Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
File:                     WtikTa0xXyHqmS_G4QSCxB7N_PU.mft (raw, json)
Hash identifier:          oOHwCUt07pzN4sMp/erU7b/3CONwvcwnMbQfcRCcxjM=
Subject key identifier:   5E:CD:B1:D5:00:8E:59:40:51:D5:B0:6A:FC:08:0F:D5:32:10:27:75
Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
Certificate issuer:       /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Certificate serial:       018F96BE3F1E78C1A35E0ADC4397C8AB5082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
Manifest number:          067C
Signing time:             Mon 20 May 2024 16:03:21 +0000
Manifest this update:     Mon 20 May 2024 16:03:21 +0000
Manifest next update:     Tue 21 May 2024 16:03:21 +0000
Files and hashes:         1: 2LxCXwcdBvnOAshJGnPWvVFHma0.roa (hash: sJcMIIVWJakaN7to4ADKrt8Ln9TEBgGy4sCYmtLKqPY=)
                          2: WtikTa0xXyHqmS_G4QSCxB7N_PU.crl (hash: VPNVlMqDpqQUmcL7b6Uhyn5lX8BxgdC49hWQPBFAKtA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:be:3f:1e:78:c1:a3:5e:0a:dc:43:97:c8:ab:50:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
        Validity
            Not Before: May 20 16:03:21 2024 GMT
            Not After : May 21 16:03:21 2024 GMT
        Subject: CN=5ecdb1d5008e594051d5b06afc080fd532102775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:ce:fa:b7:17:1f:32:23:56:1b:ef:f8:f5:
                    e5:0a:00:1c:13:6f:db:30:93:20:76:b6:06:7e:65:
                    a3:2d:07:e2:1d:b4:bb:44:38:63:a7:e5:00:16:ff:
                    c7:49:7a:4f:8b:6d:9f:70:79:84:f3:6e:6e:0d:c4:
                    54:a8:78:f6:f7:a2:cc:31:60:46:0e:cc:3c:0c:14:
                    c5:e7:0f:5e:ae:6c:0a:ad:40:f0:97:bf:eb:48:f7:
                    7b:9c:f0:a3:1e:15:cc:eb:b8:4e:79:0a:1e:83:22:
                    52:5e:48:43:cf:d2:59:96:70:00:41:e8:42:e3:7e:
                    95:e1:a9:ee:21:c2:07:88:96:af:88:9a:c5:1c:df:
                    3a:ae:40:0f:35:68:8a:cd:7f:4a:0a:dc:ff:f1:74:
                    91:4b:5b:11:10:dd:4c:65:19:7e:d7:52:c7:d7:fd:
                    90:ec:69:0e:8c:ac:ef:f9:01:31:44:d9:15:c0:bd:
                    79:ad:37:4e:b6:37:21:03:c4:c0:18:98:80:a1:7c:
                    b6:f5:3e:f7:9a:f7:58:3a:e3:b0:0b:07:60:1c:c0:
                    cb:3a:87:9f:f6:c2:a5:a3:fa:11:e7:4c:e5:47:75:
                    24:5d:4d:a0:e7:75:d5:53:c4:a9:85:25:95:34:f4:
                    8a:7e:00:23:fa:45:f1:10:7b:36:42:e9:ed:d5:a9:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CD:B1:D5:00:8E:59:40:51:D5:B0:6A:FC:08:0F:D5:32:10:27:75
            X509v3 Authority Key Identifier:
                keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:60:29:83:6b:3a:b6:12:6c:cf:5d:83:c7:24:4a:49:ff:
         fa:96:06:b3:bc:b7:7a:d4:e9:2c:01:39:c9:df:93:53:3c:93:
         42:de:e3:87:9d:fc:72:a8:d1:e1:e7:f6:e3:74:78:d1:e8:83:
         03:90:e7:8a:02:78:b9:ff:42:55:6f:c0:04:83:9c:78:77:23:
         95:0e:98:2c:ad:56:f0:f8:36:40:44:10:72:4a:5a:a3:91:97:
         23:92:8c:29:65:76:33:2b:dc:ed:00:d2:76:e8:cd:86:a3:c7:
         68:7f:2a:23:a6:63:30:7d:b5:48:28:b3:f8:5e:24:39:71:d3:
         d9:fe:54:59:05:f7:23:b5:a2:13:9a:0d:a8:9c:fc:f9:ef:06:
         00:58:cb:ac:a0:6b:2f:68:f7:41:40:a1:56:19:9d:7e:8a:7f:
         46:3e:a8:04:5d:13:6a:18:74:93:77:d1:2a:56:1a:8c:4d:6e:
         2e:9b:ef:69:10:17:f2:37:df:2c:23:5f:c1:48:16:0a:12:e8:
         dd:54:31:7a:4e:82:b9:6d:10:ec:56:28:30:7e:72:85:39:f4:
         e2:9a:70:e2:84:72:4b:ce:7c:0a:59:d1:e9:51:e9:2f:b2:c4:
         0c:76:02:24:9c:67:ec:16:88:e1:fb:b7:97:06:bd:ad:15:d8:
         13:1d:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:56:33 2024 by rpki-client on console-ams.rpki-client.org