Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File:                     w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier:          p32lLOByM7Uhqc3hEoSglj4K7juX5hPRojm23+7rYjQ=
Subject key identifier:   A4:B2:41:4F:8D:55:3D:35:CD:08:EE:9D:36:1F:35:9B:CB:83:69:78
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       018F87B68F1448D5FB5A3BA6B2E09D4BD726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:39 +0000
Manifest this update:     Fri 17 May 2024 18:00:39 +0000
Manifest next update:     Sat 18 May 2024 18:00:39 +0000
Files and hashes:         1: KZjgrHJw2QxpwMvNPoIkp7c3vpA.roa (hash: w3T+R69TdnM5iQotXO2wsy0v6X+9Fy+aBl6Wf+ADcek=)
                          2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: t6fkiTRQDxdtq9TDbBncrM8fKFqG795+AqIEmo6aIP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:8f:14:48:d5:fb:5a:3b:a6:b2:e0:9d:4b:d7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: May 17 18:00:39 2024 GMT
            Not After : May 18 18:00:39 2024 GMT
        Subject: CN=a4b2414f8d553d35cd08ee9d361f359bcb836978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:61:95:b4:86:0c:64:5e:eb:24:ac:4b:d4:
                    eb:2f:da:fa:ff:c5:d6:9c:4e:85:21:c8:c7:91:7c:
                    a1:5d:9f:2c:62:44:f3:b6:6c:6d:43:ba:b9:c9:a0:
                    74:1d:88:71:e6:c7:aa:f4:f9:ce:10:82:62:72:9d:
                    95:9f:fb:54:75:d1:fe:24:19:f7:cc:81:3c:4d:44:
                    68:3c:ae:e6:ef:ec:e9:25:a2:4e:03:e1:ec:4e:f6:
                    41:b1:e5:af:33:45:43:2e:c7:7c:dc:1d:55:68:66:
                    82:11:cb:18:0c:ac:4c:f8:1a:e0:62:40:09:96:35:
                    bb:04:15:58:22:34:3d:df:97:01:63:4a:03:7f:1d:
                    52:76:6b:04:8c:03:97:f4:ac:c9:0d:15:f8:9d:a1:
                    a6:92:ce:6b:ba:1b:86:36:cb:80:2d:e4:bd:03:13:
                    7d:b8:90:37:6f:3b:74:07:9d:f5:fc:ac:d7:95:9a:
                    a2:4f:f6:78:2e:d0:03:b1:25:62:c8:5f:0f:93:38:
                    33:8b:93:91:2f:d3:f5:06:61:d6:75:6b:0e:d2:bd:
                    77:25:b5:c0:ae:f0:df:0a:a4:da:98:cf:f5:3b:54:
                    19:f9:e5:38:de:66:66:d3:bd:6b:94:56:8e:2b:36:
                    cc:75:c5:c0:4c:49:fe:31:1d:d5:5d:5f:74:b8:97:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:41:4F:8D:55:3D:35:CD:08:EE:9D:36:1F:35:9B:CB:83:69:78
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ce:e2:c2:97:40:11:d4:db:48:da:00:97:1c:c7:1b:89:eb:
         9b:a3:f2:a9:01:8c:b7:31:67:60:3e:12:c3:08:7b:96:b1:e6:
         3a:bd:be:e8:92:44:eb:72:64:88:8f:2d:3d:df:02:61:99:ae:
         3e:36:be:e1:5b:a9:52:40:c6:29:65:92:91:52:64:d8:89:35:
         0c:fa:c5:65:49:fb:9f:30:c3:bf:7c:1a:07:13:59:56:39:84:
         af:02:7d:17:2f:1d:1c:3f:22:08:77:ce:63:09:06:ec:4f:68:
         a9:7c:34:4d:02:03:9e:6b:e0:8e:b0:71:95:65:c3:4f:5b:e4:
         c5:10:e7:b9:c1:aa:36:01:a0:3b:47:34:59:ea:68:4c:31:fc:
         ff:a3:5e:e5:d8:a2:5e:08:91:64:77:ad:92:0c:91:06:57:a7:
         23:1d:db:32:d4:3d:00:ae:ff:20:46:9f:d0:a2:92:96:bc:dd:
         8c:78:19:f4:06:5a:e3:9b:cc:14:62:b5:7a:27:de:a2:ac:28:
         8f:bf:f6:92:f7:5b:e5:53:e7:25:23:86:97:a2:04:39:df:28:
         5e:29:ad:8c:f4:f3:3c:24:f3:5b:f3:d6:26:62:88:4b:a2:14:
         e2:5f:c7:9d:b9:7c:4e:af:69:a5:f6:b7:17:3c:8b:95:97:40:
         4f:78:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:58 2024 by rpki-client on console-fra.rpki-client.org