Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
File:                     wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft (raw, json)
Hash identifier:          ZA9PGstUN8w+ZpJb5+I0n30aPQXwlE4zH4LKXRGkhPo=
Subject key identifier:   3F:9A:40:5B:54:F1:BF:0C:51:5B:75:30:81:99:D7:60:D8:C5:F8:00
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Certificate issuer:       /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial:       018F885AF871376487D81974E81B645C283D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 21:00:14 +0000
Manifest this update:     Fri 17 May 2024 21:00:14 +0000
Manifest next update:     Sat 18 May 2024 21:00:14 +0000
Files and hashes:         1: WkYaA-tjakXn4pTSH_4CKcmo7gU.roa (hash: DrW4OkBFTUqZRdjKCWYLrbyd66VmauMftDfudpWyQJs=)
                          2: wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl (hash: rPtcyuTctVMVhBC7dDUWEPyUv3R/EPQAOA2cDg9gmoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f8:71:37:64:87:d8:19:74:e8:1b:64:5c:28:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
        Validity
            Not Before: May 17 21:00:14 2024 GMT
            Not After : May 18 21:00:14 2024 GMT
        Subject: CN=3f9a405b54f1bf0c515b75308199d760d8c5f800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:46:2d:55:bf:a0:c1:0f:03:f2:74:84:5e:
                    f2:c1:e0:03:64:e5:33:b5:24:27:f6:1e:2c:20:a1:
                    eb:11:ad:0e:e0:94:bd:48:fb:a3:1b:10:da:4c:de:
                    97:ef:90:f5:01:b7:9a:e6:a9:86:8b:cf:3b:7c:1f:
                    fe:33:5b:c2:6e:1b:d9:78:ce:6d:7f:17:7c:a0:a2:
                    21:1e:8c:ac:15:b4:ff:9f:03:ab:b6:86:84:f2:8a:
                    f0:7f:8d:3c:b7:b6:4e:83:34:5c:6c:57:fc:08:77:
                    35:aa:ba:37:a8:30:44:ec:fd:dc:63:e7:75:96:5c:
                    c6:35:ca:1e:71:c9:d1:a9:e4:2d:58:61:3b:a3:56:
                    a6:70:25:40:d1:73:38:71:dc:3e:5d:16:c4:16:76:
                    4d:0c:db:11:61:c7:6f:89:75:87:df:0d:dd:2a:fd:
                    d4:2e:57:97:34:e5:6f:f5:fd:81:eb:24:c5:84:ca:
                    c3:77:6b:36:33:97:9c:28:8f:1b:79:0d:5f:9b:ec:
                    3b:ea:7e:ed:0a:21:7c:7b:41:c2:9e:77:c8:78:2c:
                    d2:c1:f2:7e:c6:83:2e:e4:2b:ae:6b:d0:e1:b0:d5:
                    5a:d5:5e:5f:75:d1:68:0e:40:32:c5:85:64:e1:e0:
                    f5:d4:a5:d2:39:a6:da:a3:43:1e:7a:c7:f0:83:55:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:40:5B:54:F1:BF:0C:51:5B:75:30:81:99:D7:60:D8:C5:F8:00
            X509v3 Authority Key Identifier:
                keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:99:74:7a:0b:16:79:0b:f9:58:49:91:33:ab:f4:c8:12:d5:
         5e:8d:a6:48:65:8f:97:9d:88:10:5d:4c:c3:78:de:45:e5:4e:
         8d:47:9d:01:ef:30:32:4a:45:d0:01:8f:06:fb:75:ed:aa:ee:
         5e:61:e4:67:a1:d8:36:1e:31:04:b4:a5:7a:36:72:ff:ae:76:
         40:16:9e:b3:ac:82:b3:4f:8f:0b:08:10:0c:28:a2:b9:e4:6e:
         cc:92:41:f6:0a:4a:cd:d2:7b:9f:9e:c3:13:e2:5a:95:6b:a9:
         d0:b1:57:3e:76:69:e6:18:ca:a6:3d:5e:64:5c:ef:d7:4b:36:
         c6:7f:5f:79:a8:7a:3e:e0:a8:31:51:71:e7:e1:f1:81:1d:68:
         c9:c7:42:05:08:bd:7f:8a:b4:1e:52:c2:8b:92:6e:cb:8a:bd:
         3b:ef:ca:3a:a9:d8:c6:82:47:bd:d4:8e:18:f5:7a:0c:8b:2b:
         70:c5:96:09:08:94:98:45:e3:66:14:22:b7:07:fa:38:47:5e:
         4b:61:8c:18:2f:fb:08:67:cb:33:7a:7e:09:62:14:da:81:bf:
         5e:71:4b:4a:dd:74:81:f3:55:2b:b7:75:4d:34:78:33:fa:49:
         e0:13:4e:a1:56:9a:42:f7:44:cb:10:17:78:8b:f3:bc:16:d7:
         3c:51:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:48 2024 by rpki-client on console-fra.rpki-client.org