Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File:                     mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier:          BHnwBAMb4Vknl1hgwVDZQ1MzGXSgwUw5ca40Pppb6Vs=
Subject key identifier:   5D:58:39:BD:4F:6B:F2:97:16:DA:D8:89:7D:C1:E8:22:2A:AE:7D:BD
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer:       /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial:       018FB233A776FE8300AF97279D290AD0E347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number:          118E
Signing time:             Sun 26 May 2024 00:01:20 +0000
Manifest this update:     Sun 26 May 2024 00:01:20 +0000
Manifest next update:     Mon 27 May 2024 00:01:20 +0000
Files and hashes:         1: 3SwsaDnW9BEw9tXf33djI9i3f18.roa (hash: ECWcXovwsPkIwASLavmtIXG9hIx7QZwtXLDqOoKlouo=)
                          2: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: mJ5umoDi4O30Ar2Ey9xRiIDP/x36MLdo/YRuDlqKJ18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 18:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:33:a7:76:fe:83:00:af:97:27:9d:29:0a:d0:e3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
        Validity
            Not Before: May 26 00:01:20 2024 GMT
            Not After : May 27 00:01:20 2024 GMT
        Subject: CN=5d5839bd4f6bf29716dad8897dc1e8222aae7dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:bd:05:22:0a:57:11:df:d2:d9:41:b0:72:
                    d3:c5:94:7b:08:b4:65:68:95:3b:08:fe:52:50:d9:
                    13:a7:21:d4:a8:da:4d:c4:50:04:c4:8b:04:91:39:
                    aa:18:40:15:74:42:aa:2c:8e:3e:ee:5e:7b:52:b1:
                    e3:1c:6b:dd:b6:fd:c1:d7:b1:44:0e:72:58:a6:bb:
                    9a:bc:d4:46:3c:7d:16:de:1b:4b:8c:1a:8d:3f:66:
                    b2:82:a8:06:29:5d:da:d7:39:fa:53:95:df:b3:0a:
                    d8:c2:43:6b:49:10:bd:34:8e:e3:fd:25:d0:4d:92:
                    aa:2e:c0:d8:50:c0:76:31:8a:4f:7b:ea:64:e5:66:
                    fd:1e:0e:f6:64:98:7d:4a:fc:a2:36:c9:48:ed:5f:
                    21:8d:02:60:4f:3e:f9:1e:90:bf:38:28:45:68:f0:
                    c1:3f:f5:41:0e:7a:0e:f3:1c:0e:eb:70:c9:cf:c5:
                    34:21:56:87:e3:f9:c7:8d:a6:05:84:ea:db:55:af:
                    d5:f1:63:a1:ee:23:b8:e3:8f:6a:d2:93:ce:9a:e7:
                    50:30:44:4b:21:8a:e3:a8:6a:e3:c2:26:6d:57:18:
                    52:02:8f:0b:41:15:2d:25:5d:c5:7b:b0:27:53:1f:
                    73:67:9d:bc:19:e6:be:06:33:69:9c:89:ae:f5:86:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:39:BD:4F:6B:F2:97:16:DA:D8:89:7D:C1:E8:22:2A:AE:7D:BD
            X509v3 Authority Key Identifier:
                keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a9:0f:fb:24:5d:a2:44:09:d9:9b:f8:ac:b9:75:a0:38:c9:
         3b:82:92:d1:a0:57:18:47:2c:8c:04:49:8b:d9:b7:a2:9f:bf:
         d5:78:2b:9c:ba:88:f9:04:47:45:08:54:36:06:df:8b:dc:74:
         66:cd:42:f2:23:bb:86:11:a5:fd:30:f0:60:1f:51:d7:36:7c:
         b8:58:7c:06:fa:84:be:f8:4e:b6:e5:b5:cf:10:8f:71:59:df:
         39:d1:8d:6a:5f:dc:7f:b8:19:15:3c:a7:43:eb:e9:ef:dc:62:
         6c:2d:76:b2:f8:03:6b:15:f9:0b:37:be:ec:c6:3f:50:3c:20:
         6d:b7:80:8c:a8:8c:0a:c8:e9:50:d8:41:db:52:3d:ee:43:e2:
         56:4e:f5:70:53:63:47:70:0b:64:65:03:73:cf:a6:fe:f1:bf:
         03:a9:d9:f6:2c:c8:19:04:15:26:30:fa:c3:2c:ad:22:e7:a1:
         06:c3:28:9c:ea:cc:ab:dd:22:81:1e:0a:92:ea:37:cc:80:a0:
         7e:67:c7:88:63:16:4e:ea:68:b7:b5:1f:d7:13:72:54:32:b5:
         bd:2d:1c:02:02:26:87:e4:f7:ea:c0:97:d7:b1:94:d7:40:f7:
         e7:54:ff:cd:cd:ce:4c:29:5b:16:b7:99:c0:43:e9:65:8c:eb:
         28:4d:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:08:36 2024 by rpki-client on console-ams.rpki-client.org