Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File:                     wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier:          YxunyfOOyJrwtZpQb7CwDrRZYG59xLgd/VL8O9WdJY4=
Subject key identifier:   5C:5F:13:88:06:8A:7B:A1:B6:67:92:ED:95:9D:D0:C3:4A:F8:4A:5D
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer:       /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial:       018F874A33E3A423FC2C5A5FE926BE92ADAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number:          0D9D
Signing time:             Fri 17 May 2024 16:02:18 +0000
Manifest this update:     Fri 17 May 2024 16:02:18 +0000
Manifest next update:     Sat 18 May 2024 16:02:18 +0000
Files and hashes:         1: dCRwXV9KYbBd55PFMx9J0f0aXvg.roa (hash: b0TAHND+C4QcOnge6KLYfSUfcP5ghoRQGn04vJ9pD9o=)
                          2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: 2ASRr5ZY6snYLmVCdspG9uyT2vLiy5yEbSpzMzxOspk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:33:e3:a4:23:fc:2c:5a:5f:e9:26:be:92:ad:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
        Validity
            Not Before: May 17 16:02:18 2024 GMT
            Not After : May 18 16:02:18 2024 GMT
        Subject: CN=5c5f1388068a7ba1b66792ed959dd0c34af84a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:69:55:c7:66:e7:59:1b:65:87:53:cb:6f:
                    67:ca:ad:58:c7:33:fe:0f:67:14:bd:da:02:1d:6c:
                    e7:05:9a:bf:ec:b0:48:75:4b:6c:28:95:af:45:99:
                    cd:3e:c6:42:5f:99:f4:be:48:7f:b1:9d:f0:f9:53:
                    11:7b:c4:17:31:4f:1b:26:e5:2c:39:35:d9:79:70:
                    9a:a6:62:85:38:ce:6b:04:6d:e4:33:bc:6c:17:78:
                    91:71:eb:eb:ac:50:52:54:96:dc:86:08:4b:43:6b:
                    96:79:b0:b3:01:cf:10:8b:82:f8:72:0c:93:ce:d7:
                    c4:7d:1b:6e:5b:9e:f6:df:eb:e1:75:57:de:01:8d:
                    f0:5f:fc:f9:56:d0:a3:9d:4b:6f:42:76:57:81:10:
                    ce:fe:24:c8:fa:cd:5e:90:4a:af:bc:ba:bd:79:e5:
                    81:c1:f9:d5:7e:2f:0f:97:08:5b:a4:dc:d9:43:e0:
                    a3:ba:b2:ad:d2:b5:e0:ac:12:7a:d0:03:f6:ea:e3:
                    0a:80:c8:32:e0:70:ae:df:09:0b:8f:6b:31:0c:87:
                    d6:8b:97:55:ce:8d:45:e2:a6:f6:7c:22:72:93:37:
                    60:47:78:6f:af:ed:ef:8f:ec:6a:26:29:26:1b:e0:
                    29:92:6a:e2:0d:06:a8:b9:8c:5d:72:21:41:0c:13:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5F:13:88:06:8A:7B:A1:B6:67:92:ED:95:9D:D0:C3:4A:F8:4A:5D
            X509v3 Authority Key Identifier:
                keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:df:d9:37:5d:ee:3f:1a:23:b1:ac:ec:60:97:cf:27:64:f6:
         47:eb:72:63:0b:e1:b9:4a:fa:00:02:e8:46:54:f8:1b:f1:4f:
         e1:68:27:94:67:cc:40:e8:a9:a6:20:72:ee:7a:32:68:a6:7a:
         34:85:f1:fb:33:cd:ab:a6:f4:de:60:d5:c6:94:b7:e9:4b:bc:
         42:68:b6:35:e3:27:4c:2f:4f:b4:31:9b:29:4e:a7:92:c5:06:
         73:3b:1f:b6:d1:fa:86:63:81:67:cd:15:5a:f9:0c:24:60:fd:
         e1:5a:00:d1:47:31:18:d8:34:ec:c0:89:82:3b:32:7d:29:90:
         00:ce:a9:17:7e:5e:1e:af:ea:9f:07:d4:10:2e:81:1e:bf:fe:
         38:e6:f8:f9:b6:7c:c6:b9:e0:d2:71:e3:d3:bc:83:13:cd:09:
         69:73:1a:99:a1:85:fd:cf:75:61:10:ef:62:d6:7e:db:9f:1e:
         e0:42:8e:7a:19:79:6a:ee:24:49:3e:80:10:7e:14:ba:f0:cb:
         e4:a0:34:ff:74:5d:18:63:ad:18:73:4f:11:ad:b8:e0:57:6a:
         ec:05:61:b4:dd:a1:fd:bc:6b:cf:98:6b:ff:62:40:1f:e0:b7:
         1f:df:15:1d:16:0a:bd:aa:10:d1:d7:1a:ac:f0:3c:bb:d4:41:
         02:7a:7b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:33 2024 by rpki-client on console-fra.rpki-client.org