Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File:                     WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier:          C7Zntr2mlKoaazDY3/F3hXGo9X3YKwhfobsfSUaxaAY=
Subject key identifier:   2D:A0:7E:9F:24:71:8C:93:C4:7B:46:A8:66:89:12:BF:F1:E9:7E:44
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer:       /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial:       018F885B3C07CCFE2B6B618D1806A9518EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number:          0897
Signing time:             Fri 17 May 2024 21:00:31 +0000
Manifest this update:     Fri 17 May 2024 21:00:31 +0000
Manifest next update:     Sat 18 May 2024 21:00:31 +0000
Files and hashes:         1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: UWM/bg3i52TwyaKikWmqazdYPiAX2bCVegbZ2LbMdS0=)
                          2: efYdTowj3f6xLCADplMREZ84JME.roa (hash: URCkLyKc3gYgTk8bG0JnTvIknbc8Dwa0siaT593T+Pc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:3c:07:cc:fe:2b:6b:61:8d:18:06:a9:51:8e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
        Validity
            Not Before: May 17 21:00:31 2024 GMT
            Not After : May 18 21:00:31 2024 GMT
        Subject: CN=2da07e9f24718c93c47b46a8668912bff1e97e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:48:d2:74:88:1d:0e:9a:84:13:b9:23:fd:
                    2e:0b:27:22:7b:54:8a:4e:f6:1f:a0:80:97:c1:52:
                    52:e6:53:35:f1:8f:b0:b4:85:22:fb:30:2d:ee:6b:
                    28:5a:e9:49:c4:11:d1:fa:37:7e:4c:7f:f9:0f:f6:
                    69:83:e6:29:69:b5:16:33:6d:86:51:74:12:3e:fc:
                    02:18:7d:c9:1c:b2:7d:91:c1:85:62:17:4d:18:a0:
                    7d:b3:3e:ba:2e:12:51:60:7e:69:6f:e9:7c:6f:08:
                    d5:1b:da:15:b4:7d:55:c6:83:83:fd:cf:33:29:88:
                    20:8c:b3:64:d4:9d:8d:4b:8d:8c:d9:33:39:09:a3:
                    04:37:73:03:3d:df:69:c4:2d:9d:e3:11:0d:72:0d:
                    ee:f5:7a:15:32:66:10:d6:5a:17:b5:a9:24:e9:94:
                    c5:a8:dc:25:db:41:09:fe:ad:79:e0:23:db:5d:6c:
                    83:bc:6b:b8:a7:fa:67:84:83:e6:7c:a1:d9:e3:06:
                    34:9e:d9:6f:4d:e3:ea:47:c9:6d:76:4d:a3:80:e0:
                    08:2c:26:f3:38:15:83:4e:35:9a:e1:b8:f0:74:96:
                    78:d7:75:01:00:b7:fc:e4:f9:32:29:e7:7b:4a:3f:
                    95:e2:d2:db:2e:40:d2:b1:e9:a7:51:b3:71:1a:77:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A0:7E:9F:24:71:8C:93:C4:7B:46:A8:66:89:12:BF:F1:E9:7E:44
            X509v3 Authority Key Identifier:
                keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:95:d0:84:16:5c:82:5f:db:46:28:02:8b:fb:90:f7:ea:54:
         72:4b:30:dd:89:db:8c:67:a2:37:07:9f:13:f3:4d:9b:80:95:
         0b:e9:e1:1d:02:f5:42:3a:c8:3a:8e:b7:b7:dc:9f:da:5e:88:
         df:af:d2:d6:30:c2:8b:a7:0d:ec:68:7e:a9:0b:d3:62:31:61:
         c2:be:90:d0:f3:78:bd:5f:33:22:7f:80:9c:fa:f6:fe:9c:2a:
         d8:45:af:d9:c2:1f:52:a7:7d:f3:e6:92:86:e3:e3:db:1d:fc:
         b8:d7:52:79:a6:a6:7d:05:78:49:8a:75:aa:73:dd:a1:3c:71:
         e9:ef:2e:cc:c3:06:6b:9c:5f:6c:e7:39:31:e3:d8:77:00:b7:
         84:65:97:ac:37:a5:69:26:cf:b3:ff:a0:94:37:ad:2e:05:23:
         9f:3d:07:23:ae:b3:28:74:d3:e5:84:77:81:da:71:ee:a7:2d:
         7e:a6:6e:c2:fe:2e:1c:c9:db:25:7e:f6:36:98:4d:fd:54:cb:
         2a:7a:55:48:48:03:77:d5:66:18:48:da:60:ab:e7:31:5f:8c:
         5c:d3:41:f2:7b:5f:8e:4c:b4:19:06:cf:5a:d7:eb:be:6b:86:
         4a:cd:78:ac:93:fb:b7:35:ca:86:4e:11:ca:9d:6e:aa:1e:04:
         24:b9:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:15 2024 by rpki-client on console-fra.rpki-client.org