10:49:d7:0a:c1:4a:97:fe:dd:5a:23:ea:20:80:ae:
         6d:d2:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:43:27 2024 by rpki-client on console-fra.rpki-client.org