Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File:                     WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier:          NcJUbHcOBJDeEGMwg0lWT3XdG6afOD8SjaKmWApxbJY=
Subject key identifier:   B5:4A:FB:4B:92:94:8F:96:36:50:D6:48:A6:86:83:03:0C:C4:90:C4
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer:       /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial:       018F84B53F7C80009D782D690E76889F66BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number:          0BD6
Signing time:             Fri 17 May 2024 04:00:21 +0000
Manifest this update:     Fri 17 May 2024 04:00:21 +0000
Manifest next update:     Sat 18 May 2024 04:00:21 +0000
Files and hashes:         1: P3ASWQ-jVnQAr4MXI1bMNzJpd74.roa (hash: n0NiU9G/ENmUTyfdsmVSFFjOKeJ35dF8zso+IrjYwZA=)
                          2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: yjAEodlpJqLY5JcEhjVr/UuI4JQRlDkySkPsEwhfhf8=)
                          3: xp1JGS6h3gih6q4UF-e22uE97bI.roa (hash: Nfmr9jCYPjHaHDgOXwsrlhrxZ5fJTKWKHiKyv8n419s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:b5:3f:7c:80:00:9d:78:2d:69:0e:76:88:9f:66:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59877720c014688494ea6910c83474de13e99802
        Validity
            Not Before: May 17 04:00:21 2024 GMT
            Not After : May 18 04:00:21 2024 GMT
        Subject: CN=b54afb4b92948f963650d648a68683030cc490c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:b2:92:4e:51:ff:61:ec:80:27:e3:6a:98:
                    93:0a:2d:25:58:41:89:f3:92:4a:71:94:c5:ec:96:
                    6e:e9:44:b0:75:66:ab:81:c8:e0:e3:35:03:be:c5:
                    3c:06:91:92:df:5c:31:9f:25:3f:1d:53:a6:bb:14:
                    2c:15:1d:16:11:20:ce:3c:8f:d2:53:66:f5:1b:86:
                    b2:98:58:0e:68:41:e4:4b:d6:03:b8:2c:6d:73:6c:
                    09:fb:e4:45:c2:77:48:c4:71:26:92:5d:57:a3:b7:
                    b7:96:75:8c:ae:8d:55:64:ba:b5:1c:7d:9c:c5:33:
                    c1:52:04:3c:df:11:e2:6f:4e:81:90:00:47:21:d6:
                    b0:f0:2c:05:94:17:23:70:08:39:f9:0e:36:a0:13:
                    0b:1b:ef:ed:79:ce:27:43:6a:34:45:8d:07:39:f3:
                    96:1e:32:0d:1f:95:41:5e:a3:41:a1:e0:db:aa:9e:
                    37:82:36:8d:79:54:e6:e1:b9:b5:e2:ea:6e:a6:77:
                    66:e9:07:58:23:85:a1:76:a2:bb:a2:36:19:97:7d:
                    7a:6d:59:d8:c8:4d:82:35:bd:af:9d:28:41:79:3b:
                    d2:a4:97:81:cb:5b:ad:36:f1:d9:92:3f:9b:63:dc:
                    ba:ee:f0:52:81:da:fc:64:e1:c9:ff:a4:d2:bc:e3:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4A:FB:4B:92:94:8F:96:36:50:D6:48:A6:86:83:03:0C:C4:90:C4
            X509v3 Authority Key Identifier:
                keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:47:8d:1a:d1:6e:0f:e2:ff:91:03:1f:d1:ed:24:a3:cd:e9:
         ba:3f:0c:f8:67:32:5f:81:c1:6f:90:50:bd:55:8f:2b:64:ab:
         4d:af:d4:e2:2d:42:63:85:78:bb:4d:99:9b:15:f1:66:2e:ed:
         b2:de:03:94:d4:fd:1c:f2:43:cd:02:b9:e0:17:04:db:e0:7a:
         f1:d7:ca:ec:59:5e:06:f7:f9:8b:9c:b8:98:39:3b:ae:03:14:
         2a:fa:5e:a0:16:31:66:c5:48:ad:4c:0b:47:cb:5a:b4:66:5c:
         e4:1c:67:9f:1d:31:9f:4d:42:2e:93:57:6f:09:05:31:f7:01:
         68:63:ae:cb:d2:6a:46:27:78:84:5e:c9:a3:eb:08:64:a4:0c:
         f0:f3:52:18:ad:df:a8:c4:47:8d:78:af:0b:17:f8:aa:df:78:
         87:8e:1e:9c:ca:83:85:fc:b8:b7:00:09:13:cb:fe:22:67:0c:
         3b:d3:e1:44:f6:d6:06:64:4b:61:2b:8a:0c:20:c0:a2:6e:80:
         65:c3:a7:7c:cd:6e:52:66:41:4a:0d:1b:44:95:d2:59:bf:70:
         a8:8b:3d:4f:16:1a:76:77:e3:81:aa:6b:f1:7d:41:29:d3:7e:
         4c:81:aa:89:be:8f:7c:81:1b:7b:5f:76:5a:69:7f:7e:f8:b8:
         2f:77:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:08:46 2024 by rpki-client on console-ams.rpki-client.org