Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          sQWQHad1j2siIGSTAruYzVVkjVX1sC8U++Nduvx9TTQ=
Subject key identifier:   AF:D2:FB:1D:D0:46:17:39:D0:5F:84:AA:A8:F6:3A:73:AC:BA:30:3F
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       018F87114079471A6A97E7E91BC023F45126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          0A78
Signing time:             Fri 17 May 2024 15:00:05 +0000
Manifest this update:     Fri 17 May 2024 15:00:05 +0000
Manifest next update:     Sat 18 May 2024 15:00:05 +0000
Files and hashes:         1: EWM70Br3vpfA4BJB_h7_VehyHB0.roa (hash: D38w296M/FbWKAPxv97qJrH8AaNY2fs3IawSxfKN8ug=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: P3FJ4zsnds2bXX+xg2c/F9ZQu5hs7b6hSMrH9Pj5hp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:40:79:47:1a:6a:97:e7:e9:1b:c0:23:f4:51:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: May 17 15:00:05 2024 GMT
            Not After : May 18 15:00:05 2024 GMT
        Subject: CN=afd2fb1dd0461739d05f84aaa8f63a73acba303f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:c0:21:9c:e2:a6:7e:1a:77:d3:9f:c6:b4:
                    ee:30:de:22:44:9f:f6:2f:ed:25:46:62:e3:84:9f:
                    b8:c9:d8:a2:f9:e3:b3:d0:ef:eb:61:1f:b0:1e:c3:
                    2e:06:de:e2:44:a3:d2:57:61:01:08:2e:ec:f0:1a:
                    c4:90:24:bd:23:ae:9f:8d:95:0f:c9:53:b9:4c:fa:
                    ba:42:fb:a1:33:f7:33:9b:0f:ef:3e:43:1c:93:57:
                    e4:e2:93:27:6b:47:74:6a:65:82:05:7a:cc:a1:7e:
                    9a:f9:dc:98:5b:39:ce:63:b5:9e:1e:2a:c3:09:de:
                    05:5f:49:b7:03:1a:2c:47:5d:6b:5b:70:91:3e:c4:
                    61:bc:cb:45:16:1e:55:c8:8c:2a:4f:ee:1f:2a:f2:
                    2f:5f:3c:4c:90:0d:e8:bb:90:da:00:28:c8:55:d3:
                    c8:11:98:cd:ce:8d:cb:27:ec:98:b0:8a:80:6e:a4:
                    53:13:27:c0:ae:10:a4:35:b7:7a:28:2a:77:9e:67:
                    8a:a8:30:69:94:0f:0b:f8:fb:10:3c:ac:59:97:0d:
                    24:17:7a:cc:a2:b9:e2:06:e2:39:6c:53:74:2b:c8:
                    be:a0:78:1f:e7:da:c0:26:f4:03:10:9e:b1:df:81:
                    0c:9b:72:a7:e8:79:eb:a8:02:ac:6c:be:55:7e:a1:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D2:FB:1D:D0:46:17:39:D0:5F:84:AA:A8:F6:3A:73:AC:BA:30:3F
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:72:78:81:9c:1c:ad:79:d1:92:82:bb:a3:9d:a3:c3:d0:1f:
         e6:3c:98:37:47:33:0a:4e:14:8c:e6:0b:37:6d:20:0d:45:cb:
         b9:aa:1e:53:e1:19:66:0e:a7:53:dc:06:30:06:24:b0:de:89:
         02:5d:57:fe:b6:e2:85:80:29:e5:82:0c:bc:9c:c2:5f:5d:f6:
         38:88:94:61:f5:1b:56:32:04:2f:d4:cd:ee:49:e0:8c:a4:1d:
         40:90:be:d2:60:fb:d3:3c:1a:34:61:f4:42:07:41:d8:b6:d2:
         8b:79:9c:88:e2:84:ca:e6:5c:ad:94:f8:0e:4d:b1:1d:a5:09:
         a1:92:c9:42:b6:0a:91:8a:af:ea:57:00:e2:97:b3:3a:24:50:
         ea:28:53:ca:1b:1c:98:95:36:12:a8:b4:1d:1f:3b:54:a4:6f:
         6e:a8:25:76:3c:b1:fd:84:7d:0e:99:d5:50:6e:71:73:00:d6:
         f1:4c:bd:6a:7a:bf:87:40:00:3e:5b:4b:7b:d2:c2:24:8d:f3:
         9f:4d:88:b2:21:96:f1:bd:a7:12:3c:3b:18:36:a9:0a:eb:53:
         03:3e:72:4a:e8:9b:c2:bc:d7:74:7b:3c:c0:b9:df:1d:5f:f1:
         b1:55:56:18:47:8d:07:31:35:5e:99:75:ad:1b:c2:1f:ff:00:
         b0:35:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:04:04 2024 by rpki-client on console-ams.rpki-client.org