Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File:                     wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier:          NBqxbHPHJRS85HNS8uKrKPduuTPvEhBmUUOL75hNZ+U=
Subject key identifier:   6E:E2:84:45:7D:CB:90:9E:F7:0E:4A:F6:08:0F:D5:86:A1:0B:0C:A3
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer:       /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial:       018F889225C2F932840ED254F85F3BEA17F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number:          0F05
Signing time:             Fri 17 May 2024 22:00:30 +0000
Manifest this update:     Fri 17 May 2024 22:00:30 +0000
Manifest next update:     Sat 18 May 2024 22:00:30 +0000
Files and hashes:         1: rqYiJckBMMXDf_2ShIafhNAU8h0.roa (hash: zC9LhD22a/Uv8JhQNMGZSqcc5skNpHM7C1YirkDdTrU=)
                          2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: jJM3kkCiVDhoKT3sblgSGK4AqdW6USWt9F7dEtXDj94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:25:c2:f9:32:84:0e:d2:54:f8:5f:3b:ea:17:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
        Validity
            Not Before: May 17 22:00:30 2024 GMT
            Not After : May 18 22:00:30 2024 GMT
        Subject: CN=6ee284457dcb909ef70e4af6080fd586a10b0ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:69:b4:b0:a9:c9:ac:a7:30:27:c4:5f:c3:
                    06:60:13:76:da:f6:1d:93:c4:c3:26:fa:05:e1:83:
                    da:8d:52:52:76:6c:a6:6d:6a:e8:52:bd:29:c2:a6:
                    c5:3e:72:35:95:f9:ce:ed:cf:63:f9:5c:33:10:d3:
                    2f:2f:48:70:1b:24:cb:e3:d5:f0:52:59:ef:93:59:
                    95:09:b3:83:c5:92:58:bb:63:c9:1f:15:bf:39:09:
                    ef:38:0b:c7:23:9f:52:f8:8c:ce:4f:d5:2e:e9:e9:
                    3c:99:5e:c9:e4:5e:d3:a5:11:fc:6b:3a:73:8b:25:
                    2c:cc:1b:00:0c:d8:2f:b7:89:48:b5:45:69:6d:50:
                    2b:cb:03:3b:b0:ce:d4:b5:f6:7f:24:52:0c:f2:e8:
                    ec:dd:f8:7f:57:24:ed:f4:f6:58:ab:47:bd:4e:8a:
                    53:df:20:a4:83:ac:f1:6c:bb:19:8c:e9:b0:ad:7e:
                    fa:d4:36:54:b7:a8:7e:41:ea:5a:67:d4:9d:b8:79:
                    d3:d9:57:ab:76:bb:19:d5:d9:79:3a:3c:76:e3:25:
                    b8:37:d0:4e:4c:76:8a:d0:32:1d:c6:f8:1c:3e:07:
                    9c:0b:ed:81:7f:30:b3:54:84:df:23:4c:64:cd:cb:
                    6d:f6:fe:54:69:be:f1:59:2f:96:6a:7a:07:40:93:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:84:45:7D:CB:90:9E:F7:0E:4A:F6:08:0F:D5:86:A1:0B:0C:A3
            X509v3 Authority Key Identifier:
                keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:79:4b:f7:ca:0d:a8:d3:0b:38:b6:c9:2d:7a:a8:d8:d7:e8:
         b8:5f:31:32:97:bd:1e:f5:e8:ac:6d:6f:30:c1:ed:91:a9:c5:
         cf:db:44:aa:42:77:53:d8:da:ab:ac:de:83:22:f0:09:58:1e:
         9b:5b:57:e8:35:07:38:c3:67:d2:5a:6c:8d:e9:a9:38:43:e4:
         d2:81:26:e4:87:56:54:e6:f5:87:2d:cf:f2:8a:47:f4:a6:dc:
         fd:7d:ea:15:f9:4e:9f:13:c4:24:8b:b3:6a:d5:d0:7f:8f:5c:
         76:eb:84:00:80:22:50:04:10:33:f9:73:b2:2c:81:2f:ff:09:
         3f:0f:ae:0e:5b:1a:7a:28:a8:f2:f0:50:95:9c:8f:83:7c:12:
         f4:e7:13:99:d9:72:fa:3c:e8:89:78:10:d9:e6:f8:e4:11:56:
         ef:1b:ac:0f:42:cf:4f:aa:2c:1c:be:c1:9c:6a:82:7d:2b:95:
         91:3f:f8:fa:32:74:51:95:ff:68:ac:d8:1a:66:09:3a:43:32:
         1a:3d:4c:8f:35:72:5f:4c:27:5a:61:e1:02:5a:fc:a2:76:b4:
         0a:d3:b4:b5:7f:d0:2f:25:db:d9:48:67:7e:85:01:d3:e8:53:
         72:05:8d:ce:55:62:d5:be:61:a7:ab:95:ec:fc:65:c9:9e:e7:
         13:cd:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:13 2024 by rpki-client on console-fra.rpki-client.org