Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File:                     WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier:          0jNWBO8TX8UekMEUv4dZEpCSGTL4yUfPaT8i2fvArIU=
Subject key identifier:   20:28:B1:E0:3E:AA:F1:E5:B2:AA:A7:1B:33:88:9B:81:C5:BF:2D:E7
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer:       /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial:       018F87B67BDCEE5BB7D237728D26F1C0570F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number:          03D6
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: S1tCR7VUyMn4HPQ03QVKv7CSMnw.roa (hash: CS7wx63xv81M/zhNOvUOkSrcJztPcJvt5nGJZyM5UZM=)
                          2: SAJLFV08vrEJaxLB45p7MgucnQM.roa (hash: at2LpM5YFmu9PYtoyDKsr0Yh2C+nHM+3dhYJTmVhqPk=)
                          3: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: XCSjYuVc7Pdwf63Quqrzi+Vkib6ptp5FCDImwi0k3h0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7b:dc:ee:5b:b7:d2:37:72:8d:26:f1:c0:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=2028b1e03eaaf1e5b2aaa71b33889b81c5bf2de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:67:97:78:bd:f8:29:e8:01:bb:42:8c:03:
                    ee:a2:a7:c6:77:92:65:6c:08:11:6e:b2:b2:45:e4:
                    24:00:ff:91:19:ab:2e:cb:d6:76:ce:42:3e:8b:80:
                    2d:81:23:10:6b:95:42:17:49:5c:0c:b3:21:8a:1f:
                    c6:c8:d4:91:8b:4e:a9:61:9f:c5:8e:c4:15:2f:8d:
                    3d:07:31:7e:a7:ac:cc:34:57:d0:61:ba:8a:4f:53:
                    e6:94:8f:3a:59:65:13:0c:7d:3b:b7:28:e3:94:f7:
                    35:2d:46:6b:fe:6d:18:f0:ff:00:99:47:32:8b:1e:
                    c4:d1:9f:d3:40:3e:cf:f3:5a:1d:6c:4b:7a:98:49:
                    7d:29:b5:46:30:a1:d0:b6:9a:6c:57:ab:78:c5:4b:
                    06:7b:6b:33:12:99:ae:b7:41:d3:0d:79:66:bd:ef:
                    86:0d:00:68:fa:b6:c8:1c:cd:ff:fb:b9:75:50:6f:
                    cb:d3:fc:fd:0d:e4:6a:af:47:f2:ac:b6:dd:c2:70:
                    83:23:63:7e:3c:f6:d5:84:5d:99:95:c4:cd:c3:b5:
                    14:8c:e4:94:99:66:34:72:3f:21:59:9c:8d:04:e8:
                    07:27:08:52:1f:44:9f:a8:7d:97:99:44:d4:db:44:
                    f9:a6:d3:d0:ac:b1:a0:41:bd:f6:ce:7b:88:d5:3f:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:B1:E0:3E:AA:F1:E5:B2:AA:A7:1B:33:88:9B:81:C5:BF:2D:E7
            X509v3 Authority Key Identifier:
                keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:e9:dd:a9:98:20:45:3d:b9:62:8f:e2:12:16:80:0d:d2:
         d7:f5:29:55:75:2c:16:14:fd:b6:8b:11:59:c1:2e:c0:9d:3f:
         07:3f:5d:63:c3:37:97:b8:7a:a2:cb:24:5a:93:2f:5a:25:83:
         22:c0:0e:67:9c:11:7e:c3:78:f5:85:57:ba:3d:db:ce:87:29:
         bd:23:3a:a9:d4:40:aa:b0:16:81:99:8a:4a:bb:87:2b:54:e1:
         31:a8:47:d1:18:0d:21:dc:6b:49:56:96:30:70:ed:71:81:82:
         f6:70:97:c0:2d:dc:89:0e:9b:0a:52:98:9d:8b:27:de:4c:6d:
         be:9e:27:b1:eb:cd:d3:9f:82:e2:48:27:89:db:d0:b2:11:f5:
         1b:c1:cd:b4:eb:38:02:8d:df:30:88:ed:63:e5:8b:32:57:c6:
         1d:1d:1f:99:26:82:b6:81:64:92:62:8a:56:43:02:8c:cf:04:
         3c:4b:0a:50:4b:be:d2:10:de:a4:93:4a:2e:b7:c0:1c:18:02:
         71:6e:41:84:98:72:fd:e2:d5:30:58:c7:20:f9:d5:ab:c8:84:
         ad:1c:1f:c7:bc:7b:77:5e:71:79:3f:bd:b6:06:d1:9e:42:82:
         0c:75:66:44:70:46:8c:42:a6:f5:38:fb:95:dc:ff:72:29:1d:
         9a:0f:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:10 2024 by rpki-client on console-fra.rpki-client.org