Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
File:                     wHWxQ7LHigOdslu47hj-klT8kPM.mft (raw, json)
Hash identifier:          WDdtngMYyTWuVHp2qAB6yDpcImTyDyQhAos+z1JVUM0=
Subject key identifier:   BF:E2:61:9E:5C:10:8A:D3:85:6F:16:91:44:3B:FD:99:E3:4C:DF:0A
Authority key identifier: C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3
Certificate issuer:       /CN=c075b143b2c78a039db25bb8ee18fe9254fc90f3
Certificate serial:       018F55147D1FB7C6C6A0DE5CC9E830274F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
Manifest number:          0888
Signing time:             Tue 07 May 2024 22:02:37 +0000
Manifest this update:     Tue 07 May 2024 22:02:37 +0000
Manifest next update:     Wed 08 May 2024 22:02:37 +0000
Files and hashes:         1: wHWxQ7LHigOdslu47hj-klT8kPM.crl (hash: 1HUbRHXw8ex2T12HefDhmJdakUPkq4n8N2uZ8onNh4o=)
                          2: wPgg6cqy6rf9BO8zaD6ucdD8Be0.roa (hash: RdjE7LrYg26BEsRadevOuBVgb+toppFi5F+BXDxpKHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:14:7d:1f:b7:c6:c6:a0:de:5c:c9:e8:30:27:4f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c075b143b2c78a039db25bb8ee18fe9254fc90f3
        Validity
            Not Before: May  7 22:02:37 2024 GMT
            Not After : May  8 22:02:37 2024 GMT
        Subject: CN=bfe2619e5c108ad3856f1691443bfd99e34cdf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:d5:71:1a:08:4b:d1:12:a1:77:41:b9:75:
                    2d:fb:b0:cc:43:2d:4f:16:f7:81:5a:46:d0:78:fa:
                    86:18:3c:83:5d:e2:4b:62:67:6f:58:34:f7:0e:09:
                    c7:7c:59:0e:91:54:81:00:0d:96:c8:ed:c7:44:23:
                    2b:c6:33:be:31:b2:48:69:36:a3:e9:ea:4f:c6:cc:
                    8f:ff:a6:ce:89:d3:95:0e:8f:10:e1:38:9b:f8:d1:
                    5e:a5:67:ac:d7:70:de:63:af:a0:c2:c9:5f:1c:63:
                    7c:28:77:90:75:eb:8f:f0:51:76:ca:c0:be:f1:92:
                    9c:78:8a:85:77:36:86:f0:c1:65:f0:92:42:73:d7:
                    03:8c:d2:f9:56:30:1f:df:94:b3:63:76:0d:31:b1:
                    76:90:34:3c:7d:16:3a:a6:34:2b:65:55:2a:18:8a:
                    34:40:0a:9a:93:3d:8a:7f:8e:78:71:49:c6:db:b0:
                    a4:46:e7:b7:70:36:0e:64:f9:a9:a6:92:3e:1a:1c:
                    ad:6f:07:36:9e:1c:63:f0:4b:54:46:65:c6:2b:2c:
                    ca:6f:5a:c5:c2:ca:f4:0f:7e:02:9f:c7:39:33:76:
                    34:0a:65:23:12:56:7f:03:6c:f6:33:6e:4f:1b:4e:
                    fa:35:f3:ad:50:7c:0d:b2:1a:c0:18:a7:9c:10:79:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E2:61:9E:5C:10:8A:D3:85:6F:16:91:44:3B:FD:99:E3:4C:DF:0A
            X509v3 Authority Key Identifier:
                keyid:C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:91:3b:47:95:2d:b4:73:63:84:e4:8b:27:18:c8:71:e3:
         f6:31:d8:2e:e3:02:b7:b0:e4:9e:f3:ef:b8:4e:c0:48:03:00:
         8b:f2:b5:87:7d:53:2a:68:d8:90:f8:1a:36:bb:11:0f:9e:bd:
         45:d9:d5:52:3d:43:42:1a:c9:09:08:22:9c:53:d5:7e:93:9f:
         9c:d4:52:ad:5f:9c:a0:50:62:19:f0:c5:bf:4f:8f:1a:33:37:
         83:cf:5c:a6:bd:12:1d:8e:e8:56:91:73:b7:e4:36:6c:31:40:
         32:50:1d:fc:5b:77:fe:bb:8b:26:5b:42:e1:cb:fd:1e:f6:9f:
         30:dc:ac:4f:bb:61:92:e2:47:73:f7:e0:5b:f4:5c:87:23:22:
         0e:f5:df:8e:9f:b1:57:e0:c7:aa:26:08:b0:79:a5:f9:d3:ef:
         4b:c7:66:c4:ca:05:25:6e:ea:22:d8:b7:f6:20:22:32:a8:a6:
         f0:25:4b:aa:2d:66:f8:21:7e:f2:f7:bd:0a:7c:71:19:4f:8a:
         a2:39:17:63:15:ad:fa:ab:b7:89:d4:e6:ba:1f:53:fb:4a:4a:
         ea:38:fa:14:bd:66:fb:90:5f:37:ad:f8:4d:e4:83:90:c2:28:
         34:25:c0:6f:89:5a:c1:c9:c5:7a:8f:63:b1:24:19:ed:57:be:
         36:47:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:43:40 2024 by rpki-client on console-ams.rpki-client.org