Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File:                     w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier:          p1+O+zBxmZ+rrolpcugDSN9A/a9hbnONjCeW6U/T8IE=
Subject key identifier:   39:3E:B8:DB:02:85:E3:CD:CD:FA:1A:31:19:73:50:0B:4D:50:D6:22
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer:       /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial:       018F87498854A2464FB634DBA9C5F9E87D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number:          0625
Signing time:             Fri 17 May 2024 16:01:34 +0000
Manifest this update:     Fri 17 May 2024 16:01:34 +0000
Manifest next update:     Sat 18 May 2024 16:01:34 +0000
Files and hashes:         1: DWfzrcKb9Tln-0ewrEqDIZxvJ_g.roa (hash: Ca8F5EwlE2mIEcZwtjQbqv34COWrAYtXGzvWct7I5k8=)
                          2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: cZYC6sA6h/xM6EwQpgZqMyXszTbDqzZAk2VROjE+YuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:88:54:a2:46:4f:b6:34:db:a9:c5:f9:e8:7d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
        Validity
            Not Before: May 17 16:01:34 2024 GMT
            Not After : May 18 16:01:34 2024 GMT
        Subject: CN=393eb8db0285e3cdcdfa1a311973500b4d50d622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:4f:c2:a8:78:ad:d9:62:a6:5e:cf:9d:3a:
                    d9:c4:f5:0e:a2:72:93:04:89:aa:25:e1:3c:50:54:
                    a7:00:dd:26:4f:a4:8d:59:03:f2:62:1c:01:d9:8a:
                    26:4b:8d:2b:4a:48:ad:62:14:fc:b6:2f:70:d6:e3:
                    b7:88:6c:57:bb:fc:ba:81:fc:58:68:19:9d:ac:4c:
                    13:7d:b9:ff:6c:b8:3e:47:ea:3a:1c:a4:b4:ab:15:
                    ef:23:ac:bd:4f:b9:f1:75:bf:6e:4e:d5:6d:a2:fc:
                    87:dd:72:40:4e:67:ce:80:c7:cb:59:d0:34:92:0e:
                    7c:72:05:3d:1e:8e:4f:91:5e:26:7a:be:9c:d0:3b:
                    cf:86:1b:84:19:40:b8:81:44:75:da:7e:40:27:5c:
                    44:59:65:e5:d9:6a:b7:8d:61:12:36:cd:b8:cd:97:
                    cf:f0:0b:c4:be:e7:66:9b:4a:60:6e:44:5b:6b:d9:
                    8f:17:ea:be:9d:46:12:4b:8d:89:f5:3d:79:f4:ea:
                    aa:30:56:fa:43:db:99:6f:83:4d:26:01:e4:b5:6c:
                    a1:ce:d8:41:d5:44:62:61:9d:76:9c:11:c8:d3:bb:
                    3b:79:5a:46:68:b9:c7:dd:55:23:a6:bc:50:c8:9d:
                    8f:cb:aa:26:df:6f:d2:b7:c7:aa:72:3c:69:02:a2:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3E:B8:DB:02:85:E3:CD:CD:FA:1A:31:19:73:50:0B:4D:50:D6:22
            X509v3 Authority Key Identifier:
                keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7b:d3:9b:98:5b:ec:a4:30:5f:24:5b:00:d6:cb:91:55:5e:
         1a:c5:17:a7:ce:08:95:0a:aa:51:62:f6:09:66:8c:b9:2a:e7:
         ec:f4:36:3a:af:dd:16:19:87:91:2e:45:ff:99:c1:d3:95:de:
         03:bc:90:be:ca:63:06:7f:b7:9d:8d:9e:55:ad:39:c4:72:3a:
         4f:b7:27:d9:84:3b:28:10:b8:5a:ee:9a:65:f0:d7:15:65:f2:
         2c:d5:75:f7:e1:a2:5d:67:2b:8f:bf:25:43:ed:74:5b:49:0f:
         54:cf:12:f8:85:70:61:b5:bf:24:0c:e4:17:86:88:56:df:5e:
         a2:2a:72:52:07:1d:02:a6:37:94:df:16:9f:2b:11:3b:3d:48:
         b9:bd:a4:4a:d9:db:b4:44:cd:97:7d:e6:6f:0c:b8:4a:e0:48:
         4d:d3:66:fc:dc:2b:60:69:1d:cf:3a:7c:dc:de:7e:61:a4:a3:
         e9:0f:07:6f:94:97:a5:0a:38:d2:01:c2:64:3e:57:bc:01:15:
         a6:06:e1:cf:4d:09:fe:b0:9a:52:ed:d9:ce:49:17:a1:94:b6:
         70:9f:cf:11:04:15:93:34:2c:51:5b:64:65:b3:6e:5f:ce:83:
         0a:30:73:9c:a1:21:2c:07:c8:c6:5e:59:ca:01:00:d4:1a:62:
         0c:aa:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:18 2024 by rpki-client on console-ams.rpki-client.org